IT-Security Consultant | Problem Solver | Father | Mastodon: https://xitter.cf/t.co/ZNMpwcZQ3y | Bluesky: https://xitter.cf/t.co/bNnR31nkOQ

Deutschland
Joined January 2010
SSH - Attacks and Best Practices by @compasssecurity - Recon & Info Leakage - Authentication, CAs, MFA & FIDO2 - Port Forwarding / Tunneling, Agent Forwarding - Hardening, Post-Quantum Crypto, Auditing & more youtube.com/watch?v=Q3nk5H1m… #infosec #pentest #redteam #blueteam
1
109
Many cybersecurity myths are outdated and distract from real risks. An open letter calling for practical, evidence-based security advice. Read more: hacklore.org/letter #infosec
13
Denny Fischer retweeted
If you have Active Directory Certificate Services (ADCS) in your environment, run Locksmith now! In Active Directory Security Assessments, we have found critical security issues in *most* ADCS configurations. The great thing about Locksmith is that it doesn't just highlight the security issues in your ADCS environment, but also provides the command to remediate it! If you're a pentester/red teamer, Locksmith is great for you to provide remediation recommendations to your customers. github.com/jakehildreth/Lock… #ActiveDirectorySecurityTip
8
256
2
1,007
67,123
Denny Fischer retweeted
This is so much! 🔥🔥😎 Found two new Potato triggers just today. Not only Potato but can also be used for LPE as remote auth is done which could be relayed to LDAP without Signing enabled. Or relayed to ADCS for a certificate. github.com/warpnet/MS-RPC-Fu…
5
176
1
573
25,588
ArgFuscator is an open-source web app that generates obfuscated command lines for common system tools. Great for testing your defenses against real-world attack techniques. argfuscator.net #infosec #pentest #redteam #blueteam
36
How well do you protect your privacy? The Privacy Checkup helps you assess your online surveillance defenses and take steps to protect your data. privacy-checkup.info (English, Deutsch, Español) #privacy #infosec
21
A great read on the exploitation of VMware vulnerabilities - from both attacker and defender perspectives - plus practical recommendations to strengthen your security posture. Breaking the Virtual Barrier: From Web-Shell to Ransomware sygnia.co/threat-reports-and… #infosec #blueteam
1
38
Eine kriminelle Organisation hinter mehr als 75.000 Fake-Shops, >1M Bestellungen & >$50M Schaden. Einblick in ihr ausgeklügeltes System & wie sie Käufer täuschen. #38C3: "Fake-Shops von der Stange: BogusBazaar" mit @kaibiermann und kantorkel. media.ccc.de/v/38c3-fake-sho… #infosec
75