Security Engineer: loving cloud, red teaming, automation and learning
Joined February 2013
- Tweets199
- Following205
- Followers162
- Likes111
please watchout; this repo https://github].[com/TechDevNest[/]BTSwap is dropping #BeaverTail and #InvisibleFerret some IoCs:
216.173.115[.]200:1244
67.203.7[.]205:1244
45.59.163[.]55:1244
95.179.135[.]133:1244
node ~/.vscode/test.js
python3 "~/.npl"
@github @malwrhunterteam
Edoardo Rosa retweeted
Ongoing spam campaign involving github repos.
Domain github-scanner[.]com puts malicious content in users clipboard upon button click and requiring for Windows payload execution
cc @malwrhunterteam
Edoardo Rosa retweeted
#Ursnif SMB 62.173.145.]113 [.]164 #Italy
Change from exe To Vbs > Url > exe payload
Samples
bazaar.abuse.ch/browse/tag/6…
Url
http://serverlogins].com/pit.exe
Run
app.any.run/tasks/0f33d667-d…
cc @felixw3000 @58_158_177_102 @fumik0_ @sugimu_sec @bry_campbell
#Ursnif SMB 62.173.145.]113 #Italy
Samples
bazaar.abuse.ch/browse/tag/6…
cc
@58_158_177_102 @felixw3000 @fumik0_
Edoardo Rosa retweeted
Ok fellas... I am droppping a thread about all the cool #Hackers 🧑💻🥷stuff I have found around #Aliexpress...
It will keep growing with the time! #HackerArsenal
Edoardo Rosa retweeted
La squadra rinuncia alla finale per dare il suo sostegno
onrugby.it/2023/05/27/la-fin…
Edoardo Rosa retweeted
A #pentesting tool for your #hacking arsenal: Use nuvola to dump + perform automatic & manual #security analysis on #AWS environments, configurations, and services via predefined, extensible and custom rules created w/ a simple #Yaml syntax. Try it today! bfx.social/3TUVYIm
Edoardo Rosa retweeted
We are proud to release Datadog's first security study: "The State of AWS Security - A Look Into Real-World AWS Environments"
Read the report to learn about key mechanisms to secure AWS environments and how organizations worldwide are implementing them. dtdg.co/state-of-aws-cloud-s…
On nuvola's repository README (github.com/primait/nuvola) you can find all links for the #RomHackCamp #slides and #demos that you saw during the "You Shall Not PassRole!" talk
Edoardo Rosa retweeted
Today we're releasing nuvola 🌩️(github.com/primait/nuvola) during #RomHack camp. nuvola is a new born open-source tool to dump and perform automatic and manual security analysis on AWS environments, especially useful to find privilege escalation paths! #aws #redteam #security
#RomHack Camp has finally started!
Thrilled to be here and have the fantastic opportunity to talk at the best security conference in Italy 🔥
Edoardo Rosa retweeted
Here's a demo of the MFA bypass, which I particularly love because it could all be done in the GUI, no need to do any lower level operations (original at dirkjanm.io/assets/raw/mfaov…)
Edoardo Rosa retweeted
It's cloudy today... and that’s a good thing.
Our Global Cloud team has officially released our internal cloud security documentation to the world.
Check it out at secwiki.cloud
And if you want to help make cloud security a bit clearer, please contribute 🌤🌤
