@GuardianCosmos.bsky.social Pentesting | Forensics | Incident Response | SANS Instructor | Purple Teaming | @guardiancosmos@infosec.exchange | Views AMO
New Jersey, USA
Joined August 2012
- Tweets2.9K
- Following614
- Followers436
- Likes2.1K
Pinned Tweet
I've begun my migration over to the mastodon lands, find me as usual infosec.exchange/@guardianco…
This is my account on Mastodon - infosec.exchange/@GuardianCo… - verified by Twittodon.com
Check the repo that's been stood up to help track what you'll be patching today!
🚨 Make sure you're checking @CISAgov GitHub repo to track software affected by the #OpenSSL 3.0.x vuln, as well as any IOCs related to exploitation activity. As you may still remember from 2014's #Heartbleed, timely discovery & remediation are critical
github.com/NCSC-NL/OpenSSL-2…
Christian N. (They/Them) retweeted
1\ #DFIR: Chrome Forensics - How to Recover CLEARED History
If a user just cleared their browser history, you can still recover everything they were just looking at from the session files:
%appdata%\Local\Google\Chrome\User Data\Default\Sessions
inversecos.com/2022/10/recov…
A thread worth reading
🧵 the 'Autonomous SOC' is a pipedream. 1/n
forrester.com/blogs/the-auto…
BSides is always a good time and a great way to get to your first conference, if this is your local, and even if it's not, this is for you!
We are excited to begin our planning for BSidesCharm 2023! We will be returning next spring for an awesome weekend of talks, villages, and job recruiting!
Set your calendars for the weekend of 29-30 April 2023.
More details to come!
bsidescharm.org
Take note and mark your calendars folks
To their credit, this is the first Crit in Openssl since 2016, that's a pretty good record given how many places it's used
This Post is from an account that no longer exists. Learn more
Christian N. (They/Them) retweeted
If 41 lines of code can bypass the authentication process on the administrative interface of FortiGate firewalls, FortiProxy web proxies, and FortiSwitch Manager (FSWM) on-premise management instances, then something is very wrong.
This is not acceptable @Fortinet
ALT exploit code on a screen https://github.com/horizon3ai/CVE-2022-40684/blob/master/CVE-2022-40684.py
Christian N. (They/Them) retweeted
This will be a thread discussing a real world breach involving a drone delivered exploit system that occurred this summer
Some details I am not able to discuss, however for the blue teams & red teams out there I hope this provides a good measure of capability.
🧵🚁 🎮🖥️🦠
Christian N. (They/Them) retweeted
To celebrate my new #AADInternals blog, I also published an online OSINT tool at aadinternals.com/osint
It allows to get tenant information using:
* Tenant ID
* Domain name
* Email/UPN
The domain list includes links to ease the gathering of further information. Enjoy!
Christian N. (They/Them) retweeted
Fox-IT just open sourced their enterprise forensics tooling dissect. This is a big project that some of the smartest people I know have worked on. It supports many filesystems and file formats, all as Python libraries. Docs: docs.dissect.tools / code: github.com/fox-it/dissect
Christian N. (They/Them) retweeted
I don't know what to do with this knowledge, but today I learned that curl has a handler for LDAP URIs.
curl --user $CREDS "ldaps://ldap.foo.com/DC=ads,DC=foo,DC=com?memberOf?sub?(&(sAMAccountName=$USER)(memberOf=CN=$GROUP,OU=Distribution,OU=Groups,DC=ads,DC=foo,DC=com))"
Christian N. (They/Them) retweeted
Bravo @dotMudge. That's it. That's the tweet. cnn.com/2022/08/23/tech/twit…
I'd like to echo this strongly, not that it should or does need it
My Twitter is blowing up from this… Let me just say @dotMudge wouldn’t file papers like that unless there were legit serious issues. Twitter’s attempt to paint him as a disgruntled employee is laughable. cnn.com/2022/08/23/tech/twit…
A computer manufacturer discovered that playing the music video for Janet Jackson’s 1989 song Rhythm Nation can crash hard drives in certain older laptops. The song contained one of the natural resonant frequencies for the model of 5400 RPM laptop hard drives that are used
Christian N. (They/Them) retweeted
I’ve just discovered that @mrd0x has created an online catalog of Microsoft Windows APIs commonly used by malware: malapi.io/ 👍🏻#CyberSecurity – at Nogent-sur-Marne, France
