Researcher, Red Teamer, Developer. Opinions are my own
Joined December 2018
- Tweets96
- Following174
- Followers213
- Likes250
Anthony Rhodes retweeted
Version v3.3.0 of #OWASP Amass has been released!
The first version of the new data model has been implemented. Future releases will support saving findings into Gremlin (@apachetinkerpop) and @neo4j #GraphDatabase systems
#osint #recon #opensource #assetdiscovery #bugbounty
Anthony Rhodes retweeted
Version v3.2.0 of #OWASP Amass has been released!
The tool has been refactored quite a bit and the default settings run the enumerations much faster.
Use the '-max-dns-queries' flag if you wish to slow things down
#osint #recon #infosec #opensource #assetdiscovery #bugbounty
Anthony Rhodes retweeted
Please share this as widely as possible. Why should we have to police Amazon? This problem is ongoing since 2017. These counterfeits are shipped and sold by AMAZON, NOT A THIRD PARTY. This is not Marketplace.
Amazon counterfeit. Images were posted to Amazon.com by a concerned customer July 12, 2019, amazon.com/gp/customer-revie…. Counterfeit is shipped and sold by Amazon.com -- NOT a third party. Why do we have to police Amazon? Please RT. @nostarch @amazon
Anthony Rhodes retweeted
🎉 Go 1.13 RC1 is released!
🏃♀️ Run it in dev. Run it in prod. File bugs.
🗒️ Release notes: tip.golang.org/doc/go1.13
⬇️ Download: golang.org/dl/#go1.13rc1
#golang
Anthony Rhodes retweeted
Pre-auth RCE on Fortinet and Pulse Secure (prior: Juniper) SSL VPN's by @orange_8361 and @mehqq_ - over 500k such VPN's on the internet. Heap overflow, arbitrary file read, plaintext passwords, magic backdoor, command injection...
Defcon slides:
media.defcon.org/DEF%20CON%2…
Anthony Rhodes retweeted
Nmap Defcon release! Enjoy version 7.80: seclists.org/nmap-announce/2…
Anthony Rhodes retweeted
As promised during our talk, we have released the user exploitation features for SharpGPOAbuse! @den_n1s @VillageRedTeam #DEFCON27
github.com/mwrlabs/SharpGPOA…
Anthony Rhodes retweeted
Thanks all for attending my #DEFCON talk! Humbling to see such a full room even on Sunday. Slides and demo videos are online at the media server.
Slides: media.defcon.org/DEF%20CON%2…
Demo vids: media.defcon.org/DEF%20CON%2…
Anthony Rhodes retweeted
I’m suprised that CVE-2018-13382 (a trivial « backdoor » in Fortigate SSL VPN) didn’t get much attention, even after @orange_8361´s talks in Vegas... blog.orange.tw/2019/08/attac…
Anthony Rhodes retweeted
Ready to start automating your own custom workflows?
Sign up for the beta of GitHub Actions with built-in CI/CD today 👇
github.com/features/actions
Anthony Rhodes retweeted
Garfield may know lasagna, but does he know the required height of a fence or the appropriate type of fire extinguisher to use for an electrical fire?
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
Anthony Rhodes retweeted
Question: How do I abuse a relationship that #BloodHound is showing me?
Answer: Right click the edge and click "Help" for lots of useful info including abuse instructions, opsec considerations, and references.
Anthony Rhodes retweeted
Two #OWASP #Amass contributors (@fork_while_fork and I) will be demonstrating use of the tool at #ReconVillage #DEFCON27 @PHVegas from 14:40 - 15:15. We look forward to speaking at such an excellent event!
reconvillage.org/talks.html
Anthony Rhodes retweeted
OWASP Amass v3.0.22 has been released!
Amass now supports "hashcat-style" wordlist masks within the #DNS name alteration and brute forcing engines. Use this to perform mask attacks against your target!
#osint #recon #redteam #bugbounty #AssetDiscovery
github.com/OWASP/Amass
Anthony Rhodes retweeted
The implementation of the "hashcat-style" wordlist masks for the Amass name alteration and brute forcing engines was provided by another project contributor.
Thank you for this feature @fork_while_fork!
Anthony Rhodes retweeted
Another One! #PDXOWASPTrainingDay OWASP Amass: Discovering Your Exposure on the Internet with @jeff_foley project lead of @owaspamass!