m3ch (@M3chSec) header
m3ch (@M3chSec) profile picture

Red Team Manager - Pentester - Researcher - Recovering Forensicator - Not much of a Tweeter

Joined August 2016
Photo by m3ch (@M3chSec)Photo by m3ch (@M3chSec)Photo by m3ch (@M3chSec)Photo by m3ch (@M3chSec)Photo by m3ch (@M3chSec)Photo by m3ch (@M3chSec)Photo by m3ch (@M3chSec)Photo by m3ch (@M3chSec)Photo by m3ch (@M3chSec)Photo by m3ch (@M3chSec)
Considering a change of careers now if you're hiring @Ford
A new Bronco edition idea brought to you by @M3chSec ! Let's make this real @Ford!
2
Awesome work as always @0xm1rch! If you are using these solutions in your environment, I hope that you will take some time to read through them as it may impact you.
Check out my latest blog on Exploiting Kaseya Unitrends Backup Appliance – Part 2
1
We are #hiring! @C1Security is looking to expand it's offensive security team, @TeamAresSec. We are seeking a Sr. Adversarial Engineer. Someone who has experience and passion for breaking things as well as R&D. If interested DM me! #infosecjobs #pentest #redteam #infosec
As someone who has reported vulns to a state run entity in the past (not MO), this is 100% on brand for these folks. Another example of why those in charge should surround themselves with experts in a given field and actually listen to them...
Missouri Governor @GovParsonMO just announced that he is spending $50 million in taxpayer money to investigate a Post-Dispatch reporter who notified officials that teachers' Social Security Numbers were publicly visible on the state's poorly made website.
5
Today marks 2 years since I went under the robo-knife to extract my tumor Franklin. Obligatory:
2
4
56
Recon for our team's first physical pentest since the pandemic with @Jun34u_sec. Really takes me back to the old days @TinkerSec. Wish you were here for some sick live Tweet action my friend😁
1
1
24
When all else fails, melodies of a Great Old One can lift the spirits.
TIL: My ears will still take an 8G piercing with no resistance/pain. Figured they would have closed up further after 12 years.
The response when you ask for a review/sign-off on the phishing campaign created for an assessment with @0xm1rch and @Trowalts
1
3
Did you know that some beard products contain avocado oil? Learned that the hard way today, cuz guess who is very allergic to avocadoes? (Spoiler below)
3
Vendor: We take the handling of vulns seriously, we investigate/respond to all potential vuln reports. Also Vendor: Security and vuln bulletins ain't free ya know! A login and active gold-club maintenance contract is needed to view our "Premium DLC Knowledge Articles"
3
Convo had whilst battling Word format weirdness on a massive pentest report with @0xm1rch: "Why does this table suddenly have Wingdings2 in the column titles?" "The bulleted lists... keep undoing my changes after I fix it." "Your report is fucking haunted."
1
4
Yes ERCOT it is our fault for needing to use electricity as consumers. "Set your thermostat to 78 degrees or higher" - Listen here shitbirds, the AC in my aging apartment building struggles to keep my place _AT_ 78 degrees running non-stop. Guess that's my fault too.
1
2
Making some Hasselback potatoes for a gathering of good friends and family today. Cracked open one of my @Unibroue À Tout le Monde @Megadeth beers finally. Absolutely delicious, well worth the wait!
3
Moved all my critical infrastructure into a vacuum chamber, this is the basic stupid easy air gapping everyone is talking about right? ...right?! Wish I could figure out why the CPU temp alarms keep going off, security is hard...
1
7
Don't mind me, just panic buying gas in small glass containers like a good consumer.
3
You ever begin an engagement and think "Is this a CTF? Are they just trolling me? Is it just this bad?" Hmm... Maybe a Windows Server 2003 instance running MS FrontPage shouldn't be internet facing?
7
4
47
psst, wanna sit at the cool kids table? I mean... we've got open DFIR positions that need to be filled! Both remote and local (DFW Area). If interested either hit up me in DMs, or @PhantomNeural / @paragonsec It's a fun and growing crew.
Are you a top tier DFIR professional at any level of your career? If so hit me up in DMs I have 7 roles I am looking to fill.
The joys of N. Texas hail storms. Unfortunately that garage is storage for car parts and tools mostly. Thankfully this cover works really well.
2
8
The OEM battery on the RS served admirably, but it's looking a little rough. I'm already in here anyways, might as well replace it now.
1
1
Now that the battery and tray are out, time to replace the spongy rubber shifter bracket bushings with solid aluminum.
2