Conor Richard

Cyber, OSCE, OSWE, OSCP Certified, Knowledge Seeker, and my opinions are my own.

[Conor Richard @xenosCR]

I did a bit of research and learning and have blogged about it an released some code. I wanted to understand Nirvana Hooks, specifically in x86. So I did a thing:

https://t.co/EaygKMJmmb
https://t.co/8eNYoiJ8Tg

[Conor Richard @xenosCR]

@gabsmashh @pentest_swissky They're going to accommodate the request... https://t.co/UM8v25B6KK

[Oddvar Moe @Oddvarmoe]

Well well! Microsoft removed the Windows version checks to use AppLocker! Everyone can now use AppLocker!

https://t.co/s0gqOJys9M

[Dr. Anton Chuvakin @anton_chuvakin]

I love detection engineering, I think it is awesome and hugely needed, and its the future and all that. But I have no idea how to talk about it to a team of 1 (ONE) running a SIEM ...

[Claudio Criscione @paradoxengine]

Repeat after me: vulnerability management is not incident response.

We see an RCE a week, why do we randomly select a few to be OMGTHISBAD and scramble?

All those other RCEs being discriminated are sad... and still popping you.

[Conor Richard @xenosCR]

Technically unemployed for a few days. New adventures await starting Monday!

[Conor Richard @xenosCR]

@bohops Barely squeaked into the new parent in my 30s category but, this is true.

[Jeffrey Snover @jsnover]

Priorities are not what you say, they are what you fund.

Culture is not what you say, it's what you reward.

Action is a lie detector.

[Conor Richard @xenosCR]

@HowtoADHD No...

[Dune Quotes @DuneQuoteBot]

Once men turned their thinking over to machines in the hope that this would set them free. But that only permitted other men with machines to enslave them.

[Mohamed El Azaar @med0x2e]

@HackingLZ Some immature companies (ex; no SIEM or whatever) tend to go for RTs before PTs for leverage. mainly to get management to take a seat in the same room, listen, and take security more seriously ($$$).

[bohops @bohops]

I guess the general points are:
- We need more people to contribute to the profession
- We need to encourage people to share (coaching and validation are acceptable)
- The community that shares defensive content is smaller IMO. It would be great to see others in this space

[bohops @bohops]

The leap that it takes to publicly share infosec knowledge/content is generally underappreciated.

Often, folks who want to share with the community do not out of anxiety/fear of acceptance/etc.

And then, there is the asymmetry of those who share offensive content vs defensive.

[bohops @bohops]

Be a perpetual student. Expertise is a snapshot in time that eventually fades away.

[bohops @bohops]

#LOLBAS hit 5000 stars on GitHub to bring in the New Year! Thank you all for the support over the years - it truly is a community project!

Big shout out to @Oddvarmoe🙏, @xenosCR, @ConsciousHacker, @liamsomerville, @Wietze, and @_josehelps for all the hard work to keep it going!

[Conor Richard @xenosCR]

This is bad. What about accounts of the deceased? Things that should remain part of the public record?

[Elon Musk @elonmusk]

Twitter will soon start freeing the name space of 1.5 billion accounts

[Conor Richard @xenosCR]

@bohops Still my response...
https://t.co/flO7y2vZjF

[Conor Richard @xenosCR]

@bohops Ohhhh... I thought we were friends. 🤣

[Conor Richard @xenosCR]

@ustayready I did and same on running my own. I had 3-4 BBS' I would pop onto daily to play.

[Conor Richard @xenosCR]

@NRG_03 @[email protected]

Yes a typo

[PortSwigger Research @PortSwiggerRes]

Stealing passwords from infosec Mastodon - without bypassing CSP

https://t.co/kXIqj3tpAU