Security analyst. Random code bits at https://xitter.cf/t.co/S7I4BYjc2V
South Africa
Joined October 2010
- Tweets92
- Following358
- Followers612
- Likes393
Michael Kruger retweeted
The fact that @AndresFreundTec didn't just write the whole xz thing off as "It's probably DNS" is honestly amazing.
Michael Kruger retweeted
Had a blast climbing Norwegian 🇳🇴mountains with some amazing people, @oleavr and @_cablethief !
Michael Kruger retweeted
My next book is *The Internet Con: How to Seize the Means of Computation.* It's a recipe to disenshittify the web and bring back the old good internet. The book is from @VersoBoooks, but the #audiobook is from me - because Amazon refuses to sell it:
kickstarter.com/projects/doc…
1/
ALT My forthcoming book 'The Internet Con: How to Seize the Means of Computation' in various editions: Verso hardcover, audiobook displayed on a phone, and ebook displayed on an e-ink reader.
Michael Kruger retweeted
Every once in a while I'm reminded that dnsmasq, a lightweight DNS and DHCP server that's bundled into *almost every IOT thing and Linux distro*, is a hobby project maintained by one guy in the UK named Simon.
Nobody pays him and he doesn't get near the thanks he deserves.
Michael Kruger retweeted
A morning @defcon run with @_cablethief and Jaco to The Mill (for those who remember Defcon at the Riv). Even met @elkentaro on the way.
A quick Docker hostapd-mana RADIUS service for capturing creds using an external device:
github.com/sensepost/berate_…
Bonus: Certificates with Lego and CF DNS are so convenient
go-acme.github.io/lego/usage…
Bonus Bonus: join us at BH for further WiFi shenanigans
blackhat.com/us-23/training/…
Excited to teach wireless hacking and try to convince more people that using wpa_sycophant is easier than it seems (most of the time 😝).
The airwaves are constantly abuzz with signals.📶Wondering how to make sense of the 2.4 & 5GHz Wi-Fi frequency ranges?
Come join our esteemed Wi-Fi training at #BlackHatUSA
Visit ow.ly/Xmru50NHg4o for more info on the course & for bookings
🐦 Early bird tickets end 26 May
Michael Kruger retweeted
The RID500 Admin account doesn't benefit from Protected User Group restrictions. This is a MS WONTFIX & means you can authenticate as Admin using RC4 KRB or perform any KRB delegation attack if you impersonate the RID500 Admin. The latest find by @Defte_
sensepost.com/blog/2023/prot…
Michael Kruger retweeted
Another 0xC0FFEE session tonight with two guest speakers:
Jeandre Mitton talking about using Pre/Post Scripts with Postman for CAPTCHA bypass
and
@leonjza talking about the LightNeuron malicious mail transport agent he built for MITRE ATT&CK purple teaming.
1/2
Michael Kruger retweeted
Struggling to proxy your offensive tools (*cough, Windows, cough*)? See how @_cablethief uses WireGuard and tun2socks to make remote networks available via a network route (from any device or container), over SOCKS! sensepost.com/blog/2022/wire…
Michael Kruger retweeted
Yeah! @defcon wifi fixed this. Plus wpa_supplicant can do leaf cert validation these days too!
Finished showing off ppp_sycophant to @athackcon arsenal. Really enjoying the conference and Saudi!
@ToolsWatch
github.com/sensepost/ppp_syc…
Michael Kruger retweeted
The crew! @athackcon has been amazing. Saudi has been amazing. Training's pretty darn good. Conference has a great line up. Jason is one happy dude. Thanks @sensepost_train @orangecyberdef @sensepost @athackcon @SAFCSP
Michael Kruger retweeted
Good luck to all the trainers at @athackcon in #SaudiArabia!
To the @sensepost crew - may it be a great kickstart to getting back to in person training. Smash it!
#atHackcon #BlackHat #orangecyberdefense
Awesome! My two tools berate_ap and wpa_supplicant have made it into Kali :D!
kali.org/blog/kali-linux-202…
My writeup from 2019 for some context:
sensepost.com/blog/2019/peap…
Michael Kruger retweeted
🎉We're super excited to publicly release assless-chaps, our super fast MSCHAPv2 cracking tool github.com/sensepost/assless…
Our DEF CON @rfhackers Village talk with @_cablethief & me explaining it is out youtube.com/watch?v=lm7Cuktp…
Our new hashcat modes 27000/27100 have been merged too!
Michael Kruger retweeted
.@_cablethief found the perfect shirt on Amazon for our talk. So I bought it for him, sort of. amazon.com/Ask-About-Assless…
🎉We're super excited to publicly release assless-chaps, our super fast MSCHAPv2 cracking tool github.com/sensepost/assless…
Our DEF CON @rfhackers Village talk with @_cablethief & me explaining it is out youtube.com/watch?v=lm7Cuktp…
Our new hashcat modes 27000/27100 have been merged too!
Michael Kruger retweeted
A lot of the time, when I have a writing deadline, I procrastinate with code. With LaTeX I can do both at the same time.
This Post is from an account that no longer exists. Learn more
Michael Kruger retweeted
Here are my notes on reverse challenges for the HTB Business CTF 2021. My solution on Ghosty will be soon.
github.com/Titanexx/CTF-Writ…
Michael Kruger retweeted
Thats a wrap for the @hackthebox_eu Business CTF 21. We played as the @orangecyberdef / @sensepost team and placed 5th! I'm super proud of the team, and all the hard pwntime they put it! Get some zzz's @felmoltor @JCoertze @TH3_GOAT_FARM3R @Titanex8 @_cablethief @gav1no_ @gmilte!
ALT HackTheBox Business CTF 2021 5th place for the Orange Cyberdefense team!