Pentester, researcher, developer, hunter, cat video enthusiast
Rapid City, SD
Joined March 2015
- Tweets141
- Following156
- Followers862
- Likes70
brian fehrman retweeted
#HuntingTipOfTheDay
InstallUtil is a popular living-off-the-land binary for running payloads (🙏 @subtee). Have a hunt for unusual parent processes and low prevalence /u param locations.
📎lolbas-project.github.io/lol…
👉blackhillsinfosec.com/powers… 🙏 by @fullmetalcache (@BHinfoSecurity)
brian fehrman retweeted
There are still some seats open for this training. Come join me in a couple weeks for some cloud hacking. This is a fully remote 4 day (16 hours total) class for $395. Also, each day is recorded so you can view it at your leisure.
I'm stoked to be teaching my Breaching the Cloud course again November 2-5 as part of Secure West Virginia. A training ticket also gets you access to the rest of the Secure WV conference. June & August classes sold out quickly so sign up soon here: wildwesthackinfest.com/breac…
brian fehrman retweeted
The Ghidra Book is now available in Early Access! Get eight chapters now when you pre-order from nostarch.com/GhidraBook. Sign up for our newsletter to get a special discount on this and future pre-orders! nostarch.com/mailchimp/subsc…
brian fehrman retweeted
Happy to introduce everyone to our Initial Access Operations course! We’re looking at different ways bad guys try to break into networks and the phishing malware they develop. It’s a hands on class, be ready to code!
Come join us at @BSidesCHS!
Tickets on sale now for @FortyNorthSec’s course “Initial Access Operations”.
Learn the techniques used by attackers to phish companies and write your own malware.
A portion of the proceeds benefit @BSidesCHS, a 501c3 nonprofit.
eventbrite.com/e/initial-acc…
Increase your chances of a successful C2 channel by relaying your traffic through CloudFront. No need for a categorized domain, some companies whitelist it, looks like CDN traffic, and hides the origin of your C2 server! @BHinfoSecurity blackhillsinfosec.com/using-…
brian fehrman retweeted
Notice to vendors: Next week if your sales dweebs tell me you use deep learning, AI, or machine learning at #RSAC but won't explain how, I'm live tweeting all the fail with hashtag #VendorWordVomit. Naming and shaming. You've been warned.
Fixed an issue with the Password Filter deployment in CredDefense so it /should/ be good now if you run CredDefense.exe that's in the "Builds" folder. Next up is cleaning up the whole build process. github.com/creddefense/credd…. @BHinfoSecurity
Added quick fix so that PowerLine can now be built on Win10 w/o .NET 2.0/3.5. Now it /should/ build on any Win7 or Win10 system. github.com/fullmetalcache/po… @BHinfoSecurity
brian fehrman retweeted
Our next webcast will be covering many of the lesser known, but amazing, tools we use all the time at BHIS.
Yea, they are all free tools. Because freedom is awesome.
December 11th, 1ET.
attendee.gotowebinar.com/reg…
If you aren't looking for Lync servers, you should be! All of the benefits of attacking OWA portals (user enum, password spray, domain info,etc.). There's a good chance one is present and an even better chance that it's been forgotten. Check out this post:
trustedsec.com/2017/08/attac…
brian fehrman retweeted
Straight from the office of @fullmetalcache we have "PowerShell w/o PowerShell Simplified" on the #BHISblog today: blackhillsinfosec.com/powers…
Having trouble remotely running commands as another user? Check out this simple tool I put together. github.com/fullmetalcache/ru… @BHinfoSecurity
Finally pushed a change for CredDefense. It should hopefully fix the issue where DCs wouldn't show up in the Password Filter module but would show in the Password Audit module. @BHinfoSecurity #creddefense github.com/CredDefense/CredD…
brian fehrman retweeted
An entire book on PCB reverse engineering! Includes work by @joegrand, @johndmcmaster, and Sergei Skorobogatov among others :) amazon.com/dp/1979331383
Verifying myself: I am fullmetalcache on Keybase.io. tnCkS7s-SwGliVv3mh7Sar3tF8Vu6BLNjMx4 / keybase.io/fullmetalcache/si…
brian fehrman retweeted
Anyone understand how push to start car key spoofing works? Surprised I didn’t see it demonstrated at @defcon 🤖🧐
ordered edible arrangement for wife. scammers called store and scammed order info. scammers then used order info to call me to try for cc info. nice try...
brian fehrman retweeted
Thanks to @0xderuke , @dafthack and @fullmetalcache and @BHinfoSecurity for Cred Defense toolkit. Works great with big cracked lists.
brian fehrman retweeted
Brian & Rick did an amazing job on the hardware hacking labs @WWHackinFest I dumped firmware and found hard coded passwords! #WWHackinFest
brian fehrman retweeted
Extra thanks to @fullmetalcache and @strandjs and family for the extras that really made the trip special