Infosec researcher | writes @ https://xitter.cf/t.co/QcBSo3gjVv | https://xitter.cf/t.co/qNy9VehcON
NoVA
Joined September 2010
- Tweets104
- Following215
- Followers197
- Likes301
shellsharks retweeted
Reverse engineering via GDB.
xitter.cf/ClownWorld_/status/158…
shellsharks retweeted
Zero Trust is not 0 or 1, but a progressive iteration.
A podcast with @shellsharks discussing all things zero trust and context-aware access, where it's going, and why it's important!
bit.ly/3CRq5eI
shellsharks retweeted
Irrespective of if/how you threat model currently, shellsharks.com/threat-model… from @shellsharks is a worthy read.
shellsharks retweeted
Nice collections of threat intel options. Each one of them has its own advantages but they are all interesting. Waiting for the modelig exercises. Good work by Michael Saas here! Thanks for sharing
My extensive guide on threat modeling and the popular threat modeling frameworks shellsharks.com/threat-model…
shellsharks retweeted
Domain controller, when validating a golden ticket created with an old krbtgt hash.
shellsharks retweeted
For a long time, I thought the only way to run a successful pentesting practice was to have access to expensive tooling and software.
This is completely untrue. Here's what we use internally at @risk3sixty to run pentesting engagements (for little to no cost whatsoever):🧵
shellsharks retweeted
Dall-E: will replace designers
Copilot: will replace engineers
OpenAI: will replace copywriters
Product Managers are safe because AI can’t sit poolside drinking margaritas while giving thumbs up emojis in Slack yet.
shellsharks retweeted
🃏 Free Web Pentesting Class by Stanford University 🃏
web.stanford.edu/class/cs253…
#stanford #infosec #github #education #thesecureedge #cybersecurity #hacking #web #Tech #learning #Crypto #bugbountytips
shellsharks retweeted
From a VR student today on our ROP chain lessons. I'm dying 😂:
"This week's been like"
shellsharks retweeted
📚 After several years of hard work, volume 0x1: "The Guide to Analyzing Malicious Software" of my "The Art of Mac Malware" book series, is available for pre-order!
Pre-order by (end of) this Friday to save 25% (code: PREORDER25).
🛍 Link: barnesandnoble.com/w/the-art…
shellsharks retweeted
Also I think people generally don't understand the economics of exploit development. If you are targeted with 0day then the other party has substantial financial stakes in compromising your device, you wouldn't get served 0day from a QR code scan randomly.
shellsharks retweeted
IDK how people are finding out about QR codes today like it's the end of the world. QR codes do not increase your risks as a user. Your scanner prompts you, yes, so it's just a link you don't have to type. Personally I dislike them but they are not more risky in any way.
shellsharks retweeted
Just dropped Metasploit module for CVE-2021-38759 - Default Raspberry Pi credentials - because it's so awesome. Feel free to add it to your arsenal 🙈
github.com/rdomanski/Exploit…
shellsharks retweeted
This is so f*cking cool!
xitter.cf/Elzo_/status/145594993…