Electronic engineer, security researcher, hacker, tinkerer
Cape Town, South Africa
Joined December 2016
- Tweets1.1K
- Following415
- Followers412
- Likes2.7K
shif/tty/mike retweeted
I love @RoganDawes 's Apostille for cloning x509 certificate chains to make certs look identical to users when they're forced to eyeball them when a rogue AP presents a different cert. But I wanted something more portable with fewer deps. You can grab GOpostille from 👇
shif/tty/mike retweeted
The work from @vanhoefm and friends showed that malicious channel switch announcements is a pretty good deauth primitive for management frame protection networks, so I added it to @aircrackng. Link below.
shif/tty/mike retweeted
Year 25 of SensePost training at BlackHat, I think this is my 17th time. cc @shifttymike
shif/tty/mike retweeted
Need to open doors from the outside without touching anything? Turns out thats possible with no touch sensors as @shifttymike details in his latest blog post. Link in 🧵👇
shif/tty/mike retweeted
Wifi hacking can be a useful tool, but people are out here grinding on WPA2 handshake cracking tutorials & menu driven attack tooling. When @sensepost built the 3rd iteration of our wifi hacking course for @BlackHatEvents - we did it to show what really works & how it works. 1/7
ALT A DALL-E generated image of a hooded person behind a computer with a large glowing wifi symbol on it. In the background are neon posters with the words WPA2 handshake cracking, PEAP relay access, certificate bypass and BLACK HAT. The style is neon cyberpunk.
shif/tty/mike retweeted
Attacks against AD CS are de rigueur these days, but sometimes a working attack doesn’t work somewhere else, and the inscrutable error messages are no help. Jacques replicated the most infuriating and explains what’s happening under the hood in this post sensepost.com/blog/2025/divi…
ALT A screenshot of an AD CS ESC1 attack using Certipy getting a KDC_ERR_INCONSISTENT_KEY_PURPOSE error.
I found the ZA hacker community through 0xc0ffee_cpt somewhere around 2013, now 12 years later I had the privilege of kicking off the first PTA event. What a cool group of people. May the community grow from strength to strength!
shif/tty/mike retweeted
Instead of relying on RemCom, what if we had a python client to interact with the latest, Microsoft signed PSExec? In this post @Defte_ details how he and the team did exactly this, including a tool, some PSExec internals and detection opportunities!
sensepost.com/blog/2025/psex…
shif/tty/mike retweeted
🚀 Exciting news for Pretoria hackers! 🚀
No more long drives to Joburg!
Join 0xCoffee PTA and connect with like-minded hackers.
📅 11 Feb 2025
🕖 7–9 PM
📍 Rock@88 Moreleta
👾 Show off projects
👥 Meet fellow hackers
🍵 Great vibes
💡 Got something cool to show? Message us!
shif/tty/mike retweeted
@0xc0ffee_jhb Reminder: @gerbot_ will be talking about AI for Offensive Operations, tonight (27 January) at Milkbar, Sandton.
shif/tty/mike retweeted
Our lineup for 0xcon JHB 2024 is live! 0xcon.co.za/#schedule
We received more submissions than expected and, unfortunately, couldn’t accept them all. Emails are on their way, check your inbox. 📢
A huge thank you to everyone who submitted—your contributions were amazing! 😎
shif/tty/mike retweeted
Calling all hackers: See you there! 🦀 🖥️
Tonight's (30 Sept) #0xC0FFEE Jozi will feature Gerhard Botha talking about lessons learned while building offensive tooling in Rust - with comparisons between C & Go.
It's at the usual place and time - Milk Bar, Sandton, 7pm. Be there.
shif/tty/mike retweeted
In @sensepost's #BlackHatTrainings API Exploration & Exploitation, embark on a learning journey to explore the art of attacking and securing API's. This course equips you to mitigate the majority of vulnerabilities through improved development practices. Register here: bit.ly/3XFgAbq ⚙️
shif/tty/mike retweeted
REMINDER to SAVE THE DATE! 📢
We are excited to announce that #0xcon2024 #Johannesburg is coming up on 9 November 2024 at the MTN Innovation Center! 0xcon.co.za
Tickets are available through Quicket - quicket.co.za/events/277605-…
See you all there! 😎 #infosec
shif/tty/mike retweeted
gowitness v3 is out! A huge task, but I refactored basically _everything_ for version 3 in just over a week, followed by also writing the longest release notes of my life! Hopefully it's the best version yet.
A lot has changed, so feel free to dig in. 🤖
🧵👇
shif/tty/mike retweeted
📢 The clock is ticking!
Our CFP for #0xcon2024 closes on 15 October 2024.
If you have groundbreaking ideas, this is your chance to share them with the community.
📝Submit your sessions here: forms.gle/YS2H5naMSsRjNdKK6
#infosec #CyberSecurity
shif/tty/mike retweeted
Joburg hackers! We’re alive and well and will be meeting at the usual place, usual time (Milk Bar Parkmore, 7pm)
@shifttymike will be taking us through some recent IoT hackery he did. Join us for some good conversation, food and networking.
See you there 😁
shif/tty/mike retweeted
REMINDER: #0xcon2024 CFP is still open! 📢 Be sure to submit before 15 Oct 2024 here: 0xcon.co.za/#cfp
#Tickets to the #0xcon2024 #JHB event will be going out soon, you don't want to miss it, watch this space! 👀
#cybertech #cybersecurity #community #infosec #HackSouth
shif/tty/mike retweeted
We've just opened up the #0xcon2024 CFP! Details are at 0xcon.co.za/#cfp. If you've been working on something interesting, come show it off
shif/tty/mike retweeted
Me & @mariankabotes will be hosting a @BlackHatEvents session at 15:20 today.
It’s a way for newbies to find out all the ways in which people who’ve done this for a while have screwed up - on the belief that this helps make our industry more accessible.
blackhat.com/us-24/features/…