@ironhex

Cyber Threat Intelligence | Detection Engineering | Open DM

 SupaNova
Joined January 2017
  • Tweets2.3K
  • Following1.4K
  • Followers186
3Media
Burpsuite macros to the rescue!
41
for real
43
68
8
819
43,993
[NVISO Webinar]: Mastering Adversary Emulation with Caldera: A Practical Guide: events.teams.microsoft.com/e…
1
20
CVE-2023-36723 · Windows Container Manager Service Elevation of Privilege Vulnerability. PoC github.com/Wh04m1001/CVE-202…
30
93
13,469
Whenever I see “security researcher”, I always think back to the time that a TI company used “self-proclaimed security researcher” in a threat feed while discussing one of my posts… how far things have come 🤣🤣 Thanks @campuscodi xitter.cf/_rastamouse/status/989…
Rasta Mouse@_RastaMouse26 Apr 2018
Replying to @_xpn_
@_xpn_ you may get a kick out of this "threat intel" email i got today...
5
5
44
19,658
Wonder what this fellows doing? Regardless looks cool.
23
10
94
7,992
Someone gets really mad when I tweet and it gets a lot of likes so I want to experiment. My dog farted. Please like and share.
5
29
1
163
6,488
.@volatility New Release: #volatility3 v2.5.0 - visit github.com/volatilityfoundat… for details and downloads. #memoryforensics #dfir
82
187
21,049
Pretty much
8
27
2
179
18,131
My writeup for CTF challenge about pwning SerenityOs' JS engine - eternal.red/2023/night_js/

night.js

Pwning javascript engine from SerenityOs

eternal.red
33
1
174
53,054
A tale of tampering with EDR's Anti-tempering feature, by @dottor_morte #redteam riccardoancarani.github.io/2…

Attacking an EDR - Part 2

Introduction - Where we left off DISCLAMER: This post was done in collaboration with Devid Lana. You can find his blog here: her0ness - Attacking an EDR Part 2 Continuing from our last research, we...

riccardoancarani.github.io
49
143
10,689
Ferrous retweeted
Renwa@RenwaX232 Oct 2023
CTF Player vs Bug Bounty Hunter
47
338
63
2,127
335,412
cl0p ransomware group has ransomed SickKids, one of the largest pediatric healthcare facilities in the world. They've exfiltrated 13 years of data related to fertility, pregnancy, and healthcare information on children (including newborns). techcrunch.com/2023/09/25/de…

Decade of newborn child registry data stolen in MOVEit mass-hack | TechCrunch

The breach affecting more than 3.4 million people — including newborns and children — is one of the biggest MOVEit-related hacks of the year.

techcrunch.com
26
95
15
345
90,560
An initial access broker, is selling access to an African Bank (revenue $10M).
20
66
24
190
60,765
Get the “J-Link Mini” the project page said along with the mention of the TC2030.. something tells me this ain’t going together as is. This CatSniffer better talk once I fix it.
3
1
31
3,051
The brain is one of the most important parts of a human body, after all. 🤪 #linux
7
124
4
796
35,570
GitHub - timb-machine/linux-malware: Tracking interesting Linux (and UNIX) malware. Send PRs github.com/timb-machine/linu…

GitHub - timb-machine/linux-malware: Tracking interesting Linux (and UNIX) malware. Send PRs

Tracking interesting Linux (and UNIX) malware. Send PRs - timb-machine/linux-malware

github.com
49
1
160
17,974
The illusion of free choice
6
28
2
141
13,430
POV: your full-chain exploit is complete
4
29
1
216
41,056
Ferrous retweeted
jeff@jeffssh13 Aug 2023
I have completed the FORCED ENTRY RCE + SBX chain with a PAC bypass. The calculator payload can be found here: github.com/jeffssh/CVE-2021-…. I learned a lot about iOS exploitation and can't wait to share that in a blog post, which I'll release along with the code to generate this PDF.
9
90
2
404
60,010
Load more