@MatthewFreilich

Pen Tester, Embedded & Medical Device Security Researcher

Joined June 2012
  • Tweets288
  • Following677
  • Followers166
28Media
Matthew Freilich retweeted
Nathan Smith@Nate_Sm1th13 Aug 2023
The talk has continued, DM me for details.
1
3
160
💚 We put our hearts in to this #biohackingvillage @defcon and so did they @So11Deo6loria, @Nate_Sm1th and @MatthewFreilich from @Protiviti. #badgelife #defcon31
36
46
6
271
32,535
The @nytimes graphic department postulates the future of AI’s takeover of humanity includes a rendition of the Bear modded @Prusa3D printers.
263
DEF CON 30 badge firmware…they’ve got jokes
1
Line moves quickly
1
Matthew Freilich retweeted
stacksmashing
@ghidraninja9 Aug 2022
$5 iPhone JTAG setup - can’t wait to share the details at @defcon!
Picture of an iPhone with a lightning cable connected to a raspberry pi pico

ALT Picture of an iPhone with a lightning cable connected to a raspberry pi pico

17
105
3
766
Matthew Freilich retweeted
Moxie Marlinspike
@moxie10 Jan 2022
It's a new year! I've decided it's a good time to replace myself as the CEO of Signal: signal.org/blog/new-year-new…

New year, new CEO

It’s a new year, and I’ve decided it’s a good time to replace myself as the CEO of Signal. I have now been working on Signal for almost a decade. It has always been my goal for Signal to grow and...

signal.org
359
644
227
6,349
Matthew Freilich retweeted
Justin Bui@slyd0g29 Sep 2021
Tune in next Friday! Super stoked for this 🙂
ShellConLA@ShellConLa29 Sep 2021
Red Teaming macOS Environments with Hermes the Swift Messenger By: Justin Bui @slyd0g Friday 10/08 @ 1600 PDT shellcon.io/talks/2021/herme… #ShellCon2021
3
14
A man of the people helping everyone.
This Post is from an account that no longer exists. Learn more
This is a big step in the direction of repurposing the attack surface of one protocol to exploit the multimodal capabilities of transiver hardware…I think that sentence makes sense. @dntlookbehindu 👀
Romain Cayre@CayreRomain30 Jun 2021
I just released RadioSploit, an Android application allowing to sniff and inject Zigbee,Mosart and Enhanced ShockBurst packets from a Samsung Galaxy S20 smartphone without requiring any additional hardware:it diverts the Bluetooth controller to add new offensive capabilities.1/14
1
3
3
Got the CNC rebuilt and working again. Also made a nice enclosure for it so the dog doesn’t go bonkers. #shapeoko #CNC
6
New Feature: Added @_dirkjan's mitm6 DHCPv6 spoofing technique to the C# version of Inveigh. github.com/Kevin-Robertson/I…
6
172
7
310
Matthew Freilich retweeted
Leo Loobeek@leoloobeek12 May 2020
New COM post (and PoC) just published. This one journeys into COM server development, building a component for offensive use cases that can then be loaded with registration-free COM. Feedback welcome. adapt-and-attack.com/2020/05…

Building a COM Server for Initial Execution

Scripting languages, such as JScript, VBScript and VBA, are commonly used in initial execution payloads (i.e. Stage 0) to begin the process of establishing remote access to a target. In most cases …

adapt-and-attack.com
6
149
6
285
Matthew Freilich retweeted
cpl@cpl3h5 May 2020
COM Hijacking for Lateral Movement - ijustwannared.team/2020/05/0…

COM Hijacking for Lateral Movement

Hey all, This post is about leveraging COM hijacking for lateral movement. I’m going to stay away from deep-diving COM internals as hijacking is not a new topic and has been explored by peopl…

ijustwannared.team
2
127
1
250
Matthew Freilich retweeted
sshell@sshell_14 Apr 2020
Spent today fuzzing AV engines on VirusTotal and rewriting bad VBScript malware in the dumbest ways possible. The journey to 0 detections was actually a lot of fun, so I wrote about it. medium.com/@sshell_/bypassin…

Bypassing AV Detections: The Dumb Way (Part 1)

Disclaimer: VirusTotal detections are weird, and strings isn’t a next-gen AV. I personally don’t expect this to work against all these…

medium.com
8
254
8
640
Learned last night that there's a PE parser in System.Core. Thanks to PowerShell's awesomeness, you can easily interact with it using reflection:
1
129
5
309
Crazy car chase / wreck ended in front of my house.
3
Matthew Freilich retweeted
Justin Bui@slyd0g26 Feb 2020
SK8RAT is a C++ implant that communicates with SK8PARK, a Python 3 server, using a RESTful API. The RESTful API can be used to manage operators, listeners, implants and tasks. This was a PoC and won't be maintained further. github.com/slyd0g/SK8RAT github.com/slyd0g/SK8PARK

GitHub - slyd0g/SK8RAT: C++ implant that interfaces with a SK8PARK server

C++ implant that interfaces with a SK8PARK server. Contribute to slyd0g/SK8RAT development by creating an account on GitHub.

github.com
5
119
6
298
Matthew Freilich retweeted
Ryan Cobb
@cobbr_io27 Feb 2020
An awesome PoC C++ implant and C2 server to build upon 🔥 Been pretty fun watching @slyd0g build this 🙂 xitter.cf/slyd0g/status/12328098…
Justin Bui@slyd0g26 Feb 2020
SK8RAT is a C++ implant that communicates with SK8PARK, a Python 3 server, using a RESTful API. The RESTful API can be used to manage operators, listeners, implants and tasks. This was a PoC and won't be maintained further. github.com/slyd0g/SK8RAT github.com/slyd0g/SK8PARK

GitHub - slyd0g/SK8RAT: C++ implant that interfaces with a SK8PARK server

C++ implant that interfaces with a SK8PARK server. Contribute to slyd0g/SK8RAT development by creating an account on GitHub.

github.com
18
42
Matthew Freilich retweeted
Dirk-jan
@_dirkjan11 Feb 2020
Today's patch Tuesday fixes CVE-2020-0665, which is an Active Directory forest trust security bypass using Kerberos magic 🙃 if you use forests as a security boundary you may want to patch this. Advisory (though text is inaccurate): portal.msrc.microsoft.com/en…
5
153
4
306
Load more