@0xc0da

Don't follow me, I'm lost too. Tweets in English and Portuguese. Opinions are my own and do not represent those of my employers.

 Houston, TX
codalabs.net
Joined June 2012
  • Tweets2.9K
  • Following407
  • Followers287
31Media
And here are the slides for my @BSidesSATX talk this afternoon: speakerdeck.com/0xc0da/kicks… Thank you @BSidesSATX for having us! The conference was awesome and the crew is outstanding. Great job!

Kickstarting your in-house Red Team: Challenges and approaches

BSidesSATX 2023 (Jun/23) You have to build your organization’s Red Team from scratch. Where do you start? Organizations building internal red teams a…

speakerdeck.com
2
35
91
11,063
Daniel retweeted
JS0N Haddix
@JhaddixApr 24
Sometimes success of using AI agents for offense is using them in multiple or parallel rounds. With different models. And aggregating the results.
13
10
1
115
9,560
Daniel retweeted
Connor McGarr@33y0reJan 3
My BlackHat talk on Windows KM CFI is live! It was an amazing experience and has always been a goal of mine to speak at BlackHat, and I do not take such opportunities for granted!
WaterBucket@windeebugJan 3
Wait, banger after banger!!! @33y0re’s BlackHat talk on KCFG & KCET is out! Sunday’s looking good 😄 youtube.com/watch?v=LflYlvJ4…
15
60
7,861
Your smart home may be a hacker's new favorite target. 🏠MS in Cyber Security Engineering Professor, Nikolas Behar, gives "At the Edge of It All" listeners the breakdown on modern cyber threats—and shares must-know defense tips. Listen here: bit.ly/3Lx8UFv #CyberSecurity
1
1
40
Replying to @InfoSecMap @sec_defcon @defcon @RachelTobac @_sn0ww @kminx @rekdt @jamieantisocial @PerryCarpenter @JC_SoCal @cxstephens @st0_ic
Other key participants in @SEC_defcon at @DEFCON 33 include @fir3d0 @_nextjenn @TheDukeZip @kl34n @ednas @TipsyBacchus @WellKnitTech @pl4ntl4dy @0xc0da @g4mbl3z and @klipper801. Explore all #DEFCON33 villages! ➡️ infosecmap.com/event/def-con… #SocialEngineering #InfoSec

DEF CON 33

Title: DEF CON 33 Description:  "Access Everywhere." This year we're thinking about how to make information and services available to everyone. Available wherever you are, whoever you are, and usable...

infosecmap.com
1
3
11
281
Today I am releasing a new blog post on VSM "secure calls" + the SkBridge project to manually issue them!! This blog talks about how VTL 0 requests the services of VTL 1 and outlines common secure call patterns!!! Blog: connormcgarr.github.io/secur… SkBridge: github.com/connormcgarr/SkBr…
3
98
3
257
35,727
Check out our presentations in the village this year! Do Scammers dream of electric Phish? Lessons learned from deploying AI-driven phishing ops Saturday, Aug 9th @ 12 pm
1
5
417
Normalize Conference Talks To Also Include Talks About Failed Projects and Failed Research Tell us stories of the journey and the struggles. None of us are perfect and We should stop admitting that we all haven't completely screwed up research.
15
11
1
100
7,927
Come work with me in complex, large scale, innovative binary analysis problems! Remote position in US (focused on cryptoanalysis): careers.oracle.com/jobs/#en/… - In the coming days I will also post 2 remote positions in Brazil!
1
6
32
4,910
We're happy to announce that our CFP is now live and will be accepting talks until April 27 at midnight! Why waste any time and go ahead and submit? Check out bsidessatx.com or cfp2.bsidessatx.com for more information!
4
7
501
The xz backdoor was initially caught by a software engineer at Microsoft. He noticed 500ms lag and thought something was suspicious. This is the Silver Back Gorilla of nerds. The internet final boss.
143
2,487
507
18,553
4,574,004
I recently wrote a tool as a side-project these weeks leading up to the Christmastide to do something I have really always taken for granted in reversing - symbols! As an example, this tool can diff functions and UDTs and it showed maybe we will get ETW events for hypercalls!
3
17
93
13,610
I'll be speaking at @defcon workshops and @cloudvillage_dc this year. If you will be in Vegas hope to meet you there =) #defcon #blueteam #aws #CloudSecurity #Cloud
3
2
11
1,276
Invest in all new burner gear before @defcon because hackers always burn 0days on attendees every year. #baddefconadvice
1
5
12
1,575
TL;DR - if you can't draw a *direct* line between the thing you're briefing and how it impacts risk, it's probably not appropriate at a board level.
2
3
49
4,670
Please stop reporting raw vulnerability management metrics to the board. They do not care about you scanning numbers - most vulns are never exploited anyway. Boards care about risk. Give them metrics on what's standing in the way of faster remediation for KEV's (for instance).
17
27
12
264
61,027
🎙️Thanks to all that listen to and supports my new podcast! Thanks to my guests for joining me and sharing their amazing stories! If you listen to my podcast, The Hacker Factory, you will like this one. 🙏 phillipwylieshow.com – at San Antonio, TX
1
17
82
16,729
We are up in 5! Come to Track 1 and join our chat about in house red teams! @BSidesSATX
7
274
It's 3pm now, but we haven't stopped the party yet! Make sure you check out our events before they close at 4pm. Also don't forget our fantastic talks that are going on! If you haven't thanked our sponsors & chatted with them yet, do it! This event can't happen without them ❤️
1
1
171
Join us next weekend at @BSidesSATX to chat about in-house Red Teams!
BSides San Antonio / BSidesSATX@BSidesSATX2 Jun 2023
1600 on 6/10 will be Daniel Marques & Victoria Dea w/"Kickstarting your in-house Red Team", Dan Eldad w/"Accidentally Exposed - Classifying Publicly Exposed Cloud" & Sandip Dholakia w/"SciFi to Reality: Use of AI in Cybersecurity". Buy your tickets now! buff.ly/3LQyGRW
1
1
3
222
Load more