Hack for good, not evil or greed. Seek to understand, not just to solve. Co-founder of River Security (@rivsec), Principal SANS Instructor. Doing my own thing..
Norway
Joined December 2010
- Tweets4.8K
- Following188
- Followers2.5K
- Likes876
Some solid tips in this thread... check it out if you're ever into cloud/AWS IR.
Chris Dale retweeted
Just built an MCP for Ghidra.
Now basically any LLM (Claude, Gemini, local...) can Reverse Engineer malware for you. With the right prompting, it automates a *ton* of tedious tasks.
One-shot markups of entire binaries with just a click.
Open source, on Github now.
Chris Dale retweeted
Collaboration Spotlight: @DCIPark 🤝 @SANSInstitute
Join us for an exclusive #CyberSafeRamadan webinar with @ChrisADale, diving into social engineering threats & defenses 👇
As part of #CyberSafeRamadan, DCIPark is hosting a webinar titled “Understanding Social Engineering: Human Factor and other Threats”, in collaboration with @SANSEMEA. This webinar is conducted by Chris Dale, SANS Principal Instructor and Penetration Tester.
The most fun time of the year is not Christmas! It's our hacker spaces youtu.be/u6DdqrmylZQ
We're looking for passionate cybersecurity professionals, both junior and senior roles, to join our remote pentesting team. There is a hacking challenge below... Does this sound enticing?Message me.
http://209.38.109.251/ (Reach out if you need hints) 💪
Coaching a CTF team was one of last years highlights. I hope I get to do it again. htx.gov.sg/whats-happening/a…
In this podcast I am discussing things like how peneration testing is changing, modern penetration testing methodlogy, and more. youtube.com/watch?v=kRwGKQSx…
Chris Dale retweeted
🚀 A new era of #PenTesting is here! Move beyond static #Assessments and step into real-time, continuous security validation. @ChrisADale shares how #OffensiveSOCs are changing the game.
Read the blog → sans.org/u/1A29
ORM vs Raw SQL queries - Careful Either Way - nodejs-security.com/blog/raw…
Chris Dale retweeted
🔎 What’s hiding in your #AttackSurface?
#PenTesting alone isn’t enough to uncover hidden vulnerabilities. Join @ChrisADale as he explores how Continuous Pen Testing & #AttackSurfaceManagement can bridge the gap in security operations.
→ Register now: sans.org/u/1zQn
Credential stuffing — no advanced hacking skills needed. A short 6 minute video to explain the concept youtube.com/watch?v=1BTFoJ3N…
Chris Dale retweeted
🚀 The future of finance is resilient. #DORA & #TIBER-EU are driving change in how financial institutions prepare for evolving #Cybersecurity threats. Prepare for 2025, get actionable insights now. @sansinstitute
Read the blog → sans.org/u/1zib
The single best quality of life improvement to PowerShell; turns tab completition into linux style tab completion `Set-PSReadlineKeyHandler -Key Tab -Function Complete` #powershell
Chris Dale retweeted
🔔 Reminder! Join SANS Principal Instructor @ChrisADale today at 11 a.m. BST for an in-depth look at #NIS2, #DORA, and #TiberEU frameworks, and learn how to strengthen your IT security strategy.
📝 Don’t miss out—register here → whitepapers.theregister.com/…
#SANSTraining
The Web Application Hacker's Handbook is considered a foundational resource for web hackers. There wont however be a third edition, instead they have built portswigger.net/web-security… . Thanks @PortSwigger
If GMail is being used as a Command and Control channel, are you supposed to block GMail next? When faced with adversaries willing to implement stealth, different tactics are necessary, such as basing our selves on user and entity behavioral monitoring.
youtube.com/shorts/UQ_YRvbgE…
This technique had me call 10 different companies in Norway in the span of just a few hours of hunting.
Check out the tool and technique for finding vulnerabilities in this YouTube video I recorded last week: youtube.com/watch?v=If9m6tQy…