Pentester, guitarist, and optimist. Builder of teams @pentestltd. Words are mine and are not those of my employer. AEAAS (Acronym Expander As A Service)
Glasgow
Joined September 2009
- Tweets13K
- Following1.1K
- Followers2.1K
- Likes9.1K
Has Burp Suite done you dirty this week? Lets form a support group.
#Pentesting #appsec
[Blog Post] non-technical.
I had a lovely day out at #HackGlasgow. Met and re-met a lot of people but my shockingness with names and faces carries on a pace.
A five star event from me and a lot of different talks.
cornerpirate.com/category/liβ¦
Free idea. A recruitment festival outside like a music festival. It is called in tents and purposes.
Am looking forward to #HackGlasgow today!
Dear sponsors, I need a new pen!
Can you picture that? Me, using your pen! I cannot see how either your company or me would lose out on this. It is win win!
No pen then no notes. No notes, then no blog. No blog and nothing happens.
βππ¦π βππ₯ππππ π΄σ §σ ’σ ³σ £σ ΄σ Ώ retweeted
Song for every player- AARON HICKEY
Of all 26 this is my favourite.
Letβs be getting this one sung ahead of anything else #scotland
Hey @TenableSecurity can you fix this UI please?
It would be good to see the full name. It is horrible using the search and then hovering the mouse over a load of options to try and find the right one.
Consider output such as "systeminfo" to suggest relevant standards
I found this post on Parameter Tampering WebSockets to be simple enough that even I can follow it!
#Pentesting #AppSec #WebSockets
pentest.co.uk/insights/paramβ¦
Really nice content here. Freeze the right processes so you can send messages on teams without an active user seeing it.
Been researching how to silently freeze Windows processes to hijack them during red team ops. Target apps like Teams, Slack, Outlookβpause them without breaking UI. Useful for stealthy social engineering.
Write-up here:
π kreep.in/friendlyfire-bof-seβ¦
π» github.com/ibaiC/FriendlyFirβ¦
βππ¦π βππ₯ππππ π΄σ §σ ’σ ³σ £σ ΄σ Ώ retweeted
Been researching how to silently freeze Windows processes to hijack them during red team ops. Target apps like Teams, Slack, Outlookβpause them without breaking UI. Useful for stealthy social engineering.
Write-up here:
π kreep.in/friendlyfire-bof-seβ¦
π» github.com/ibaiC/FriendlyFirβ¦
A toolkit for gaining stealth during a red team engagement by @kreepsec.
An interesting use case where you pause certain threads, as the example shows with MS Teams, which allows you to send messages even while the user thinks teams is open and working.
kreepblog.fly.dev/friendlyfiβ¦
Delighted to discover a Cyber Security conference in Glasgow on Sat 26th of April being run by @Hack_Thursday.
Tickets and agenda information here:
schedule.hackglasgow.live/
For the neurodiverse the venue looks pretty brilliant.
A) it is located under the famous Glasgow Central bridge (easy to find)
B) Sure the google maps image is dark and awful but venue website has a brilliant bright tour inside and all around it.
tours.headbox.com/tour/camm-β¦
Thought experiment:
A tool called "timechains" which lets you RDP onto a server existing in the year 2010. It will run continuously with minimum down time for patching etc until it was retired in 2020.
What are you doing through your timechains server?
βππ¦π βππ₯ππππ π΄σ §σ ’σ ³σ £σ ΄σ Ώ retweeted
Here's RepoMan, a proof of concept surrounding git commit poisoning. The blog post dives a little deeper into how it all works and the rationale behind it.
blog.zsec.uk/navigating-ai-fβ¦
github.com/ZephrFish/RepoMan
βππ¦π βππ₯ππππ π΄σ §σ ’σ ³σ £σ ΄σ Ώ retweeted
After quite some time recovering from a mental health condition. I'm thinking of rebooting the old #dc44141 meet-ups.
You interested?
91%Hell yes!
9%Nah, you're alright
23 votes β’ Final resultsDelighted to buy this @MontyBojangles product for be first time and find an entirely empty wrapper just filled with air.
Customer called up to say "Probably the best pentest we have ever seen" regarding a report I delivered recently.
Nice to hear but I think it makes me the Carlsberg of pentesting.
If you can, please consider a donation.
If you cannot, please consider sharing.
gofund.me/689553e1
