๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ (@CurtBraz) header
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ (@CurtBraz) profile picture

๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ

@CurtBraz

Cybersecurity researcher/blogger/pentester. Try to tweet only technical/educational but occasionally post about https://teapawt.net/t.co/MTZoEINlWg ๐Ÿ™‚

 Indianapolis, IN
phishu.net
Joined October 2011
  • Tweets3.9K
  • Following871
  • Followers2K
504Media
Photo by ๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ (@CurtBraz)Photo by ๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ (@CurtBraz)Photo by ๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ (@CurtBraz)Photo by ๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ (@CurtBraz)Photo by ๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ (@CurtBraz)Photo by ๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ (@CurtBraz)Photo by ๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ (@CurtBraz)Photo by ๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ (@CurtBraz)Photo by ๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ (@CurtBraz)Photo by ๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ (@CurtBraz)
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
International Cyber Digest (@IntCyberDigest) profile picture
International Cyber Digest
@IntCyberDigestOct 17
๐Ÿšจ BREAKING: AI coding agent OpenCode was breached in what it calls a "large scale distillation attack". OpenAI and Anthropic keys saved by 1.4% of its Console users have been exposed after intruders hit a legacy system. One developer says their keys ran up $400+ overnight.
Image from International Cyber Digest (@IntCyberDigest)
Image from International Cyber Digest (@IntCyberDigest)
29
55
4
411
31,829
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
/r/netsec (@_r_netsec) profile picture
/r/netsec@_r_netsecMay 28
New Phishing Technique - Vaultjacking: One Captured PIN, the Entire Google Password Manager Vault phishu.net/blogs/blog-vaultjโ€ฆ
Vaultjacking: One Captured PIN, the Entire Google Password Manager Vault

Vaultjacking: One Captured PIN, the Entire Google Password Manager Vault

An end-to-end Adversary-in-the-Middle attack against synced passkeys in the PhishU Framework. Capture the GPM PIN at sign-in, add an operator-owned passkey for persistence, then unlock the entire...

phishu.net
7
12
1,172
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
cryptonews (@cryptonewsfeeds) profile picture
cryptonews
@cryptonewsfeedsMay 28
New phishing meta just dropped: Vaultjacking. One captured 6-digit Google Password Manager PIN = attacker gets your entire synced vault. All passwords. All passkeys. Banking, crypto, email, work SSO - the whole jackpot. Google's "convenient" sync layer turns out to be one weak PIN away from total compromise. No device needed, pure Adversary-in-the-Middle magic. Remember when we were told password managers + passkeys would save us? Turns out they just created a juicier single point of failure. "Trust us with your passwords" - famous last words. Stay safe out there. phishu.net/blogs/blog-vaultjโ€ฆ
Vaultjacking: One Captured PIN, the Entire Google Password Manager Vault

Vaultjacking: One Captured PIN, the Entire Google Password Manager Vault

An end-to-end Adversary-in-the-Middle attack against synced passkeys in the PhishU Framework. Capture the GPM PIN at sign-in, add an operator-owned passkey for persistence, then unlock the entire...

phishu.net
2
2
125
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
Sean Goodwin (@0xSeanG) profile picture
Sean Goodwin
@0xSeanG13 Aug 2025
New board book from @CurtBraz is in! โ€œS is for Spear Phishing" cybersecurityabcs.com #SisforSpearPhishing #CybersecurityABCs
Image from Sean Goodwin (@0xSeanG)
1
1
1
170
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
Ayman Elsawah โ˜•๐Ÿ‘‹๐Ÿผ (@coffeewithayman) profile picture
Ayman Elsawah โ˜•๐Ÿ‘‹๐Ÿผ@coffeewithayman5 Oct 2023
My kid had to draw a favorite character from a book today and the choice was "M Is For Malware" by @CurtBraz! ๐Ÿ˜
Image from Ayman Elsawah โ˜•๐Ÿ‘‹๐Ÿผ (@coffeewithayman)
1
2
6
509
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
@guidepointsec (@GuidePointSec) profile picture
@guidepointsec
@GuidePointSec18 Apr 2023
Tristan Morris welcomed guest host, Curtis Brazzell [@CurtBraz] on the April 14 GPS Live. Listen now to hear a discussion on "Juice Jacking", the EU AI monitoring, and the logistics of the leaked documents still making the news. Watch it here: okt.to/rNgK2W
GPS Live | April 14, 2023

GPS Live | April 14, 2023

This week on GPS Live, Tristan and Curtis discuss the public chargi...

youtube.com
2
1
309
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
Troy M. Best (@troybest) profile picture
Troy M. Best@troybest1 Feb 2023
In our latest GPS Live, Tristan Morris and guest host Curtis Brazzell [@CurtBraz] discuss the #CryptoAPI vulnerability reported by the NSA, #HIVE #ransomware group site seizure, and the ongoing Riot Games League of Legends source code auction + much more. okt.to/MrpFCR
Image from Troy M. Best (@troybest)
1
1
1
249
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
Beau Bullock (@dafthack) profile picture
Beau Bullock
@dafthack28 Nov 2022
Just made a minor update to MFASweep to cover the other conditional access device options and also added in a concise results summary. github.com/dafthack/MFASweep
Image from Beau Bullock (@dafthack)
5
64
237
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
Milos Constantin โ™(@Tinolle hachyderm.io ) (@Tinolle) profile picture
Milos Constantin โ™(@Tinolle hachyderm.io )@Tinolle7 Sep 2022
Combination of evilginx2 and GoPhish. github.com/fin3ss3g0d/evilgoโ€ฆ
5
112
1
467
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
The Hacker News (@TheHackersNews) profile picture
The Hacker News
@TheHackersNews23 Aug 2022
U.S. #cybersecurity agency CISA warns of active exploitation of a high-severity reflected/amplified DoS attack #vulnerability (CVE-2022-0028) in Palo Alto Networks' PAN-OS. Read details: thehackernews.com/2022/08/ciโ€ฆ #infosec #technews #hacking #cyberattack
CISA Warns of Active Exploitation of Palo Alto Networks' PAN-OS Vulnerability

CISA Warns of Active Exploitation of Palo Alto Networks' PAN-OS Vulnerability

U.S. cybersecurity agency CISA warns of active exploitation of a high-severity reflected/amplified DoS attack vulnerability (CVE-2022-0028) in PAN-OS

thehackernews.com
63
3
110
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
Naksyn (@naksyn) profile picture
Naksyn@naksyn1 May 2022
"Functional illiterates" is a thing even in infosec community: curtbraz.medium.com/exploitiโ€ฆ TL;DR Never run PoCs without checking @CurtBraz
1
2
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
Labman (@Amarjit_Labu) profile picture
Labman@Amarjit_Labu22 Apr 2022
Beware of this "fakesploit" perpetrating to be a PoC for CVE-2022-26809. github.com/HellKnightsCrew/Cโ€ฆ Last year @CurtBraz carried out an experiment that taught me a valuable lesson to read code before running any POC. Today it pays off.
3
3
1
9
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
Jack Rhysider ๐Ÿดโ€โ˜ ๏ธ (@JackRhysider) profile picture
Jack Rhysider ๐Ÿดโ€โ˜ ๏ธ
@JackRhysider14 Mar 2022
Cheap pen testers cost the most money.
26
57
8
573
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
DIRTY BUBBLE MEDIA: GOOD LUCK, GOOD BYE. (@MikeBurgersburg) profile picture
DIRTY BUBBLE MEDIA: GOOD LUCK, GOOD BYE.
@MikeBurgersburg20 Feb 2022
IT'S OPEN SEASON ON @OPENSEA AS SYSTEM HACKED, USERS TAKEN FOR MILLIONS IN ETHEREUM AND #NFTs @Bitfinexed @SilvermanJacob @molly0xFFF @zachxbt @coffeebreak_YT
Image from DIRTY BUBBLE MEDIA: GOOD LUCK, GOOD BYE. (@MikeBurgersburg)
This Post is from an account that no longer exists. Learn more
21
64
65
171
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
Gil Dabah (@_arkon) profile picture
Gil Dabah@_arkon26 Jan 2022
Found it two years ago. Not recently. Thatโ€™s the point.
Gil Dabah (@_arkon) profile pictureGil Dabah@_arkon26 Jan 2022
That feeling when you find the bug already and now it's in the wild :( Here's the POC github.com/gdabah/win32k-bugโ€ฆ googleprojectzero.github.io/โ€ฆ
1
1
4
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
Burp Suite (@Burp_Suite) profile picture
Burp Suite
@Burp_Suite13 Dec 2021
You can now scan for Log4Shell (CVE-2021-44228) using Burp Suite Pro or Enterprise Edition by installing @SilentSignalHUโ€™s Log4Shell Scanner from the BApp Store. portswigger.net/bappstore/b0โ€ฆ
Image from Burp Suite (@Burp_Suite)
11
315
12
893
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
Ryan Elkins (@ryanelkins) profile picture
Ryan Elkins@ryanelkins29 Nov 2021
๐ŸŽ Looking for gift ideas for your kids? This coloring book by @CurtBraz is absolutely worth it! High quality, fun, and never too soon to get your kids interested in securityโ€ฆ Cybersecurity ABC's Coloring Book amazon.com/dp/057896659X/refโ€ฆ
1
1
1
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
mr.d0x (@mrd0x) profile picture
mr.d0x
@mrd0x16 Nov 2021
If you rename procdump.exe to dump64.exe and place it in the "C:\Program Files (x86)\Microsoft Visual Studio\*" folder, you can bypass Defender and dump LSASS.
Image from mr.d0x (@mrd0x)
46
1,097
64
3,241
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
Ryan Dewhurst (@ethicalhack3r) profile picture
Ryan Dewhurst
@ethicalhack3r4 Nov 2021
I'm excited to be able to let you all know that WPScan has been acquired by @automattic @jetpack. I want to thank everybody that has ever supported me and believed in me. jetpack.com/2021/11/04/jetpaโ€ฆ
Jetpack Acquires WordPress Vulnerability Database WPScan

Jetpack Acquires WordPress Vulnerability Databaseย WPScan

Jetpack is acquiring WPScan, a WordPress vulnerability database used across the WordPress ecosystem to learn about new vulnerabilities.

jetpack.com
32
34
7
191
๐‚๐ฎ๐ซ๐ญ๐ข๐ฌ ๐๐ซ๐š๐ณ๐ณ๐ž๐ฅ๐ฅ retweeted
Elliot (@ElliotKillick) profile picture
Elliot@ElliotKillick3 Nov 2021
Need to go under the radar downloading #mimikatz (and other suspect payloads)? Then newly discovered #lolbin "C:\Windows\System32\Cmdl32.exe" (signed by MS) is for you. It's like a new certutil.exe but absolutely unheard of by any antivirus software!
39
1,012
31
2,842
Load more