Security Researcher, US Marine Corps Veteran, Microsoft Most Valuable Researcher 2023 & 2024
Illinois
Joined June 2016
- Tweets99
- Following1.4K
- Followers639
- Likes214
This was my last research project while working for Secureworks. I’ve taken a new role at CrowdStrike but I am still proud of the work I did with my Secureworks fam. PTAL:
Cloud to on-prem (and multi-cloud) lateral movement: secureworks.com/research/log…
I placed 30th in the top 100 Most Valuable Researcher leaderboard!! Special thanks to @msftsecresponse for putting on these events year after year!
Permissive Avere Contributor Role Allows for VM Credential Dumping.
Secureworks Threat Analysis:
secureworks.com/research/per…
Nullg0re Blog (More personalized analysis):
nullg0re.com/2024/03/permiss…
How to combine Responder w/ Evilgnx2 for privilege escalation and lateral movement in Passwordless, MFA and/or Zero Trust Environments:
(Technique discovered by @nevadaromsdahl in 2023))
nullg0re.com/2024/05/crackin…
Tony Gore retweeted
Episode 1 w/ @nullg0re, of my new podcast 'whoami' is now live on spotify and youtube! On whoami, I'm talking with great hackers to find out how they got into hacking and dig into their area of expertise. Check it out:
youtu.be/rE2eBnE1LtA
open.spotify.com/show/76RZgA…
Performed some research with my teammate @SantasaloJoosua regarding Multi-Tenant Application Redirect URIs. Turns out, in some cases, they can be taken over and used to steal Azure Authorization Code's (OAuth2.0 Auth Code Flow):
secureworks.com/research/azu…
Spent some time in Azure Machine Learning Studio and identified some areas to keep in mind when using the environment. Nothing groundbreaking, but definitely a reminder of why security needs to be more involved with the explosion of AI infrastructure / needs:
nullg0re.com/2024/02/securin…
Oh! This is cool! I placed in the top 10 of hackers / researchers world wide in the @msftsecresponse Q4 Leaderboard with 325 points! And top 5 in the Azure specific leaderboard!
Special shoutout to my teammates (past and present) @DrAzureAD @SantasaloJoosua for helping me level up over the past year. Thank you guys!
Earlier this year I made the Top 100 2023 Microsoft Most Valuable Researcher list! Thanks @msftsecresponse for sending out the swag! Just in time for the holidays!
4
18
1,953
Semper Fi Marines and Happy Veterans Day to all the veterans today. Here’s a picture of me (far left) standing with (IIRC) the governor of New York, and an Operation Iraqi Freedom Marine veteran who needed 13 facial reconstruction surgeries just to be in the photo. He was disfigured from the face down from an improvised explosive device that he and his humvee ran over during the Iraq conflict.
That weird looking metal sculpture in the background is the last of the remaining steel from the World Trade Center, which as most of us remember, was the target of an attack on September 11th, 2001.
The reason I was in this photo is because I was part of the commissioning of the USS New York. A San Antonio class of warship that was built out of 7 1/2 tons of the World Trade Center, designed solely to put boots to ass in countries that want to do us harm. “You hurt us, but we made a weapon out of the destructions you left us with, and we’re coming to kick your ass.”
The Marine Corps birthday and Veterans Day (along with Memorial Day) holds an interesting (love/hate) place in my heart and I am often quiet about how I feel during this time of year.
All I can say, is oohrah to all the interesting characters I’ve met along my journey. Like the Marine in this photo, who, with half a face and missing arms and legs, was still ready to kick someone’s ass at a moments notice.
Thats one of the biggest lessons I learned from the experience this picture portrays. Be grateful for what have. You never know how quickly it can all disappear. That, and to persevere through all things. There are people out there doing far more things with far little than what you have.
Happy Marine Corps Birthday Marines and happy Veterans Day to all. If you drink, don’t drive and if you drive, don’t drink. See you all in the morning!
4
662
Low Severity / by-design issue that can be abused in interesting ways. Going from Pass-The-PRT to AzureHound collection and more...
nullg0re.com/2023/09/device-…
Dcsync without triggering traditional alerts?
nullg0re.com/2023/09/hijacki…
Had a blast in Seattle this week attending @MSFTBlueHat . Got to finally meet my teammate @DrAzureAD in person and got to meet some really cool people. Thanks @Microsoft @msftsecresponse for having me out there! Great talks and great conversations! Here’s to next year! 🍻
7
709
Tony Gore retweeted
Just to be a fly on the wall at Secureworks #TISummit23 listening to these Microsoft Most Valuable Researchers and glean nuggets from them is a win!
@SantasaloJoosua @DrAzureAD @nullg0re
Tony Gore retweeted
Join us at our #TISummit and engross yourself in the unique vulnerability findings by @Secureworks' distinguished Microsoft Most Valuable Researchers (MVRs) @DrAzureAD, @SantasaloJoosua, @nullg0re
Don’t miss the opportunity!
bit.ly/3ERYrOt
