セキュリティのお仕事やってます。時々趣味で開発も。発言は全て個人のものです。 WebSecurity / cloudsec / JAWS-UG沖縄 / CISSP / OS(CP|WE|EP) / AWS DOP / AZ-500 / CARTP / CAWASP / CRTO / CRTL
Okinawa🌴
Joined January 2012
- Tweets7.9K
- Following1.1K
- Followers1.6K
- Likes12.8K
三ツ矢 retweeted
The wild thing about people who work in any aspect of OffSec (AppSec, pentesting, red teaming, or whatever else) is how often people assume that translates directly into being good at crime.
It’s also always been entertaining watching people come from pentesting backgrounds with minimal concern for opsec/stealth move into red teaming, where those things matter because getting caught can burn weeks of effort.
Now take that up another level with actual crime, where screwing up could mean spending years in jail. You’re managing infrastructure and everything else that comes with maintaining opsec under those stakes, plus the ever so fun part of figuring out how to actually monetize your hacks, convert the proceeds to cash, and get that money into your hands.
There are levels to this whole thing, and it’s easy to assume the rest is simple when you’re playing with little or no risk.
三ツ矢 retweeted
AI 時代におけるインシデント対応速度を加速すべく、フロンティア AI を活用したインシデント対応サービスをリリースしました！今後もサイバーセキュリティを変えていきます。 / 富士通、AIと専門家による迅速なインシデント調査と対応支援を組み合わせたサービスを提供開始 global.fujitsu/ja-JP/pr/news…
三ツ矢 retweeted
今日リリースした AI を活用したインシデント対応リテーナーも含めて、AI時代の現地対応について思いを話した記事です。 / 【大問題】24時間眠らない攻撃者。AIが攻撃を完遂する時代に、企業はどう向き合うか newspicks.com/news/17613130/…
三ツ矢 retweeted
An AWS S3 UDC2 egress channel for Cobalt Strike is now open source.
Our demo covers the AWS infrastructure, Terraform deployment, encrypted Beacon traffic, and dynamic pre-signed URL refresh.
Watch the demo: cobaltstrike.com/resources/v…
三ツ矢 retweeted
Time to update the CISSP exam
nitter.gq/Polymarket/status/2112…
三ツ矢 retweeted
Sodan、Censys終了のお知らせ😇
VTかVT以外か、そう言うことです。
blog.virustotal.com/2026/10/…
三ツ矢 retweeted
Sending From Email Aliases in Exchange Online is now Generally Available!
The feature allows users to send email using any alias (proxy address) configured on their mailbox, instead of being limited to the primary SMTP address.
Previously, organizations that needed to send email from another address often had to use workarounds, such as shared mailboxes or distribution groups.
Sending from Aliases was introduced in 2021 as a Public Preview. After being in preview for five years, the feature is now generally available and allows users to:
• Send emails directly from any configured alias using supported Outlook clients.
• Reply using an alias when the original message was sent to that address.
• Choose which alias to use when sending an email.
Note that this feature applies to the entire organization and can't be enabled for individual mailboxes.
Learn more:
alitajran.com/send-from-alia…
#ExchangeOnline #Microsoft365
三ツ矢 retweeted
KELA社の脅威インテリジェンスと富士通の脅威ハンティングを組み合わせたサービスを開始しました。能動的なサイバー防御を体現していきましょう！ / 企業や組織における能動的サイバー防御の実践を包括的に支援するセキュリティサービスを提供開始 global.fujitsu/ja-JP/pr/news…
三ツ矢 retweeted
The Evilginx Chrome browser extension is now officially pending review. 🥳
Here's what's coming up in the 1.0.0 release:
- View, search, create, edit, copy, and delete cookies.
- Inspect and modify Local Storage and Session Storage.
- Import and export cookies and page-storage entries as JSON.
- Cookie Monitor that records cookies created or updated through Set-Cookie response headers.
- Kickstart Evilginx Phishlet 1.0 YAML or Phishlet 2.0 HJSON development using the cookie and hostname records gathered by the monitoring feature.
- Cookie Freeze feature allows you to test which of the captured cookies hold session authentication tokens.
- Optionally disable Device Bound Session Credentials registration by removing two specifically named DBSC response headers.
Once approved, I will release a hands-on tutorial video on YouTube. 🎬
Attaching several screenshots.
三ツ矢 retweeted
実在するセキュリティ担当者を装った電話がかかってくる攻撃についてまとめてみた - piyolog piyolog.hatenadiary.jp/entry…
三ツ矢 retweeted
Mimic - Frameless Browser‑in‑the‑Browser (BitB)
A single‑script Shadow DOM / MutationObserver library for realistic phishing simulations, easily injected via reverse proxy.
github.com/0x4meliorate/Mimi…
三ツ矢 retweeted
You don't need a USB. You need to look like one.
Emulate the device, Windows fetches a signed package off Windows Update and runs vendor code as SYSTEM. Arbitrary code execution, LPE, standard user or empty logon screen.
DEF CON 34 talk w/ @Qm9yamFN.
Link at the first comment.
三ツ矢 retweeted
誰でも使えるAI、多くの場合はゴミ生産機
youtube.com/watch?v=fPG1hTLt…
三ツ矢 retweeted
Cookie theft got harder. Browser hijacking didn't.
@KingOfTheNOPs shows how enabling the Chrome DevTools Protocol inside a live Chrome/Edge process can bypass modern cookie protections, plus how to detect it with Sysmon.
Check it out! ⤵️ ghst.ly/461sfpi
三ツ矢 retweeted
Your browser is a C2 agent waiting to happen.
@KingOfTheNOPs shows how to silently sideload a Chromium extension, no prompts or GUI, and turn Chrome/Edge into a persistent implant with SOCKS, cookie theft, and OS access.
Read more 👇 ghst.ly/4g8AZif
