Michael

Senior Security Engineer (R&D)

[Michael @WhiteHatTSA]

@bcherny Yes! Been doing this manually with sleep.

[Prof. Lee Stott @lee_stott]

Want to up your game in AI development? Get familiar with Model Context Protocol (MCP) Start with MCP for Beginners and level up your skills: [https://t.co/AHZJExqsoe](https://t.co/AHZJExqsoe) #AI #Developers #MCP

[Michael @WhiteHatTSA]

@dwizzzleMSFT

[Michael @WhiteHatTSA]

Indirect Prompt Injection is going to be huge: https://t.co/hOYYaWzzL4

[John Lambert @JohnLaTwC]

I spoke at @MSFTBlueHat last week.
➡️https://t.co/o2sBiMLxHi
I will follow up with a link to the recording when it is posted.

Some highlights from my talk below👇👇👇

[Richard Johnson @richinseattle]

With a good understanding of all the tech available under the hood in AFL++/libAFL, fuzzing can discover vulnerabilities that are difficult for expert exploit writers to trigger even with knowledge of the patch. No custom harness needed for this one! (cf: https://t.co/rkBv47kisX)

[Haifei Li @HaifeiLi]

Another awesome blog post I recently read - Fuzzing Windows Defender.

https://t.co/oNWqwrZqDz

[Bilgin Ibryam @bibryam]

A Visual Guide to SSH Tunnels by @iximiuz
https://t.co/9dL3whbcn2

[scriptjunkie (Matt) @scriptjunkie1]

New Year's resolution: Start using strict outbound firewalls
This is tough on Windows without sketchy 3rd-party code since no built-in tools show where svchost is hitting and why. So use this script. It beats scrolling event logs wondering what raw IPs are
https://t.co/X0upR2ViKi

[Stephen Sims @Steph3nSims]

Introduction to Linux Heap Internals https://t.co/jMCoGd2uPo

[White Knight Labs @WKL_cyber]

Starting the second day of our Offensive Development course at Wild West Hackin' Fest! #wwhf

[Randori Attack Team @RandoriAttack]

The following non-malicious request can be used to test susceptibility to the @springframework 0day RCE. An HTTP 400 return code indicates vulnerability.

$ curl host:port/path?class.module.classLoader.URLs%5B0%5D=0

#SpringShell #Spring4Shell #infosec

[Dirk-jan @_dirkjan]

I was getting tired of requesting access tokens all the time during my Azure research. So I wrote a small tool that takes the creds for the identity I want from a KeePass file, and uses Selenium for an interactive sign-in including MFA handling. Lazy life ftw.

[mpgn @mpgn_x64]

Big news, CrackMapExec now supports RDP protocol 🎉
This is no crappy freeRDP python wrapper behind this but the integration of @SkelSec 's aardwolf lib (available on @porchetta_ind only) 🔥

Pushed on @porchetta_ind for sponsors 🪂

[Julia Ioffe @juliaioffe]

Man, the media should really pull back the 150,000 troops with which it has surrounded Ukraine.

[Zion Leonahenahe Basque @mahal0z]

Love using Binary Ninja but also looking for a way to use your reversing work in GDB? Decomp2GEF V1.2.0: Binary Ninja Support is out! Sync reversed symbols from Binja to GDB natively on-the-fly! 1.5 Min Demo: https://t.co/M2IZd0fmi3. Code link in the thread.

[Mike Felch (Stay Ready) @ustayready]

Nice EDR bypass using file names.. may or may not be more like this if you look hard.

[bugcrowd @Bugcrowd]

When you encounter a 403 Forbidden page 🚫 , try adding an "X-Client-IP" header with the value "127.0.0.1" #bugbountytips ✌🏽

[scriptjunkie (Matt) @scriptjunkie1]

This is happening today! See you there!
https://t.co/0GDGMUxWWN