Pinned Tweet
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
1
2
C Sto retweeted
And for anyone that doesn't want to read the blog post, the tooling is here: github.com/redskal/obfuscatx…
C Sto retweeted
Operational security is always a big topic in the information security industry, but I doubt most red team consulting firms consider the importance of program security. Tooling and techniques leveraged in one operation can directly affect the security and success of another
C Sto retweeted
From the top: Snaffler not Snaffle, they didn't mention @sh3r4_hax , it isn't an AD audit tool, it doesn't help with "collection analysis and reporting" of pentest data, it's still not called snaffle, it's not especially user friendly, it doesn't collect network and system (1/n)
This quoted post is unavailable.
C Sto retweeted
New blog post: PwnAssistant - Controlling /home's via a Home Assistant RCE
elttam.com/blog/pwnassistant…
C Sto retweeted
We were looking at Home Assistant as a team recently and identified a Critical pre-auth vuln that led to RCE (CVE-2023-27482), have a read of the discovery process and details #homeassistant #CVE
New blog post: PwnAssistant - Controlling /home's via a Home Assistant RCE
elttam.com/blog/pwnassistant…
C Sto retweeted
yes, please do enlighten me. email me at [email protected]
Hello @GretaThunberg
I have 33 cars.
My Bugatti has a w16 8.0L quad turbo.
My TWO Ferrari 812 competizione have 6.5L v12s.
This is just the start.
Please provide your email address so I can send a complete list of my car collection and their respective enormous emissions.
C Sto retweeted
You've seen Advent of Code, now get ready for Ramadan of Code. It's 30 days of no coding.
C Sto retweeted
Thanks to a lot of help from @C__Sto and his BananaPhone repo, I was able to get indirect syscalls to work in go! github.com/susMdT/go-indirec…
C Sto retweeted
would be pretty hilarious if twitter disappeared and i went on to lead a peaceful life full of meaning and beauty. like lmao
C Sto retweeted
This is gonna be a “won’t fix” from us, so will be a reliable signal for threat hunting. If you expose your control interfaces you deserve to get a caught :-)
Additionaly you can also use @shodanhq for Hunting Sliver C2 Infrastructure
ssl:multiplayer ssl:operators
shodan.io/search/facet?query…
ssl:multiplayer ssl:operators ssl.jarm:"00000000000000000043d43d00043de2a97eabb398317329f027c66e4c1b01"
shodan.io/search?query=ssl%3…
C Sto retweeted
The good people at @PentesterLab have again given us 8x 12 month, 8x 3 month and then also a bunch of one month subscriptions for prizes and giveaways through #WACTF! 🙏🙏🙏
C Sto retweeted
Much of hacking is about understanding systems better than those who built them, and using that knowledge to do what is supposed to be "impossible".
C Sto retweeted
You: "Why even try to do cybersecurity if hackers are computer geniuses"
Actual hackers:
I wonder if the attacker found out why the tool didn't work 🤔🤪 Solely copying & pasting the command line won't do the trick 🙈
Reference:
icyguider.github.io/2022/05/…
#CyberSecurity
C Sto retweeted
New blog post: Golang code review notes - A quick summary of some of the bug classes in Go elttam.com/blog/golang-coder…
