@_notdodo_

Security Engineer: loving cloud, red teaming, automation and learning

infosec.exchange/@dodo
Joined February 2013
  • Tweets199
  • Following205
  • Followers162
36Media
Edoardo Rosa retweeted
Fabrizio Margotta@fam4r18 Sep 2024
Ongoing spam campaign involving github repos. Domain github-scanner[.]com puts malicious content in users clipboard upon button click and requiring for Windows payload execution cc @malwrhunterteam
1
17
2
57
12,298
Edoardo Rosa retweeted
JAMESWT@JAMESWT_WT19 Sep 2023
#Ursnif SMB 62.173.145.]113 [.]164 #Italy Change from exe To Vbs > Url > exe payload Samples bazaar.abuse.ch/browse/tag/6… Url http://serverlogins].com/pit.exe Run app.any.run/tasks/0f33d667-d… cc @felixw3000 @58_158_177_102 @fumik0_ @sugimu_sec @bry_campbell
JAMESWT@JAMESWT_WT18 Sep 2023
Replying to @Tac_Mangusta @James_inthe_box @AgidCert @guelfoweb @reecdeep @executemalware @malwrhunterteam @VirITeXplorer
#Ursnif SMB 62.173.145.]113 #Italy Samples bazaar.abuse.ch/browse/tag/6… cc @58_158_177_102 @felixw3000 @fumik0_
14
1
34
8,591
Ok fellas... I am droppping a thread about all the cool #Hackers 🧑‍💻🥷stuff I have found around #Aliexpress... It will keep growing with the time! #HackerArsenal
6
121
11
612
171,223
Edoardo Rosa retweeted
On Rugby@onrugby_it27 May 2023
La squadra rinuncia alla finale per dare il suo sostegno onrugby.it/2023/05/27/la-fin…

Rugby - La finale del campionato Uisp non si disputerà: i Saviors Rugby Cesena sono impegnati a...

I Saviors Rugby Cesena rinunciano alla finale del campionato italiano Uisp per portare il loro aiuto dopo l'alluvione in Emilia Romagna

onrugby.it
1
6
440
Edoardo Rosa retweeted
Bishop Fox
@bishopfox26 Nov 2022
A #pentesting tool for your #hacking arsenal: Use nuvola to dump + perform automatic & manual #security analysis on #AWS environments, configurations, and services via predefined, extensible and custom rules created w/ a simple #Yaml syntax. Try it today! bfx.social/3TUVYIm

GitHub - notdodo/nuvola

Contribute to notdodo/nuvola development by creating an account on GitHub.

github.com
2
8
Edoardo Rosa retweeted
Datadog, Inc.
@datadoghq5 Oct 2022
We are proud to release Datadog's first security study: "The State of AWS Security - A Look Into Real-World AWS Environments" Read the report to learn about key mechanisms to secure AWS environments and how organizations worldwide are implementing them. dtdg.co/state-of-aws-cloud-s…

State of AWS Security | Datadog

We analyzed trends in the implementation of security best practices and took a closer look at various types of misconfigurations that contribute to the most common causes of security breaches.

datadoghq.com
25
8
64
#NUVOLA: the new #Cloud Security tool securityaffairs.co/wordpress… #securityaffairs #hacking

NUVOLA: the new Cloud Security tool

nuvola is the new open-source cloud security tool to address the privilege escalation in cloud environments.

securityaffairs.com
4
3
Today we're releasing nuvola 🌩️(github.com/primait/nuvola) during #RomHack camp. nuvola is a new born open-source tool to dump and perform automatic and manual security analysis on AWS environments, especially useful to find privilege escalation paths! #aws #redteam #security

GitHub - notdodo/nuvola

Contribute to notdodo/nuvola development by creating an account on GitHub.

github.com
7
16
Edoardo Rosa retweeted
Dirk-jan
@_dirkjan11 Aug 2022
Here's a demo of the MFA bypass, which I particularly love because it could all be done in the GUI, no need to do any lower level operations (original at dirkjanm.io/assets/raw/mfaov…)
3
49
148
It's cloudy today... and that’s a good thing. 

Our Global Cloud team has officially released our internal cloud security documentation to the world.

Check it out at secwiki.cloud 

And if you want to help make cloud security a bit clearer, please contribute 🌤🌤

Cloud Security Wiki | Cloud Security Wiki

A repository of all kinds of cloud security knowledge, curated by WithSecure's cloud security consulting team.

secwiki.cloud
2
26
3
43
#RomHackCamp and #RomHack2022 Conference This is the map of the Camp and Conference area - 4 Workshop spaces (up to 32 people for each) - 1 Hacker Space (more than 70 people) - Communities and activities all around Tickets on sale romhack.camp/buy-tickets/
3
2
9
Edoardo Rosa retweeted
Tim Medin@TimMedin4 Mar 2022
Often times, APT isn't very "A"... and sometimes not even very "P". Conti ransomware folks having issues exiting vim:
13
19
12
160
Edoardo Rosa retweeted
Dray Agha@Purp1eW0lf28 Feb 2022
Let’s have a chat about web browser investigations We’ll look at Chrome, Edge, Firefox, and Safari’s data. And investigate if a user has downloaded anything from a dubious, malicious source. Along the way, we'll drop tips on formatting the data so it's easier to look at. 🧵
10
85
9
376
New #AADInternals version and related blog post (with multicolor arrows) out now! "Stealing and faking Azure AD device identities": o365blog.com/post/deviceiden… Credits to @gentilkiwi/#Mimikatz! #infosec #redteam #blueteam
13
177
9
387
Edoardo Rosa retweeted
Scott Piper
@0xdabbad0015 Feb 2022
I am at war with IMDSv1. Comrades, please help by pointing your AWS account team at my list of requests, contacting your vendors if they are on the list, and letting me know about any vendors to add. github.com/SummitRoute/imdsv…
6
27
4
89
I lost my father today due to Covid, and had to tell my mom who is in the same hospital with Covid as well. Sliver lining my mom did get to say goodbye at least. Do yourself and others a solid and get vaccinated.
33
19
2
252
.@Accenture "Through our security controls and protocols, we identified irregular activity in one of our environments. We immediately contained the matter and isolated the affected servers" ... After 6TB of data was exfiltrated - 2,500 employees, 3,788 machines compromised.
15
188
22
489
Edoardo Rosa retweeted
Andy Gill
@ZephrFish5 Jul 2021
An idiot pressing a button:
20
54
5
133
Windows privileges determine the type of operation a user account can perform on the OS and are sometimes abused by attackers. If you've ever wanted to know what a privilege is for, I've created the ultimate cheat sheet that shows all Windows privileges on one page!🤓 #infosec
20
840
26
2,218
To find the real IP behind #CDNs / #WAFs like #cloudflare using passive recon by retrieving the #favicon hash. [Shodan Premium API needed] #bugbounty #bugbountytips #bugbountytip #cybersecurity #shodan #websecurity #cves
10
245
7
716
Load more