Thomas Hutchison

Security Engineer ❤+💙=😈 Will travel the world for the beautiful game💚💙Opinions are my own.

[Container Security CTF @CtfSecurity]

Come play in one of two Kubernetes Capture the Flag events we're facilitating at #DEFCON 33!

Fri – Sun: Learning CTF
Saturday: Competitive CTF

First Place Prize (for a team on-site at DEF CON) is a Bambu Labs A1 Mini 3D printer!
https://t.co/TPLudXsKCt

@defcon
#DEFCON33

[Thomas Hutchison @wanderinghacker]

@MSFTBlueHat #BlueHat

[Thomas Hutchison @wanderinghacker]

@anthonyspiteri @Securityblog Only issue I have with this device is that the 8 ports share the same bus and that does limit actually getting GbE speeds. You should be all good if you have a switch you can run 10G SFP+ to.

[Andrew @4ndr3w6S]

W00t the release begins 😈. For the last 6 months @mega_spl0it and myself have been looking into DACL-based attacks and detections.

Please join us on this journey with our first part (1A)!

[Beau Bullock @dafthack]

If you want to check out my talk from yesterday on exploiting M365 vulns you can watch it here: https://t.co/5OtJOaKG1L
This is the "prequel" to what @424f424f and I are releasing at @WWHackinFest in a couple weeks, and includes a few easter eggs.🧐

[Seattle Sounders FC @SoundersFC]

Five decades later, you continue to shape our identity. ❇️

[Thomas Hutchison @wanderinghacker]

@NetsecJoe @Enphase @SunnovaEnergy

[Mobile Hacker @androidmalware2]

Public WiFi: Quick demo for 2 devices on the same network

1. SSLstrip + DNS change leads to user input interception for HTTPS with HSTS bypass
2. DNS spoofing redirects user to attacker controlled website

More in upcoming "NetHunter Hacker XIII: Overall guide to MITM framework"

[Silas Cutler (p1nk) @silascutler]

Qakbot uninstaller from @FBI

https://t.co/4uJvSXuDrE
https://t.co/B5Hld31EXQ

[Justin Elze @HackingLZ]

Microsoft providing the finest quality C2 channels and supporting signed binaries.

[Andy Robbins @_wald0]

There are only TEN days left to get your LIMITED EDITION BloodHound CE launch shirt!

ALL profits go DIRECTLY to @StJudeResearch

Get your shirt here: https://t.co/oUMpMEcXXO

[sneakerhax @sneakerhax]

New Github repo Arsenal-containers!

Moving Arsenal containers into their own repo for automation purposes 📦

https://t.co/f2hfxXVUjP

[BleepingComputer @BleepinComputer]

Kali Linux 2023.3 released with 9 new tools, internal changes - @LawrenceAbrams
https://t.co/gf5zRSHuuA

[DirectoryRanger @DirectoryRanger]

Azure Security Resources and Notes
https://t.co/yNIsJe18Wl

[Fabian Bader @fabian_bader]

Firefox on Linux is now supported for #FIDO2 in #EntraID

#AAD #Passwordless

https://t.co/ZWGcbzwZyk

[DirectoryRanger @DirectoryRanger]

AzureHunter. A Cloud Forensics PowerShell module to run threat hunting playbooks on data from Azure and O365, by @DarkQuassar
https://t.co/MzVjcWkhih

[Paul Asadoorian @[email protected] @securityweekly]

Learning Linux with pictures. I think we need an entire series of these for folks just starting with Linux

[Silent Push @silentpush]

Here's how to use our free Community Edition to get an instant list of all TXT records associated with a domain.

Filter, order and copy results and pivot through metadata or hash values using a one-click reverse lookup.

Sign up for free 👉 https://t.co/IdYNjT5tOe