I used to steal it, now I protect it.
Joined September 2010
- Tweets1.3K
- Following3.5K
- Followers518
- Likes7.2K
Florindo Gallicchio retweeted
Introducing PowerHuntShares 2.0 Release!
NetSPI VP of Research @_nullbind introduces new insights, charts, graphs, & LLM capabilities that can be used to map the relationships & risks being exposed through the network shares: ow.ly/6Rjo50U7tNr
Florindo Gallicchio retweeted
Filling up the DagBag: Privilege Escalation in Google Cloud Composer
Read our latest blog post to learn how attackers can escalate privileges in Cloud Composer by targeting Cloud Storage & the risks of default configurations: ow.ly/11Ce50U1kZB
Florindo Gallicchio retweeted
Friendly reminder I have created what I (non-humbly) consider the greatest SQL injection cheatsheet of all time:
tib3rius.com/sqli
Unlike others, it contains payloads for 5 main database variants, and doesn't use weird quote chars (IYKYK 👀).
Florindo Gallicchio retweeted
We've been casually talking about backdooring modules/packages in Azure Automation Accounts for a while, but I didn't have anything written out.
I wrote up a quick primer on the process, along with a tool to help with detecting custom/malicious packages - netspi.com/blog/technical-bl…
Florindo Gallicchio retweeted
This is very useful, worth the read for red teamers. medium.com/tenable-techblog/…
Florindo Gallicchio retweeted
We now live in a world where AI deepfakes trick people daily.
Tonight we see @TaylorSwift calling out the use of an AI deepfake of her falsely endorsing a presidential candidate.
Let’s talk thru how to spot deepfakes in videos, audio (AI voice clones / calls), & social media…
Florindo Gallicchio retweeted
For anyone that missed my @cloudvillage_dc talk ("Identity Theft is Not a Joke, Azure!"), I recorded a slightly extended version to put up on the @NetSPI YouTube page - youtube.com/watch?v=efF5Up7z…
Florindo Gallicchio retweeted
New blog post 🚨 CVE-2024-37888 – CKEditor 4 Open Link Plugin XSS
NetSPI Security Consultant Anurag Mondal explains the nature & discovery of the vulnerability and its implications. Read the blog: ow.ly/5ubo50T7n1Y
#CKEditor4 #proactivesecurity
Florindo Gallicchio retweeted
Last chance to join our #webinar focused on asset discovery with NetSPI Director of ASM Eric Gruber and Product Marketing Manager Jake Kramber. You won’t want to miss this: ow.ly/e0Fv50SXLjs
Florindo Gallicchio retweeted
Today we honor the bravery & ingenuity of the Navajo Code Talkers, who used their native language to create an unbreakable code that helped secure Allied victories in WWII.
Their legacy is a testament to the power of diversity, resilience, and patriotism.
#NavajoCodeTalkerDay
ALT DoD Navajo Code Talker Day
Florindo Gallicchio retweeted
Join #TeamNetSPI for a Rooftop Happy Hour on Thurs. 8/22, from 4:30-7 PM CT in Minneapolis! Connect with the local cyber community, enjoy tasty food-on-a-stick, refreshing drinks, stunning views, & win prizes! Don’t miss out—register now 🗓️ ow.ly/UGjx50SWmLp
Florindo Gallicchio retweeted
NetSPI started the day at AppSec Village with Michelle Eggers' (@saltymiche) Mainframe talk at #defcon.
Informative, inspiring, and intellectual. Want to learn more? Check out Michelle's blog: ow.ly/3KZB50SVoCE
#appsec #Mainframe #speaker
Florindo Gallicchio retweeted
A huge thank you to everyone who came out to my @cloudvillage_dc talk today!
Here are my slides for “Identity Theft is not a Joke, Azure!” - notpayloads.blob.core.window…
Florindo Gallicchio retweeted
Honoured to have worked with Andy on this cover of our research, getting unveiled and opensourced on Thursday at this years #BHUSA24 . If you're in Vegas and think lasers are cool - hit us up if if you can find us!
At the Black Hat security conference, hackers will debut a new open-source tool called the RayV Lite, designed to let anyone hack computer chips with frickin' lasers for just $500. wired.com/story/rayv-lite-la…
Previously available tools to do this typically cost as much as $150,000.
Florindo Gallicchio retweeted
For anyone wanting a sneak peek at part of my @cloudvillage_dc talk, I put out a new @NetSPI blog today that covers the automation of extracting Managed Identity certificates from Azure Arc systems - netspi.com/blog/technical-bl…
Florindo Gallicchio retweeted
In The Attack Surface Management Solutions Landscape, Q2 2024, Forrester details why ASM solutions must support both internal and external asset visibility.
NetSPI offers both EASM and CAASM capabilities. Visit booth #2750 at #BlackHatUSA to get a demo.
netspi.com/resources/analyst…
Florindo Gallicchio retweeted
NetSPI Senior Security Consultant Scott Weston @WebbinRoot is presenting at #DEFCON32!
GCPwn is a python-based framework for pentesting GCP environments. Get a preview of his talk with this blog post and we hope to see you in Vegas next week: ow.ly/QsOc50SMusn
Florindo Gallicchio retweeted
NetSPI Principal Security Consultant, @0xTib3rius is hosting 2 contests at #DEFCON32 – Aw man...pages! & Feet Feud. Survey says... follow this link to participate in the survey questions for Feet Feud: ow.ly/tblv50SMgpH
Learn more from the host himself & join the fun.