hook_s3c's profile picture. Security researcher, Problem solver. Lover of cats, hip hop, crypto-anarchist.
#cryptoanarchy:http://matrix.org ๐Ÿ˜Ž

hook โ’ถ๐Ÿดโ™ก

@hook_s3c

Security researcher, Problem solver. Lover of cats, hip hop, crypto-anarchist. #cryptoanarchy:http://matrix.org ๐Ÿ˜Ž

๊ณ ์ •๋œ ํŠธ์œ—

We are anarchists, technologists, open-source and privacy advocates, analysts, traders, hobbyists. - We learn from each other for profit, fun and a decentralized future of freedom. #cryptoanarchy:matrix.org


hook โ’ถ๐Ÿดโ™ก ๋‹˜์ด ์žฌ๊ฒŒ์‹œํ•จ

When Im attacking a LAN, I'm running Wireshark/TCPdump if possible; they're my eyes/ears. They allow me to better hide, plan my next step (What naming conventions do hostnames use? Is LLMNR/MDNS/WPAD in use?) & you can strip creds from PCAPS w/ @PythonResponder's PcredZ (image).

hackermaderas's tweet image. When Im attacking a LAN, I'm running Wireshark/TCPdump if possible; they're my eyes/ears.

They allow me to better hide, plan my next step (What naming conventions do hostnames use? Is LLMNR/MDNS/WPAD in use?) & you can strip creds from PCAPS w/ @PythonResponder's PcredZ (image).

hook โ’ถ๐Ÿดโ™ก ๋‹˜์ด ์žฌ๊ฒŒ์‹œํ•จ

@gentilkiwi One of our Microsoft AD security consultants gave me this sticker today

SwiftOnSecurity's tweet image. @gentilkiwi One of our Microsoft AD security consultants gave me this sticker today

don't do crime, the state hates competition


hook โ’ถ๐Ÿดโ™ก ๋‹˜์ด ์žฌ๊ฒŒ์‹œํ•จ

Idea: a dating app that matches you solely based on your .vimrc config.


hook โ’ถ๐Ÿดโ™ก ๋‹˜์ด ์žฌ๊ฒŒ์‹œํ•จ

Crime doesn't pay. That also applies to cybersec/hacking. If you are an unskilled script kiddy, you'll get caught because you are an idiot. If you are skilled, you'll earn more plying your trade legitimately than you would through crime.

* After demonstrating hacking techniques on stage...* Them: How have you ever thought about going over to the Dark Side? The question, questions the integrity of the presenter and reveals what the asker may be compelled to do if they had similar knowledge and skill.



hook โ’ถ๐Ÿดโ™ก ๋‹˜์ด ์žฌ๊ฒŒ์‹œํ•จ

Thanks to everyone who attended and came up to me afterwards! You can get Bashfuscator at github.com/Bashfuscator/Bโ€ฆ. If anyone has any questions, ideas, or concerns about the tool or Bash obfuscation in general, my DMs are open ๐Ÿ‘๐Ÿผ


hook โ’ถ๐Ÿดโ™ก ๋‹˜์ด ์žฌ๊ฒŒ์‹œํ•จ

My talk from @BSidesCharm is online; huge thanks to them for the opportunity to be a backup speaker, it was a blast. Also my first ever talk, so don't judge me too hard pls ๐Ÿ™ youtu.be/zef422NDmpo

capnspacehook's tweet card. Bash Can Get Uglier: Using Bashfuscator to Generate Bash Obfuscation...

youtube.com

YouTube

Bash Can Get Uglier: Using Bashfuscator to Generate Bash Obfuscation...


hook โ’ถ๐Ÿดโ™ก ๋‹˜์ด ์žฌ๊ฒŒ์‹œํ•จ

Note to Media & Threat Intel People: We are not training blackhats to do crimes. We have no affiliation with any groups actively participating in crimes, protests, or political causes. There are no members of ThugCrowd. ThugCrowd is an idea. If you have questions, just ask. :}


hook โ’ถ๐Ÿดโ™ก ๋‹˜์ด ์žฌ๊ฒŒ์‹œํ•จ

โ€œEverybody would like a little bit more inflation" โ€” IMF Managing Director Christine Lagarde These people are absolutely nuts. BUY BITCOIN.


hook โ’ถ๐Ÿดโ™ก ๋‹˜์ด ์žฌ๊ฒŒ์‹œํ•จ

JSON.stringify and JSON.parse does not work for functions in javascript. But in case you want to achieve this you can check out - github.com/vkiryukhin/jsoโ€ฆ


hook โ’ถ๐Ÿดโ™ก ๋‹˜์ด ์žฌ๊ฒŒ์‹œํ•จ

hook โ’ถ๐Ÿดโ™ก ๋‹˜์ด ์žฌ๊ฒŒ์‹œํ•จ

Port Scanning, Spoofing & Blacklists medium.com/@notdan/port-sโ€ฆ


personally I wouldn't look down the barrel of a gun to see if it's loaded


Loading...

Something went wrong.


Something went wrong.