@xorrior@infosec.exchange Husband | Father | Pentester | Red Teamer | macOS security | Manager - Red Team @Zoom https://xitter.cf/t.co/af3c0fgU2v

MD
Joined April 2009
🧵 The axios @npmjs compromise dropped a @macOS backdoor that closely mirrors North Korea's (@DPRK) recent WAVESHAPER backdoor. Let's take a quick look the full intrusion:
13
115
9
427
83,548
Over time, I have developed a bit of a reputation for saying no to external work for my teams. At least that's how people describe it. But I realized what I actually do is shape the work, often before it even arrives. andywgrant.substack.com/p/it…
6
3
29
8,721
Ready to build your first Mythic payload? In our Mythic Operator series, @its_a_feature_ walks you through building new payloads from your installed Payload Types and C2 Profiles. Watch more ➡️ ghst.ly/build-payload
7
1
28
3,163
Mastering Mythic doesn't have to be complicated. 😵‍💫 Check out our operator-focused video series w/ @its_a_feature_, which cuts through the noise & delivers exactly what you need to customize & leverage Mythic effectively. 👀: ghst.ly/mythic-op
1
27
1
102
9,834
My team is hiring a high-mid to senior engineer! You’ll be joining a brilliant team that delivers high-impact assessments with lots of visibility :) Please apply if interested and let me know if you have any questions! careers.snowflake.com/us/en/…
7
18
1,952
The Mythic 3.3 Beta just dropped! All sorts of new features including a new Eventing System, more container types, more developer features, better sleep tracking features, and even SSO possibilities! posts.specterops.io/mythic-3… Check it out!
2
52
2
141
11,805
We're actively hiring in the UK for our Global Security Incident Response team! This is a great opportunity that doesn't come around often. Happy to answer any questions about the role! jobs.apple.com/en-us/details…
4
30
1
82
18,511
This is a little late but finally got my first one 🙂
6
1
45
3,112
Trying something new and moved into a Manager, Offensive Security role. I'm looking for a Sr. -> Principal Red Team Engineer as my backfill, please apply :) Location is Remote, US. careers.snowflake.com/us/en/… careers.snowflake.com/us/en/…
2
19
50
8,165
objectivebythesea.org/v6/tra… This was a really awesome course and I can’t wait to apply some of their methodology and tools to macOS research #OBTS
3
13
3,539
Aloha friends. Yesterday, catastrophic fires destroyed much of Maui💔 Maui, my home, is also the birthplace of the @objective_see foundation & #OBTS conf. We're launching a fundraiser to help those who lost everything: gofundme.com/f/5auw5q-maui-w… Any support much appreciated 🙏🏽
7
128
6
217
90,474
I’m excited to kick the morning off by announcing the release of 🍎 Living Off the Orchard: macOS Binaries (LOOBins)! loobins.io You can find more details about the LOOBins project in my “Introducing LOOBins” Medium post here: infosecb.medium.com/introduc…
4
175
9
497
67,504
It's official! Mythic 3.0 is LIVE! Check out the blog post about it here: posts.specterops.io/c2-and-t…. Highlights include: rpfwds, graph groupings, jupyter notebook, custom webhooks, tags, docker updates, and an entirely new back end!
2
79
5
167
52,670
LOOBins... coming soon! I'm looking for some help. If you're a macOS security expert who would like to contribute to a mac-specific variant of #lolbas #gtfobins please get in touch.
18
104
7
333
53,710
This is just insane… My GPT-4 coding assistant can now: - build and design a frontend - create a backend with working db - correctly hook them up - upload code to GitHub - deploy it to Vercel I can now build *complete* apps with nothing more than my voice. The future is here!
706
3,824
1,094
22,787
5,716,882
Stoked to announce "Objective by the Sea" (#OBTS) v6.0 🍎🧑🏻‍🏫🌴☀️ Details: 📍 Marbella, Spain 🗓️ Oct 9ᵗʰ - 13ᵗʰ '23 ℹ️ Hop over to the conf. site to sign up for trainings, conference, & book a room at the venue: objectivebythesea.org/v6/ind… Can't wait to see y'all at the there! 🥰
4
29
1
72
16,950
This post covers abusing the macOS platform binary ssh-keygen for dylib injection. Additionally, it covers artifacts this method creates. medium.com/@D00MFist/generat…
3
8
1
35
4,144
It's finally time! Mythic v3.0.0 has entered a public beta! Lots of awesome updates (docs.mythic-c2.net/v/version…) and even more control/customizability for operators/developers! The beta will last about a month and then Mythic 3.0.0 will be on the main branch :)
4
51
2
120
17,407
Objective by the Sea (#OBTS) v6.0 will be held Oct 9ᵗʰ - 13ᵗʰ 2023🍎🧑🏻‍🏫🧑🏻‍💻🌴☀️ More details (location, CFP, etc.) ...soon Can't wait to see y'all at the conference! 🥰
8
30
5
108
29,338