@psaYler

Social Engineering @NetSPI --- I'm ready to talk regular

 Portland, OR
Joined July 2008
  • Tweets1.9K
  • Following198
  • Followers230
126Media
Slides from my @thotcon presentation - thank you again! psayler.github.io/Presentati…
2
7
28
My favorite part of social engineering pentests isn't tricking people - it's more fun to get around the technical controls that should prevent it in the first place
NetSPI@NetSPI20 Oct 2022
"This is a great reminder of the importance of defense in depth strategies." | NetSPI's @psaYler lands on @Mimecast's Security Researcher Wall of Fame for discovering a way to bypass their URL and file inspection features. ow.ly/qFP250LgzbK #mimecast #emailsecurity
7
Patrick Sayler retweeted
NetSPI@NetSPI27 May 2022
Objective: To understand if and how an attacker could breach a #datacenter. How we did it: A team of NetSPI social engineers posed as a pest control company. The results? Read this blog to find out: ow.ly/U57u50ITwUZ #cybersecurity #socialengineering
1
wired.com/story/gritty-under…

The Gritty, Underground Network Bringing Japan’s Arcades to the US

After falling in love with an obscure anime rhythm game, I became obsessed with obtaining a machine of my own—or finding the people who could.

wired.com
Patrick Sayler retweeted
Karl@kfosaaen17 Nov 2021
Here's another serious vulnerability to add onto the list of recent Azure issues. This is our write up (and a thread) on CVE-2021-42306 (CredManifest), which addresses the cleartext storage of App Registration credentials in AAD SP manifests. netspi.com/blog/technical/cl… (1/5)
4
164
12
343
Thank you to everyone who made it out to my @thotcon #arcade presentation yesterday! Meeting someone who actually worked on one of my favorite game series was the highlight of my weekend. Slides will be uploaded within the next few days
1
10
And thank you to @passthehashbrwn for getting some pics for me!
1
Patrick Sayler retweeted
Karl@kfosaaen1 Sep 2021
For anyone looking for a new opportunity, we're currently hiring multiple roles at @NetSPI (including our Cloud Pentesting team). Check out the NetSPI careers page for more info - netspi.com/careers/

Careers

Our vision is simple—support global organizations in protecting and securing their technology and data. Looking for cybersecurity jobs?

netspi.com
5
8
This has been a fun pandemic project. Games and infosec are all I think about - looking forward to sharing this with @thotcon!
NetSPI@NetSPI28 Aug 2021
Heading to THOTCON 0xB on October 8? Interested in the inner workings of arcade games? Then, you won't want to miss this session from NetSPI's #socialengineering expert Patrick Sayler: "Jackpot! Attacking Arcade Machines." thotcon.org/
1
4
15
Patrick Sayler retweeted
Karl@kfosaaen7 Aug 2021
Here are the slides from my @defcon cloud village talk. Thanks again to @cloudvillage_dc for accepting the talk! notpayloads.blob.core.window…
4
34
94
Patrick Sayler retweeted
NetSPI@NetSPI29 Jul 2021
Don't miss NetSPI #cloud practice director Karl Fosaaen's (@kfosaaen) talk during @defcon's @cloudvillage_dc: "Extracting All the #Azure Passwords." Join Karl virtually via YouTube on Sat. August 7 at 10am PT! Learn more: ow.ly/aGVG50FGyLs
8
8
Patrick Sayler retweeted
Karl@kfosaaen1 Jun 2021
Training Announcement - @NetSPI's first public course of the "Dark Side Ops: Azure Cloud" training will be this August 23-24. This will be a virtual training, but we hope to do an in person training in the near future. Tickets and course information here - netspi.com/training/dark-sid…
2
8
22
Patrick Sayler retweeted
NetSPI@NetSPI26 Jan 2021
Our first Dark Side Ops Training #2: Adversary Simulation since the acquisition of @SilentBreakSec will take place March 24-25. Join us for a deep dive on advanced #RedTeam methodologies and tactics. Learn more and register today: ow.ly/ToAl50De3ym
8
6
Patrick Sayler retweeted
bemodtwz@bemodtwz26 Jan 2021
New version of Eval Villain will recursively decode #XSS sources. If inline script 4 iframes deep base64 and double JSON decodes the window name for a document.write, Eval Villain will find it and warn in the console. addons.mozilla.org/en-US/fir…
1
3
Patrick Sayler retweeted
Jake Karnes@jakekarnes428 Dec 2020
All the details for CVE-2020-17049 are now available! The overview contains a summary of the vulnerability and its exploit, including links to 2 deep dive posts which cover much more. blog.netspi.com/cve-2020-170…

CVE-2020-17049: Kerberos Bronze Bit Attack - Overview

Read a helpful overview of the Bronze Bit attack (CVE-2020-17049) against Kerberos implementations in Windows Active Directory.

netspi.com
5
161
10
268
Patrick Sayler retweeted
Jake Karnes@jakekarnes4210 Nov 2020
I'm excited to share that CVE-2020-17049 has been issued for a vulnerability that I found. There are more details to come, but I'll be holding off publishing for now while the patchwork is still ongoing. msrc.microsoft.com/update-gu…
3
12
5
50
My @BSidesPDX slides - Automated #SocialEngineering for the Antisocial Engineer v2 - are now online. Thank you for all of the great questions! 🌲 slideshare.net/PatrickSayler…
21
1
26
Patrick Sayler retweeted
NetSPI@NetSPI20 Oct 2020
Join NetSPI's Patrick Sayler October 23 at BSides Portland for his discussion on Automated Social Engineering for the Antisocial Engineer. Learn more here: netspi.com/events/bsides-por… #SocialEngineering #BSidesPortland #CyberSecurity
6
1
6
Patrick Sayler retweeted
bemodtwz@bemodtwz9 Oct 2020
Public disclosure of Tab tracking via google ads domain tpc.googlesyndication<dot>com. See github.com/swoops/tpc.google…
2
20
4
67
Patrick Sayler retweeted
Karl@kfosaaen27 Apr 2020
Austin from the @NetSPI team put together a vulnerable C# application for people to practice their thick client pen testing skills against. Keep an eye out for the follow up tutorial blogs - blog.netspi.com/introducing-…
1
22
1
34
Load more