@counterhack

#infosec #threathunting #pentest #redteam #blueteam #purpleteam #offensivesecurity #splunk #pentesthero - All my opinions & tweets are my own -

 Planet Earth, Cyberspace
linkedin.com/in/mike-terhaar
Joined January 2014
  • Tweets90
  • Following250
  • Followers181
4Media
Started september this new awesome company and a small magazine rates us as one of the top 50 new cybersecurity firms. Proud but also curious what this will bring. Please follow @pentesthero Nothing there yet :( but will be soon. bit.ly/32Iu8Yw
3
Complianz Privacy Suite really-simple-ssl.com/downlo…
Risk Readiness is Critical for Infrastructure redteamsecure.com/?p=3427 via @redteamsecure

Offensive Security & Pen Testing | DeepSeas

DeepSeas Offensive Security tests your defenses through ethical hacking, red teaming, and advanced penetration testing.

deepseas.com
1
Capturing NetNTLM Hashes with Office [DOT] XML Documents - thanks for sharing @bohops #infosec #pentest #redteam bohops.com/2018/08/04/captur…
23
37
I don't trust certificates (.crt) that don't start with an M :-) blog.nviso.be/2018/07/31/pow…

PowerShell Inside a Certificate? – Part 1

With the help of a specifically crafted YARA rule developed by NVISO analysts, we found multiple certificate files (.crt) that do not contain a certificate, but instead a malicious PowerShell scrip…

blog.nviso.eu
5
58
6
104
Read the comments first and then try reading the article..... #summertime zd.net/2Arx9Af

Why you're using Tor wrong - ZDNET

If you're concerned about online security, you may use Tor to access or manage anonymous servers. But you're probably using it wrong. Here's why.

zdnet.com
Great questions! ibm.co/2OpWLQZ
An amazing tool built by an awesome operator! Silent Internal Network Segment Recon using Discovery and Broadcast Protocols... Thanks @KoryFindley k0fin.blogspot.com/2018/07/s…
3
40
2
79
Mike Terhaar retweeted
Rand Fishkin
@randfish30 Jul 2018
It is so much easier & more valuable to be: - great at one thing - known for one thing - amplified for one thing - constantly improving one thing - the *best* at one thing Focus, in my experience, beats hustle, beats genius, beats better funded competition. It's a cheat code.
44
308
53
1,056
Nice framework kitploit.com/2018/07/owtf-v2…

owtf — Modular penetration testing framework integrating multiple tools for automated web applica...

Modular penetration testing framework integrating multiple tools for automated web application security assessment, aligned with OWASP Testing Guide, PTES, and NIST standards.

kitploit.com
1
SANS | #InfoSec Poster White Board of Awesome Command Line Kung-Fu! w/ Bonus Material by @SANSPenTest Download PDF: pen-testing.sans.org/u/zGF
14
33
Breaking the Ice on DICE: scaling secure Internet of Things Identities - twib.in/l/REbznR6ezEbG
My hometown :) How tech turned a 700-year-old city into one of Europe’s most futuristic - ow.ly/EEik30l8c0E
RDP hijacking — how to hijack RDS and RemoteApp sessions transparently to move through an organisation #infosec #pentest #RedTeam medium.com/@networksecurity/…
1
90
3
200
Pre-installed Backdoor On 700 Million Android Phones Sending Users' Data To China - bit.ly/2gfJ8qn
Please share your experiences and opinions about bug #bounty hunting vs regular #penetration testing bit.ly/2dFPmLV
WOW....#MH17....and #hacking journalists...must read!!
2
Go GOOGLE go....
What we did tell our bosses for years.....now Gartner is listening. Thank you Gartner...time for a raise :) gartner.com/doc/3446727?ref=…

Gartner | Delivering Actionable, Objective Insight to Executives and Their Teams

Gartner provides actionable insights, guidance, and tools that enable faster, smarter decisions and stronger performance on an organization’s mission-critical priorities.

gartner.com
for the one who did not follow the news yesterday!! wired.com/2016/09/hack-brief…

Hack Brief: Yahoo Breach Hits Half a Billion Users

After earlier reports of a cybercriminal hack that affected 200 million users, the real breach turns out to be far more serious.

wired.com
Load more