Head of Adversary Simulation at IBM X-Force. (https://teapawt.net/t.co/sWYyRku71U). Opinions are my own.
Roanoke, VA
Joined March 2009
- Tweets1.6K
- Following441
- Followers1.3K
- Likes3.2K
Looking for an experienced red teamer. Hit me up if you have any questions.
If you're into serious red teaming with a crazy skilled team we've got a US based opening! ibmglobal.avature.net/en_US/…
Any Canadian friends with strong red team backgrounds looking for an AdvSim spot?
ibmglobal.avature.net/en_US/…
Decided to get on the hype train and rewrite an old tool to use LLM for analysis vs basic learning tools. Will report back on how it compares. github.com/pfussell/envmappe…
5
234
We are so stoked to have you!
Last week, I joined the IBM @XForce Adversary Simulation team. I am excited and grateful to work with such an incredibly talented group. Cheers to new adventures!
If you don’t have this in your toolkit you are missing out. Great read @h4wkst3r !!!
Today I am releasing a whitepaper and new tool (ADOKit) as part of my @XForce research I will be presenting at @BlackHatEvents #BHEU on Wednesday. Links are below 🔗
Whitepaper:
ibm.com/downloads/cas/5JKAPV…
Tool:
github.com/xforcered/ADOKit
It’s wild to me what @retBandit and @XForce have built with our Adversary Simulation team. It’s so rare to have this many people work together for this long in an industry where changing jobs is rare. It’s hard to imagine a better group of people to work with.
Full analysis of the Cobalt Strike RCE that me and @FuzzySec wrote up is now up.
securityintelligence.com/pos…
5
@ConsciousHacker has a good track record for saying consistently intelligent things. Probably worth checking out his talk.
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
4
If you are fooling with Windows API calls in Golang I highly recommend these posts:
medium.com/@justen.walker/br…
anubissec.github.io/How-To-C…
3
Man my teammates are doing some amazing work. Nice work @anthemtotheego
Don't Be Rude, Stay: Avoiding Fork&Run .NET Execution With InlineExecute-Assembly BOF:
No tool modification needed for most of your favorite tools, disable AMSI, disable/revert ETW, and more...
Blog: securityintelligence.com/pos…
Tool: github.com/xforcered/InlineE…
Trying to decide if I want to keep two keyboards/mice or get a usb switch for my personal computers. Anyone tried using a usb switch to share keyboard?
2
Probably the talk I'm most proud of so far in my career. Thanks to everyone that helped make it happen. youtube.com/watch?v=fSLxkDQi… @WWHackinFest @porterhau5 @jockowillink
You don’t always realize how much love you have in your life until something shitty happens. Then you see what a fortunate person you are to have so many great people around you.
Over the last few months I have come to appreciate exact how hard it is to implement good detections for a blue team. It’s like shooting a moving target while running.
2
Hey @tferriss just wanted to say thanks for publishing tim.blog/2017/07/06/tao-of-s… for free. Just started but already really enjoying the experience.
3