Anthony Rhodes (@fork_while_fork) profile picture

Anthony Rhodes

@fork_while_fork

Researcher, Red Teamer, Developer. Opinions are my own

Joined December 2018
  • Tweets96
  • Following174
  • Followers213
Replying to @HusseiN98D
Thinkpad X1 Extreme - 6 core i7 and 64GB RAM 👍
1
1
Replying to @Burp_Suite
Another vote for logger++. Very useful for tracking the behavior of an application when using scanner and other non-logged burp features (scanner mostly)
1
Anthony Rhodes retweeted
OWASP Amass (@owaspamass) profile picture
OWASP Amass@owaspamass10 Nov 2019
Version v3.3.0 of #OWASP Amass has been released! The first version of the new data model has been implemented. Future releases will support saving findings into Gremlin (@apachetinkerpop) and @neo4j #GraphDatabase systems #osint #recon #opensource #assetdiscovery #bugbounty
3
56
3
131
Anthony Rhodes retweeted
OWASP Amass (@owaspamass) profile picture
OWASP Amass@owaspamass20 Oct 2019
Version v3.2.0 of #OWASP Amass has been released! The tool has been refactored quite a bit and the default settings run the enumerations much faster. Use the '-max-dns-queries' flag if you wish to slow things down #osint #recon #infosec #opensource #assetdiscovery #bugbounty
3
72
1
163
Anthony Rhodes retweeted
No Starch Press (@nostarch) profile picture
No Starch Press
@nostarch12 Oct 2019
Please share this as widely as possible. Why should we have to police Amazon? This problem is ongoing since 2017. These counterfeits are shipped and sold by AMAZON, NOT A THIRD PARTY. This is not Marketplace.
Bill Pollock -- nostarch@infosec.exchange (@billpollock) profile pictureBill Pollock -- [email protected]@billpollock12 Oct 2019
Amazon counterfeit. Images were posted to Amazon.com by a concerned customer July 12, 2019, amazon.com/gp/customer-revie…. Counterfeit is shipped and sold by Amazon.com -- NOT a third party. Why do we have to police Amazon? Please RT. @nostarch @amazon
Image from Bill Pollock -- nostarch@infosec.exchange (@billpollock)
Image from Bill Pollock -- nostarch@infosec.exchange (@billpollock)
46
1,269
129
1,676
Replying to @nullenc0de @__rockyr__
It's very handy for DNS exfil/C2 once you have one up and running
1
Replying to @mugundhanbalaji @TheColonial
Some free online resources: quii.gitbook.io/learn-go-wit… tour.golang.org/welcome/1
1
Anthony Rhodes retweeted
Go (@golang) profile picture
Go
@golang21 Aug 2019
🎉 Go 1.13 RC1 is released! 🏃‍♀️ Run it in dev. Run it in prod. File bugs. 🗒️ Release notes: tip.golang.org/doc/go1.13 ⬇️ Download: golang.org/dl/#go1.13rc1 #golang
Image from Go (@golang)
10
241
19
540
Anthony Rhodes retweeted
Kody (@KodyKinzie) profile picture
Kody@KodyKinzie18 Aug 2019
One time some tech bros called security on me at a coworking space for having too many network adapters.
Image from Kody (@KodyKinzie)
28
38
4
395
Replying to @KAS_stoner @pentestscraps @jeff_foley @owaspamass
Good question; we haven't received any specifics from the village organizers. We will spread the word when it does get posted
1
3
Replying to @edu4rdshl @owaspamass @TomNomNom @aboul3la
Passive mode doesn't make any attempt to resolve the names to IPs and the majority of our users want only resolveable names
1
2
Replying to @edu4rdshl @owaspamass @TomNomNom @aboul3la
amass enum -passive would be a more accurate comparison. 31k subdomains in 7 minutes :)
1
3
Replying to @pentestscraps @jeff_foley @owaspamass
Demo labs weren't recorded, but we did a talk at recon village that will be available
1
4
Anthony Rhodes retweeted
Karl (RIP ) (@supersat) profile picture
Karl (RIP )@supersat12 Aug 2019
Next year's floorplan
Image from Karl (RIP ) (@supersat)
15
37
6
152
Pre-auth RCE on Fortinet and Pulse Secure (prior: Juniper) SSL VPN's by @orange_8361 and @mehqq_ - over 500k such VPN's on the internet. Heap overflow, arbitrary file read, plaintext passwords, magic backdoor, command injection... Defcon slides: media.defcon.org/DEF%20CON%2…
Image from scriptjunkie (Matt) (@scriptjunkie1)
100
4
217
Anthony Rhodes retweeted
Nmap Project (@nmap) profile picture
Nmap Project
@nmap10 Aug 2019
Nmap Defcon release! Enjoy version 7.80: seclists.org/nmap-announce/2…
7
244
19
521
Anthony Rhodes retweeted
Petros (@pkb1s) profile picture
Petros@pkb1s11 Aug 2019
As promised during our talk, we have released the user exploitation features for SharpGPOAbuse! @den_n1s @VillageRedTeam #DEFCON27 github.com/mwrlabs/SharpGPOA…
GitHub - ReversecLabs/SharpGPOAbuse: SharpGPOAbuse is a .NET application written in C# that can be...

GitHub - ReversecLabs/SharpGPOAbuse: SharpGPOAbuse is a .NET application written in C# that can be...

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are contr...

github.com
134
1
289
Anthony Rhodes retweeted
Dirk-jan (@_dirkjan) profile picture
Dirk-jan
@_dirkjan11 Aug 2019
Thanks all for attending my #DEFCON talk! Humbling to see such a full room even on Sunday. Slides and demo videos are online at the media server. Slides: media.defcon.org/DEF%20CON%2… Demo vids: media.defcon.org/DEF%20CON%2…
10
123
3
334
I’m suprised that CVE-2018-13382 (a trivial « backdoor » in Fortigate SSL VPN) didn’t get much attention, even after @orange_8361´s talks in Vegas... blog.orange.tw/2019/08/attac…
5
66
2
203
Load more