@_BadCharacters

researching pentesting, red teaming, RFID and other bad characters on the internet | OSCP

badcharacters.io
Joined November 2021
  • Tweets130
  • Following781
  • Followers129
13Media
Hide yo low frequency badges! RFID Wall of Sh33P is back at @physsec @defcon 32 with our infamous gooseneck reader. Here's day 1! Project link: github.com/sh0ckSec/RFID-Goo… #defcon32
5
6
548
Flipping Locks (The Remix) was PACKED! Thanks for all the love! #defcon32 #dc32 #hackersummercamp
3
1
8
437
Thank you everyone for attending! Another talk at 5PM today!
Physical Security Village@physsec9 Aug 2024
Flipping Locks (The Remix) was PACKED! Thanks for all the love! #defcon32 #dc32 #hackersummercamp
2
4
110
Replying to @_BadCharacters
@_BadCharacters and I are back at @defcon this weekend with the incredible @physsec! Check out our talk on remote badge cloning with the @flipper_net. New content discussing our real life bypass techniques - can't wait! #defcon32 #flipperzero
3
1
206
Thanks for everyones patience - we finally have our 2023 village recordings online! You can check them out on our YouTube here: youtube.com/channel/UCFlepVH…

Social Engineering Community

The Social Engineering Community is formed by a group of individuals who have a passion to enable people of all ages and backgrounds interested in Social Engineering with a venue to learn, discuss,...

youtube.com
13
2
25
5,335
We would like to express our condolences to Blue Teamers. Microsoft has announced Microsoft Excel will now support Python. More information: techcommunity.microsoft.com/…

Introducing Python in Excel: The Best of Both Worlds for Data Analysis and Visualization | Micros...

            Today, we are excited to introduce the Public Preview of Python in Excel – making it possible to integrate Python...

techcommunity.microsoft.com
66
649
154
2,313
262,229
jcache retweeted
B@Britt_Cann0n13 Aug 2023
Replying to @sh0ckSec @_BadCharacters
This was a very interesting talk that absolutely put terror in my little marketing heart
2
3
127
Don't forget get to check out the new RFID Wall of Sh33P in the @physsec! We caught a quite a few badges so far with the RFID Gooseneck! 😅 #DEFCON31
3
32
7,037
Our village talk "Flipping Locks: Remote Badge Cloning with the Flipper Zero" by @sh0ckSec and @_BadCharacters is SUPER popular! Due to the demand (and huge line outside the village trying to get in), they'll be giving their talk again TODAY at 4:30pm!
1
3
14
572
Ready to rock these 2 presentations at @defcon 31. @_BadCharacters and I brought goodies for each. Come find the kicks and get a sticker! Friday Aug 11 | 2:30-3:30PM | @physsec Remote Badge Cloning with the @flipper_net Sat Aug 12 | 9:30-10AM l @sec_defcon Your Swag is my Swag
3
4
457
Packing for the @defcon 31 demo! Come check @_BadCharacters and I talk about remote badge cloning on Friday, Aug 11th 14:30-15:15 at the @physsec village! #DEFCON31 #flipperzeo
2
10
2
43
8,496
jcache retweeted
an0n@an0n_r05 Mar 2023
Meterpreter + Metasploit is absolutely awesome. And anyway, it is not even certain that Defender will catch it: add the stageless payload using basic encoding into a template exe (thread exec), disable autoload of stdapi (you can load it later after callback), and that's all. 💥
Josh@passthehashbrwn1 Mar 2023
It's insane that Meterpreter + the Metasploit backend is a jawdroppingly complex piece of malware that many of us could (and do) learn so much from, but people call it shit because the default artifacts are sigged by Defender
12
158
3
699
133,144
Why is it always you? #Fortinet
10
132
3
601
143,182
Finally revamped my original @hashcat rule OneRuleToRuleThemAll. The new and improved OneRuleToRuleThemStill has ~5% reduced rules with 0% performance drop against multiple breach datasets. Link is in the blog. Happy cracking! in.security/2023/01/10/oneru… #pentest #redteam

OneRuleToRuleThemStill: New and Improved - In.security

tl;dr – You can find the new OneRuleToRuleThemStill on Github. It’s been a few years since Will Hunt created the hashcat rule OneRuleToRuleThemAll.rule, the original blog post of which can be found...

in.security
74
208
18,912
jcache retweeted
mpgn@mpgn_x6420 Dec 2022
the mindset you need to have when going to an internal pentest "THERE IS NO TOMORROW" 🥊🥊🥊
2
4
55
9,260
“GPT3 will take your job” my brother in christ most managers can’t rotate a PDF
6
197
24
1,623
You are living an idyllic life. It might not be your ideal situation. But someone out there wishes so bad they were in your shoes.
28
42
6
451
everyone talks about how social media is bad for your mental health but what about microsoft word
32
454
51
2,516
they call it "single sign on" but they should call it "dozen-flickering-redirects sign on"
34
279
13
3,208
My @DEFCON 30 talk recording is out! Check it out - youtube.com/watch?v=3OmyVJDj… Pretty proud of this one, it's a few years in the making - glad it finally happened this year!

DEF CON 30 - Bill Graydon - Defeating Moving Elements in High Security Keys

A recent trend in high security locks is to add a moving element to...

youtube.com
2
5
26
Load more