Christian. Husband/Father. Veteran. Hacker @TrustedSec. Speaker. Gamer. Geek. Jedi. Chaotic Good.
127.0.0.1
Joined May 2008
- Tweets6.4K
- Following1.3K
- Followers2.1K
- Likes9.9K
Pinned Tweet
Just released ntlmscout, a single-file, zero-dependency recon tool for internet-exposed NTLM endpoints. Combines the best parts of several tools all in one.
Decodes the Type-2 challenge across HTTP/SMB/MSSQL/mail/LDAP/RDP, recovers the internal IP (OXID, IIS host-header, cert SANs), flags DCs, and sprays lockout-safe.
Hack the Planet!
github.com/boydhacks/ntlmsco…
The media is calling this “Black October” for infosec/CVE’s.
I hate to burst the bubble, but with the world having such easy access to AI, this is only the start. Every skid with a terminal is going ham right now.
I’m honestly surprised it’s taken this long to get this flooded.
David Boyd retweeted
hashcat v8.0.0 released!
The largest update in the history of hashcat, with PCFG attacks, hash recipes that crack hashes without a hash-mode, and bcrypt on FPGA boards.
Release notes: github.com/hashcat/hashcat/b…
Download: hashcat.net/hashcat/
David Boyd retweeted
Someone has created a vulnerable PHP website, loaded it with a Bitcoin wallet, and challenged the Internet to hack into it and they can keep the Bitcoin. It has a running timer to show if the PHP exploitability was over-hyped. stealmybitcoin.com/
David Boyd retweeted
The internet dodges a bullet and gets 2–3 extra days, maybe more, to patch PHP.
Meanwhile, InfoSec “Don’t worry, we’ll get a point and shoot exploit working for everyone.” Also InfoSec “Hopefully I didn’t vague tweet enough details for someone to piece it together.”
I’m about as pro OST as it gets, and I still can’t understand the logic on this one.
Php2shell…so many vibe coded slop enum scrips, 0 working exploits. Articles and bloggers overhyping what amounts to basically nmap commands. There are far too many versions of PHP for there to be a quick, working point and shoot exploit. It will take time and effort.
m.youtube.com/watch?v=BV6Lal…
Y’all need to be extra cautious running these PHP exploits that are out in the wild.
At this point, finding a legitimate PoC is harder than finding a real Rolex on Canal Street.
David Boyd retweeted
Time to update the CISSP exam
xitter.cf/Polymarket/status/2112…
David Boyd retweeted
Unleash your cybersecurity superpowers at @BSidesColumbus, November 4-5! Be sure to join @curi0usJack and @L1NKD34D for their two-day session, “Supply-Chain to Runtime - RedTeam”—an offense-only training on attacking the modern DevOps stack. Register now! hubs.la/Q04B9XXj0
David Boyd retweeted
I saw a lot of posts to this, I think there is a lot of confusion on this program in general. This isn't the generally available Daybreak Blue that you can go through verification for.
This is the Daybreak Defense Network - only a handful of companies which allows for their advanced Daybreak Blue and Red models.
It was a lengthy process to get approved, and we are integrating these capabilities into our offensive and defensive capabilities. Truly appreciate the folks at OpenAI working with us during this.
As frontier models get a handle on appropriate safeguards and verification processes, I truly believe they should open these programs up to more companies and individuals in order for both research, offense, and defense to become stronger.
David Boyd retweeted
God Bless America
🚨 BREAKING 🚨
ATF Releases NFA guidance in response to the Texas NFA lawsuit:
"Effective October 9, 2026, ATF will no longer require individuals to seek ATF approval under the NFA before making or transferring short-barreled rifles, short-barreled shotguns, silencers, and “any other weapon[s]” as defined in 26 U.S.C. § 5845(e). ATF will also no longer require such items to be registered in the National Firearms Registration and Transfer Record. These policies apply uniformly to anyone otherwise subject to these requirements, not just to the plaintiffs in the litigation."
David Boyd retweeted
It's been a great day at @WWHackinFest and the fun is still going! Stop by our booth, say hi to this guy and the team—we'd love to connect. While you're there, grab some awesome swag 🤠
