Richard Gold (@drshellface) header
Richard Gold (@drshellface) profile picture

Richard Gold

@drshellface

Red Team Operations and Adversary Emulation.

 London, England
Joined January 2017
  • Tweets1.6K
  • Following981
  • Followers514
For healthcare but works for infosec too.
Image from Richard Gold (@drshellface)
Offsec starter pack: Paper: schneier.com/wp-content/uplo… [A Cryptographic Evaluation of IPsec] Talk: youtube.com/watch?v=bDJb8WOJ… [Disrupting nation state hackers] Snippet: github.com/JohnLaTwC/Shared/… [Defenders think in lists] Tool: nmap.org/ncat/ [ncat]
2
Replying to @hacks4pancakes
"Disrupting nation-state hackers" by @RGB_Lights [youtu.be/bDJb8WOJYdA]
2
Replying to @rickhholland @maxdose_ @5ecur1tySi
I already clicked twice on that one!
2
"You know the technologies you intended to use in that network. We know the technologies that are actually in use in that network. Subtle difference." - @RGB_Lights youtu.be/bDJb8WOJYdA
SwiftOnSecurity (@SwiftOnSecurity) profile pictureSwiftOnSecurity
@SwiftOnSecurity19 Jun 2020
Replying to @SwiftOnSecurity
This kind of stuff, where you think you understand how things work from print-outs of policy and settings, but turns out you don’t actually, and it turns out nobody currently does, is why outside perspectives/rebuilds are important for any kind of long-running infrastructure.
4
1
21
Replying to @jimmychappell @axemonkey @Gorsefan @DrHydeous @RTO @fimbit
Great idea! Mine would be Codename: Droid, Elite, Dungeon Master and Xenon 2.
Image from Richard Gold (@drshellface)
Image from Richard Gold (@drshellface)
Image from Richard Gold (@drshellface)
Image from Richard Gold (@drshellface)
1
Replying to @maxdose_ @rickhholland
youtu.be/AjcH2UmK1uo
Replying to @maxdose_
Show her the video! youtu.be/lcOxhH8N3Bo
"Asset Discovery Making Sense of the Ocean of OSINT”: youtube.com/watch?v=Srbl8AvN… [my talk at DEF CON Recon Village on our approach to network recon with our Orca tool: github.com/digitalshadows/or…]
Richard Gold - Asset Discovery Making Sense of the Ocean of OSINT -...

Richard Gold - Asset Discovery Making Sense of the Ocean of OSINT -...

Presentations from the DEF CON 27 Recon Village

youtube.com
3
6
“The Security Products We Deserve”: youtube.com/watch?v=GHuQC1qL… [Fantastic talk by @haroonmeer and @ThinkstCanary on why most security products are so terrible: “We build security products which are angry all the time”, definitely worth checking out!]
5
Replying to @rickhholland @Gartner_inc
@rickhholland @Gartner_inc
Fun playing around with the new BlueKeep exploit in @metasploit in the lab with my partner-in-crime @5ecur1tySi! nt authority\system straight over the network! Crazy...
Image from Richard Gold (@drshellface)
2
2
Amazing PoC video for the URGENT11 VxWorks bugs, exploiting a SonicWall firewall: youtube.com/watch?v=GPYVLbq8…
1
Replying to @drshellface @rickhholland
this is probably the most important part of the indictment.
Image from Richard Gold (@drshellface)
1
Load more