Curious in both senses. ̭̱̣̪Blue Teamer by trade | (noob) Maker of things | Log Addict | SOAR | Incident Handling Playbooks are my jam | (weak) Power Lifter
EU
Joined August 2017
- Tweets865
- Following298
- Followers48
- Likes701
Curious Mustache retweeted
ALT original tweet by @bp_plc: “The first step to reducing your emissions is to know where you stand. Find out your #carbonfootprint with our new calculator & share your pledge today!” reply tweet from @andrwfhenderson: “i pledge not to spill 4.9 million barrels of oil into the gulf of mexico”
Well that shouldn't be happening...
By the way, #mimikatz bypassing Windows Defender detection (like a lots of other security products) is still simple as being a little bit patient...
1. yep, they catch it without this delay...
2. yep, real time protection & cloud (without submission) are enabled
Curious Mustache retweeted
I challenge anyone to find a better illustration of security having to engineer around technical debt in an organization.
This is a joke, right? The world is always making fun of Americans suing everybody for everything. But murderers suing relatives of victims. The fuq?
Louisville police officer sues Kenneth Walker, boyfriend of Breonna Taylor, for emotional distress, assault and battery cbsn.ws/35JeIU8
Curious Mustache retweeted
It has a few more prerequisites, but I finally managed to get a #Zerologon exploit working that doesn't rely on resetting passwords to exploit. Use the printerbug to make DC1 connect to you, then with lots of magic relay that to DC2 directly to DRSUAPI to DCSync 😁
Curious Mustache retweeted
So yes, Zerologon (CVE-2020-1472) is quite easy to exploit. Unauthenticated user to Domain Admin. This is really scary. Run exploit, DCSync with DC account and empty NT hash: you have Domain Admin and a broken DC.
Awesome find by Tom Tervoort 🙂. Patch patch patch!
Curious Mustache retweeted
(1) Deny that it happened.
(2) Use doublespeak to confuse the evidence.
(3) Fire and consider pre-emptively filing suit against anyone who uses the word “breach”.
(4) Pay the ransom.
Curious Mustache retweeted
Amazon thinking that people would like to wear two always on microphones on their body feels appropriately dystopian for 2020
This quoted post is unavailable.
Curious Mustache retweeted
Using a Local Account, and have Windows Hello PIN code configured? ('cause Microsoft says it's more secure 🤷♂️)
Cleartext password is in the SYSTEM vault
TPM or not
#mimikatz loves your passwords 🥰
Thank you @tijldeneut for questions on it (I was too much on PRT 🤔)
Curious Mustache retweeted
Russia's most famous opposition leader, @Navalny, has been rushed to the hospital, with reports that poison is suspected. If confirmed, it is a crime against the whole of Russia. There can be no democracy without dissent.
After DC - please donate to EFF they're struggling a lot this year. Cheers! @EFF fighting for #online #privacy and #freespeech #EFF30 eff.org/EFF30