Pentester • Red Teamer • CTF @laniakeactf On-prem, cloud, containers — wherever the misconfigs are

Joined June 2023
At #x33fcon currently @_ar0x4 presenting "#Tunnel Vision: What #Microsoft's Secure Edge Can't See" - x33fcon.com/#!/s/ArshiaReisi… - #red, #purple, #research, #windows
7
17
912
Europeans watching the man who called NATO obsolete, then threatened a member’s territory, now ask for help for the war he already ‘won’
163
2,898
185
17,898
585,315
D3STY retweeted
Remote employees when they visit the office for the first time 🤣🤣🤣🤣
33
309
31
3,522
232,045
D3STY retweeted
Here's a video PoC for Azure Entra ID SignIn Log Bypass in action. I had to make it to help MSRC replicate it (lol). You'll see how simple this bypass was. No worries admins, Microsoft says that it was only a "Moderate" issue.
12
66
3
415
41,729
Elon musk has made this platform a disinformation haven leveraging the monetisation features for people in low income countries. I would guess that if you spread enough hate here you can make a good living if you live in India / Nigeria etc
19
31
7
399
59,371
The rumors seem to be true... #OPSECfail
73
Me spotting LLMs in my replies
14
10
1
240
4,993
Their only weakness...
3
50
4
309
23,168
Doing an internal pentest in an unpatched Windows environment.
3
32
1
262
22,422
D3STY retweeted
Created small tool that joins a device to a Tailscale network and exposes a local SOCKS proxy. It’s built for red team pivots and quick access into (restricted) environments. The underlying tsnet library is currently Go-only, so it's semi-portable for now. github.com/Yeeb1/SockTail
3
61
1
222
28,840
TL;DR: AIs are now junior red-teamers who clear the first hour of work faster than most humans. arxiv.org/pdf/2505.19915
4
16
2,050