@DotNetRussell
Account based inUnited States
About this account
- Account based in
- United States
- Connected via
- United States Android App
Account-level information from X, not a live location or the device used for a specific post.
Founder of @Squid_Sec Senior AppSec Engineer / Software Engineer OSCP+ | GWAPT #Silversmith for fun and profit Built to Destroy Your company APT
Joined April 2016
- Tweets15.9K
- Following1.2K
- Followers2.1K
- Likes59.4K
Pinned Tweet
I pentested Starbucks for years.
Not the Wi-Fi.
The apps in front of 41k stores, 90 markets, and 36 million Rewards accounts.
Lesson's that actually stuck:
☣️ Mr. The Plague ☣️ retweeted
Operators are standing by for your call
So I have a fun thing I do in my free time where I scan the internet for insecure MCP servers.
If I find one I try my best to reach out to the owner and let them know.
One popped up this morning. It was completely unauthenticated and returned AWS keys including SSH keys for EC2 upon request
You need to have a pentest if you're doing development. Reach out to me for a scoping call SquidOffense.com
So I have a fun thing I do in my free time where I scan the internet for insecure MCP servers.
If I find one I try my best to reach out to the owner and let them know.
One popped up this morning. It was completely unauthenticated and returned AWS keys including SSH keys for EC2 upon request
You need to have a pentest if you're doing development. Reach out to me for a scoping call SquidOffense.com
Obligatory dad comments
Bitly is about to drive through downtown Cleveland rush hour traffic alone for the first time
😱😱😱
☣️ Mr. The Plague ☣️ retweeted
JUST IN: New study reveals creatine may increase muscle mass, strength, cognitive function, & endurance even without exercise.
Readers added context they thought people might want to know
The study reported ~1.1 kg DXA lean tissue gain (not direct muscle) without exercise; DXA cannot separate water from protein and creatine causes intracellular water retention, so this does not show new skeletal muscle.
pmc.ncbi.nlm.nih.gov/articles/PMC13…
zmescience.com/science/news-s…
Waiting for the preworkout to kick in I decided to check in on my internet wide search for insecure MCP servers
I found this one out of China. It appears to belong to a woman who likes books.
I used the send notification tool she built to let her know it was open to the internet.
The message reads
"Yuqing, hello~ I’m greeting you from the United States.
Your MCP server is really cool!
Just a quiet heads-up: it’s currently unauthenticated and exposed directly to the internet (***.*.*****.***:3000), which isn’t very safe - consider adding a lock or moving it onto a private network.
Wishing you and your family all the best!"
Can we PLEASE get an updated South Park WoW episode @SouthPark
𝐎𝐋𝐘𝐌𝐏𝐔𝐒 𝐊𝐈𝐋𝐋𝐒 𝐀𝐗𝐓𝐑𝐎𝐙, 𝐀 𝐋𝐄𝐕𝐄𝐋 𝟔𝟐 𝐄𝐋𝐈𝐓𝐄 𝐃𝐑𝐀𝐆𝐎𝐍
With an army of ants, @Asmongold & Olympus are unstoppable.
Gahhhh I love bawls
Now that WoW is making a comeback, let’s get Bawls selling everywhere again as well. @25YearsAgoLive
It was so great to see everyone today @BSidesCleveland
Thank you so much for everyone that attended and came to say hello to me!
☣️ Mr. The Plague ☣️ retweeted
Contrary to popular opinion I do sympathize with the psycho-bots. I too am oppressed, now put money in my bank account. Thanx.
Lmfao
🚨 #BREAKING: Internet users marked the Flock CEO’s lawn as a “public toilet” after it was revealed he redacted public streetview images of his house for privacy.
Getting some fresh business cards lasered for @BSidesCleveland today 🔥🔥🔥 pew pew
Alright.... internet conspiracy time
Because I'm a psycopath, I bring two USB's with my presentation on it to the conference jusssst in case...
I insert two empty USBs at the same time
I save the power point to each USB within about 30 seconds of each other
The first save is 14,330 KB
The second save is 14,325 KB .....
Why?
