@_cablethief

Security analyst. Random code bits at https://xitter.cf/t.co/S7I4BYjc2V

 South Africa
Joined October 2010
  • Tweets92
  • Following358
  • Followers612
10Media
The fact that @AndresFreundTec didn't just write the whole xz thing off as "It's probably DNS" is honestly amazing.
2
8
824
Had a blast climbing Norwegian 🇳🇴mountains with some amazing people, @oleavr and @_cablethief !
1
2
36
3,601
My next book is *The Internet Con: How to Seize the Means of Computation.* It's a recipe to disenshittify the web and bring back the old good internet. The book is from @VersoBoooks, but the #audiobook is from me - because Amazon refuses to sell it: kickstarter.com/projects/doc… 1/
My forthcoming book 'The Internet Con: How to Seize the Means of Computation' in various editions: Verso hardcover, audiobook displayed on a phone, and ebook displayed on an e-ink reader.

ALT My forthcoming book 'The Internet Con: How to Seize the Means of Computation' in various editions: Verso hardcover, audiobook displayed on a phone, and ebook displayed on an e-ink reader.

35
687
186
2,003
1,768,939
Michael Kruger retweeted
Matt Linton
@0xMatt18 Aug 2023
Every once in a while I'm reminded that dnsmasq, a lightweight DNS and DHCP server that's bundled into *almost every IOT thing and Linux distro*, is a hobby project maintained by one guy in the UK named Simon. Nobody pays him and he doesn't get near the thanks he deserves.
45
649
42
5,480
457,428
A morning @defcon run with @_cablethief and Jaco to The Mill (for those who remember Defcon at the Riv). Even met @elkentaro on the way.
1
3
16
1,857
The RID500 Admin account doesn't benefit from Protected User Group restrictions. This is a MS WONTFIX & means you can authenticate as Admin using RC4 KRB or perform any KRB delegation attack if you impersonate the RID500 Admin. The latest find by @Defte_ sensepost.com/blog/2023/prot…
3
86
2
166
33,292
Another 0xC0FFEE session tonight with two guest speakers: Jeandre Mitton talking about using Pre/Post Scripts with Postman for CAPTCHA bypass and @leonjza talking about the LightNeuron malicious mail transport agent he built for MITRE ATT&CK purple teaming. 1/2
3
7
14
1,962
Struggling to proxy your offensive tools (*cough, Windows, cough*)? See how @_cablethief uses WireGuard and tun2socks to make remote networks available via a network route (from any device or container), over SOCKS! sensepost.com/blog/2022/wire…
4
89
2
244
Yeah! @defcon wifi fixed this. Plus wpa_supplicant can do leaf cert validation these days too!
Dominic White 👾@singe7 Aug 2018
Replying to @singe
5/14 If you just validate on CA, then I can buy a DigiCert signed cert, and your wifi client will happily accept that as valid. Defcon's Linux config is vulnerable to this.
3
4
The crew! @athackcon has been amazing. Saudi has been amazing. Training's pretty darn good. Conference has a great line up. Jason is one happy dude. Thanks @sensepost_train @orangecyberdef @sensepost @athackcon @SAFCSP
Ulrich Swart@x_ulla24 Nov 2021
Replying to @x_ulla
Orange Cyberdefense Trainers: @BreakerOfSigns @_cablethief @dane_goodwin @R4g3D_ @TH3_GOAT_FARM3R
3
5
33
Michael Kruger retweeted
Ulrich Swart@x_ulla24 Nov 2021
Good luck to all the trainers at @athackcon in #SaudiArabia! To the @sensepost crew - may it be a great kickstart to getting back to in person training. Smash it! #atHackcon #BlackHat #orangecyberdefense
1
6
12
🎉We're super excited to publicly release assless-chaps, our super fast MSCHAPv2 cracking tool github.com/sensepost/assless… Our DEF CON @rfhackers Village talk with @_cablethief & me explaining it is out youtube.com/watch?v=lm7Cuktp… Our new hashcat modes 27000/27100 have been merged too!

GitHub - sensepost/assless-chaps: Crack MSCHAPv2 challenge/responses quickly using a database of NT...

Crack MSCHAPv2 challenge/responses quickly using a database of NT hashes - sensepost/assless-chaps

github.com
8
88
10
188
.@_cablethief found the perfect shirt on Amazon for our talk. So I bought it for him, sort of. amazon.com/Ask-About-Assless…
Dominic White 👾@singe5 Aug 2021
🎉We're super excited to publicly release assless-chaps, our super fast MSCHAPv2 cracking tool github.com/sensepost/assless… Our DEF CON @rfhackers Village talk with @_cablethief & me explaining it is out youtube.com/watch?v=lm7Cuktp… Our new hashcat modes 27000/27100 have been merged too!

GitHub - sensepost/assless-chaps: Crack MSCHAPv2 challenge/responses quickly using a database of NT...

Crack MSCHAPv2 challenge/responses quickly using a database of NT hashes - sensepost/assless-chaps

github.com
1
3
19
A lot of the time, when I have a writing deadline, I procrastinate with code. With LaTeX I can do both at the same time.
This Post is from an account that no longer exists. Learn more
10
43
4
313
Michael Kruger retweeted
Titanex @ defcon@Titanex829 Jul 2021
Here are my notes on reverse challenges for the HTB Business CTF 2021. My solution on Ghosty will be soon. github.com/Titanexx/CTF-Writ…
4
1
12
Thats a wrap for the @hackthebox_eu Business CTF 21. We played as the @orangecyberdef / @sensepost team and placed 5th! I'm super proud of the team, and all the hard pwntime they put it! Get some zzz's @felmoltor @JCoertze @TH3_GOAT_FARM3R @Titanex8 @_cablethief @gav1no_ @gmilte!
HackTheBox Business CTF 2021 5th place for the Orange Cyberdefense team!

ALT HackTheBox Business CTF 2021 5th place for the Orange Cyberdefense team!

9
11
55
Putting cooking oil down to prevent looting - thats going to make some infosec presentations for the next little while.
This Post is from a suspended account. Learn more
9
17
4
70
Michael Kruger retweeted
hashcat@hashcat6 Jun 2021
We added a new feature to perform an automatic analysis of the hash list provided by the user and list compatible hash-modes out of all 350+ plugins: asciinema.org/a/418653

Hashcat new feature: autodetect hash-mode

We added a new feature to perform an automatic analysis of the hash list provided by the user and list compatible hash-modes out of all 350+ plugins.

asciinema.org
3
159
10
410
assless-chaps now returning NThashes from MSCHAPv2 challenge/responses with the Have I Been Pwned hash set in 0.0's of a second.
Dominic White 👾@singe25 May 2021
Replying to @singe
I just finished the initial rust version (i.e. it compiles, no "did I do it idiomatic" yet) and best measured performance against the full HIBP 20G set is now 0.019s with worst measured 2.147.
3
2
15
Michael Kruger retweeted
Mathy Vanhoef@vanhoefm11 May 2021
I found some design and implementation flaws in Wi-Fi again. All Wi-Fi devices are affected. It was a long ~9 months embargo, over this time a lot of info has been collected and that info now available at fragattacks.com
32
1,109
139
2,619
Load more