UK
Joined January 2014
Jon Aubrey retweeted
"Can it Resolve DOOM? Game Engine in 2,000 DNS Records" blog.rice.is/post/doom-over-…
2
6
2
16
1,095
Jon Aubrey retweeted
Fancy retrieving plaintext user credentials, deactivation passcodes and uninstall passwords for Palo Alto Global Protect VPN? Thank goodness Palo Alto make that easy for you ... Full write up here : shells.systems/extracting-pl… Tooling available here : github.com/t3hbb/PanGP_Extra…
2
67
6
195
65,147
Jon Aubrey retweeted
Cortex XDR full bypass with stock meterpreter payload. Screenshot from tooling demo, apologies for quality.
12
99
16,033
Jon Aubrey retweeted
Just a brief article showing how easy it is to figure out where the canary files are kept on systems using Cortex XDR and how to avoid them. Issue was reported to Palo Alto, but it was determined to be a non-issue, so … here you go 😊 shells.systems/cortex-xdr-ra…
3
41
1
122
13,385
Jon Aubrey retweeted
You want to understand what could have happened, read from someone who KNOWS this stuff and is giving you cold hard facts based on what's in the video. No FUD, no mention of a cyber attack, just real life experience and sound knowledge.
The ship has a full blackout for over a minute before impacting the bridge, followed by a second shorter loss of power. Just after the lights come back on, you can see heavy soot which would likely be one of the main diesel generators being brought up.
1
8
593
Ok fellas... I am droppping a thread about all the cool #Hackers 🧑‍💻🥷stuff I have found around #Aliexpress... It will keep growing with the time! #HackerArsenal
6
121
11
612
171,223
Jon Aubrey retweeted
A really good description of how @LinusTech had their YouTube channel taken over, what they did during the take over, and their lessons learnt. Lots of other companies could learn a lot from this. youtube.com/watch?v=yGXaAWbz…
6
11
1,984
Infosec people! How often do you feel imposter syndrome (the feeling of being a ‘fraud’)? (Please RT)
38%All the time / daily
35%Often / weekly
17%Sometimes / monthly
10%Never
333 votes • Final results
9
14
3
6
7,711
Jon Aubrey retweeted
Replying to @virtualabs
Based on their work I have developed a more complete version which decodes TPM transactions on the SPI bus and which also works with the GUI: github.com/ghecko/libsigrokd… (I'm waiting for a target to push an .sr file for libsigrok repository integration)
16
28
Jon Aubrey retweeted
I'm super please to announce the release of NSGenCS - an extremely simple, yet extensible framework to evade AV with obfuscated payloads under Windows. Pick a technique and delivery method or create your own - new ones can be added in under a minute github.com/t3hbb/NSGenCS
2
37
1
130
Jon Aubrey retweeted
Making sense of #PrintNightmare. A flowchart to help understand exploitation of CVE-2021-34527. Special thanks to @tiraniddo, @dez_, @gentilkiwi and @_f0rgetting_ for their test input and insights.
16
503
23
1,057
I’M TRYING TO GO TO SPACE & you can help me get there! If you retweet this video, I’ll print your name on a shirt and wear it in space in your honor ☄️ #inspiration4contest #sendsimonetospace sendsimoneto.space/
690
39,137
2,382
36,221
You men want to know how shitty it is for femmes in infosec? Almost every major conference has a femme group whose sole purpose is making sure no femme goes anywhere alone because there is strength in numbers. The "do better" bar ain't that high.
29
74
7
673
Save the date... 29th and 30th July 2020 BSides Bristol is back! And our Call for Presentations is now open - get submitting! bsidesbristol.org.uk/call-fo…
3
19
3
42
How most modern meetings end now: “Alright we’re getting kicked out of this room...”
83
1,962
242
10,470
If you're bored on the train to work go to the MOT Check service. gov.uk/check-mot-history Search the MOT status of car Reg RJ04ZYX. Have a look at why it failed in 2015. A fine use of public record keeping, I’m sure you’ll agree.
42
133
54
333
Jon Aubrey retweeted
Happy Sunday! It’s hot outside and wifireg.defcon.org/ is up. And, did we say it’s Sunday? #defcon
2
47
7
100
Jon Aubrey retweeted
Replying to @SecurityJon @defcon
Yes! Still keeping it to the 6TB (or larger) drives. We don’t directly recommend a manufacturer but you can check out the drive statistics for our past cons here: dcddv.org/dc26-briefing