CISO and faculty by day, adversary emulation/tools by night, bad jokes and memes all the time.

Arizona, USA
Joined June 2021
New on LOLRMM: Ping32, an endpoint management suite from NSecsoft with live screen monitoring, screen recording, file backup and software push. That is everything an attacker wants from a RAT, and they keep using it that way. github.com/magicsword-io/LOL…
2
1
3
205
Mike Manrod retweeted
What an event. We can't thank our speakers, sponsors, volunteers, staff, and most importantly our ATTENDEES enough for being able to make this happen. #BSidesPeoria26 was the most incredible, record breaking, amazing event to date. We thank you all from the bottom of our hearts.
2
4
146
Mike Manrod retweeted
Holy moly, congrats @killa !!! 💥
Congrats to @killa who solved stealmybitcoin.com hours ago but I screwed up which key went on the server (the flag was a root wallet WIF instead of the branch WIF). Check out their awesome writeup here: github.com/KillaBoi/StealMyB…
3
7
276
43,793
Mike Manrod retweeted
Congrats to @killa who solved stealmybitcoin.com hours ago but I screwed up which key went on the server (the flag was a root wallet WIF instead of the branch WIF). Check out their awesome writeup here: github.com/KillaBoi/StealMyB…
29
174
30
1,560
264,377
Mike Manrod retweeted
You know what I could really use right now? A new season of severance. That would heal me.
2
1
29
701
Mike Manrod retweeted
Dearest Mother, I write to you from the cold, glowing trenches of the Operations Center, my knuckles weary from the unending cadence of keypresses. The front lines are in total disarray. A dark day has fallen upon the territory: a great vulnpocalypse has breached our defenses, and the enemy marches through unpatched zero-days with relentless malice. Earlier this morning, Captain Harrison received word that the perimeter firewall had collapsed. A foul exploit, disguised as a harmless web request, swept through our flanks. Before our brigade could deploy the emergency patches, half our domain controllers were captured, their secrets locked behind a cruel ransom note. The battle rages on multiple fronts. Corporal Jenkins fought valiantly to revoke elevated privileges before he was isolated by a sea of phishing emails, while young Private Miller spent three grueling hours attempting to restore the active directory from a tape backup that was, alas, corrupted six moons ago. We are low on provisions. The coffee rations have been depleted since mid-day, and the incident response playbook offers little solace against the tide of incoming alerts. Yet, we hold the line. We have severed the external VPN, fortified our remaining subnets with local firewalls, and declared a state of zero trust across the camp. If the server racks hold through the night, we may yet push back the threat actors and compile a post-mortem report before Sunday break. Give my fondest regards to the neighborhood. Tell them that though the packets fall heavy around us, your son remains uncompromised. Your faithful servant, - Captain Tib3rius
8
7
57
2,547
Replying to @CroodSolutions
There's been an update!
It has finally happened... After fiercely battling the vile bot swarms, I've reached the first of many epic milestones: 100 FOLLOWERS!!! I'm grateful to all of you who are here. It's thanks to your support that the future of my time here will be built on a strong foundation!
1
1
1
51
Mike Manrod retweeted
4
4
1
28
2,035
Mike Manrod retweeted
Grub is KING
81
795
37
9,739
101,847
Mike Manrod retweeted
Someone has created a vulnerable PHP website, loaded it with a Bitcoin wallet, and challenged the Internet to hack into it and they can keep the Bitcoin. It has a running timer to show if the PHP exploitability was over-hyped. stealmybitcoin.com/
159
420
131
5,879
1,935,068
Mike Manrod retweeted
VC guys and founders posting profound revelation about cybersecurity strategy “We need a larger swarm!! We’re at 700 patches per second, but they keep attacking! We need 1200 patches per second!”
Replying to @hannahwithfur
this has been talked about extensively you're just 21
11
10
3
185
7,200
Mike Manrod retweeted
Trying out a new private key strategy
4
12
1
109
2,040
Mike Manrod retweeted
If you’re taking cybersecurity advice from someone who posts like this, I have bad news for you: you’re definitely going to get hacked.
46
34
5
387
17,151
Mike Manrod retweeted
The infinite money glitch. Claim the technology your company is developing is capable of ending cybersecurity, but not before it creates vulnpocolypse.
7
2
1
42
3,409
Mike Manrod retweeted
🚨New 0day inbound, windows2shell🚨 Can compromise any Windows host. Potentially 70% of the internet is affected. Tweet-able PoC: cmd.exe/powershell.exe Can’t be patched (/S lulz)
New 0day inbound, wsl2shell 🚨 Can compromise any Windows laptop running VS Code. Potentially 99% of developers affected. PoC: wsl -d Ubuntu Can be removed 👀
21
24
1
249
19,517
Two more EDR killers just landed on LOLDrivers, both from Jehad Abudagga's (@j3h4ck) KillerLand research. Same BYOVD play: load a signed driver, hand it a PID, and let the kernel terminate the security tools for you. github.com/redteamfortress/K…
4
55
209
8,184
Mike Manrod retweeted
There will be more bugs. There will be more *bad* bugs. Be thankful when we find them before threat actors do because it’s worse when we don’t.
9
10
3
145
5,385
Hey. I just wanted to let you know that plex2shell also came out recently. zmain.info/blog/plex2shell Good night.
2
6
43
4,907
Update to #PHP2Shell Alert: SIGMA rule helps identify potentially suspicious activity & incorporated partner resources. If your org can't update immediately or uses unsupported PHP 8.1 or earlier versions, take affected PHP-based systems offline until patched or updated.
🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗 go.dhs.gov/5Hi
17
72
8
250
22,627
Mike Manrod retweeted
Sorry folks, we have a confirmed PHP compromise with post-exploit activity. Still not the widespread outbreak we all braced for, but it’s actively exploited in the wild. Updated threat brief: unit42.paloaltonetworks.com/…
23
107
14
355
77,008