Given up on the Twitter trashfire. TheColonial.01 on Signal.
Sunshine Coast, Australia
Joined June 2008
- Tweets92K
- Following152
- Followers12.7K
- Likes11.3K
ටل 🧗 retweeted
Went bouldering with @TheColonial . As Trent Reznor once said "I focus on the pain, the only thing that's real". Gonna be sore tomorrow.
ටل 🧗 retweeted
#Townscaper is out in Early Access!
🏠🏤⛪️🏘️🏡👷🌊🕊️🐦🌟
Go buy it! Go build some houses!
steamcommunity.com/app/12913…
ටل 🧗 retweeted
(1/2) Out running this morning on a new route and a lady runs past me.
Despite only passing, when I get home @Strava automatically tags her in my run. If I click on her face it shows her full name, picture and a map of her running route (which effectively shows where she lives)
ටل 🧗 retweeted
RELEASE: Evilginx 2.4 "Gone Phishing" update is OUT NOW!
Read all about it: breakdev.org/evilginx-2-4-go…
ටل 🧗 retweeted
How I Hacked Facebook Again! Unauthenticated RCE on MobileIron MDM (slides inside) blog.orange.tw/2020/09/how-i…
#HITCON
ටل 🧗 retweeted
Finally got around to weaponizing some of the awesome research I've only just read about regarding group policy. Full attack path write-up coming soon. 😁
ටل 🧗 retweeted
Introducing #BlindSide: 1 buffer overflow to mount Speculative Blind ROP attacks that repeatedly probe the address space, craft arbitrary memory read gadgets, and enable reliable kernel exploitation in minutes - despite #FGKASLR #XoM #Spectre mitigations: vusec.net/projects/blindside
ටل 🧗 retweeted
Come work with me.
#RedTeamJobs Happy Saturday!! @Lares_ Is STILL hiring. Do you need a challenge? Looking to work on a team that will have your back? We have some of the most challenging tests and dedicated clients. 2 of 4 spots filled. Job Descrp here . Plz RT linkedin.com/pulse/looking-r…
ටل 🧗 retweeted
SeManageVolumePrivilege to "Full Admin" escalation:
1. Enable the privilege in the token
2. Create handle to \\.\C: with SYNCHRONIZE | FILE_TRAVERSE
3. Send the FSCTL_SD_GLOBAL_CHANGE to replace S-1-5-32-544 with S-1-5-32-545
4. Overwrite utilman.exe etc.
5. 😎
ටل 🧗 retweeted
A hack quest format CTF running until end of the week - these are pretty rare story-driven CTFs, jump on :)
Twardowski has been missing for 3 day now 👀 He left some notes but nobody can read them 🔒
Check your hacking skills at twardowski.securing.pl!
ALT twardowki.securing.pl
ටل 🧗 retweeted
Great databases, showing the most powerful use of Hex-Rays: virtual calls, mapped variables, and so on, and so on. A lot to learn from them!
New blog entry: An Exhaustively-Analyzed IDB for ComRAT V4. This is one of the most thorough analyses I've ever done; certainly the largest. msreverseengineering.com/blo…
ටل 🧗 retweeted
Announcing vimforvscode.com s
Learn how to supercharge your favorite editor @code through 100+ exercises that teach you the basics of Vim.
You get:
- hands-on practice
- tips to remember commands
- short quiz questions
Best $10 you'll spend this year.
RTs appreciated!
ALT Vim for VSCode. 100+ exercises to teach you vim.
ටل 🧗 retweeted
It’s taken a lot of soul searching and back and forth, but I’ve decided to step down from the public InfoSec circle as a whole and make some room for the other amazing young talented researchers out there.
ටل 🧗 retweeted
We are releasing our simple Command & Control (C2) project called GRAT2 written in C# and python3.
Some of the capabilities are:
1. Process Injection Techniques.
2. Evade some Sandboxes and AV/EDR solutions.
Thanks a lot @gkoume01 for the collaboration.
github.com/r3nhat/GRAT2
ටل 🧗 retweeted
Use #angr from #Ghidra!
One-click #SymbolicExecution with AngryGhidra.
Check out the new plugin.
github.com/Nalen98/AngryGhid…
ටل 🧗 retweeted
@CONFidenceConf CTF starts in half an hour at confidence2020-finals.p4.tea…! Good luck.
ටل 🧗 retweeted
got this tool into a working state, could use some refactoring but seems to work (for me hehe). its a pstree mod that also tracks shared socket/pipe inodes and is just generally more verbose than pstree. also more targeted for specific pid genealogy. github.com/h0mbre/busychild
ටل 🧗 retweeted
My blog post on Pwning Windows Event Logging with YARA rules is now up. If you have the permissions and the right yara rule, you can completely hide yourself from event logging. blog.dylan.codes/pwning-wind…