Group CISO @ NCC Group, Adviser to Gov, PE and Start-ups. Perpetual Student.
Scottish Highlands, UK
Joined September 2010
- Tweets3.9K
- Following794
- Followers1.2K
- Likes3.1K
lɐʍɹǝuɔǝ ɯnuɹo retweeted
hello there the jacobian conjecture is false thanx to my close friend akhil for asking about it and my other close friend fable for working during the world cup final
((1+xy)^3 z + y^2 (1+xy) (4+3xy), y + 3 x (1+xy)^2 z + 3 x y^2 (4+3xy), 2 x - 3 x^2 y - x^3 z): \C^3\to \C^3, has jacobian determinant -2, and sends (0, 0, -1/4), (1, -3/2, 13/2), and (-1, 3/2, 13/2) to (-1/4, 0, 0)
lɐʍɹǝuɔǝ ɯnuɹo retweeted
Today, we're releasing NachoVPN, our VPN client exploitation tool, as presented at SANS #HackfestHollywood 2024 🌮🔒
Find the details on the @AmberWolfSec blog, along with the individual advisories, including a not-yet-fully fixed PaloAlto GlobalProtect client RCE👀
lɐʍɹǝuɔǝ ɯnuɹo retweeted
New tool published which is proving to be useful. Cred1py allows execution of the CRED-1 SCCM attack published by @Raiona_ZA over SOCKS5 UDP by wrapping the awesome PxeThiefy.py from @0xcsandker. Enjoy :) github.com/SpecterOps/cred1p…
lɐʍɹǝuɔǝ ɯnuɹo retweeted
ChromeKatz: Dump cookies and credentials directly from Chrome/Edge process memory github.com/Meckazin/ChromeKa…
lɐʍɹǝuɔǝ ɯnuɹo retweeted
ℹ️ | We are seeing lots of videos being shared online that were filmed at previous protests or during previous incidents.
There has been no disorder in London this weekend and the videos are likely being shared to mislead or to fuel tension.
lɐʍɹǝuɔǝ ɯnuɹo retweeted
POC for #SilverPotato utilizing Kerberos relay vs SMB ;) Starting from @cube0x0 great krbrelay tool with extra layer of complexity to get the SilverPotato beast working.. Still in the rough but will publish soon :-)
lɐʍɹǝuɔǝ ɯnuɹo retweeted
Hunting Adversary Infrastructure Course Summary Q1.
A brief overview of the @Intel_Ops_io Q1 Adversary Infrastructure Hunting course and upcoming plans:
A big thank you to everyone who enrolled and purchased the course🙏
Stay tuned for more exciting content, including APTs, labs, certifications, exams, videos, and more. Additionally, we're exploring new potential partnerships🤝
Here is the link if you would like to join.
docs.google.com/forms/d/10oy…
lɐʍɹǝuɔǝ ɯnuɹo retweeted
It's a big day- @tifkin_, @0xdab0, and I are proud to announce that Nemesis 1.0.0 has landed! We have a ton of awesome new features and a streamlined installation, check out the details at posts.specterops.io/nemesis-… and the code at github.com/SpecterOps/Nemesi…
lɐʍɹǝuɔǝ ɯnuɹo retweeted
FalconHound got a big update for my upcoming SO-CON talk next Monday.
This release has a ton of performance improvements plus;
Collection of MFA settings per user,
AppConsent incl scope,
Dynamic groups
Eligible roles.
Elastic cloud query support
github.com/FalconForceTeam/F…
lɐʍɹǝuɔǝ ɯnuɹo retweeted
Jailbreaking Proprietary Large Language Models using Word Substitution Cipher
"decoding several safe sentences that have been encrypted using various cryptographic techniques, we find that a straightforward word substitution cipher can be decoded most effectively"
"We present a mapping of unsafe words with safe words and ask the unsafe question using these mapped words. Experimental results show an attack success rate (up to 59.42%) of our proposed jailbreaking approach on state-of-the-art proprietary models including ChatGPT, GPT-4, and Gemini-Pro."
(non-peer-reviewed)
paper: arxiv.org/abs/2402.10601
lɐʍɹǝuɔǝ ɯnuɹo retweeted
At the @NCSC the Vulnerability Management Team have just published our updated Vulnerability Management Guidance. It sees it move from a signal page to a collection which we will continue to build out.
ncsc.gov.uk/collection/vulne…
lɐʍɹǝuɔǝ ɯnuɹo retweeted
The Offensive ML Playbook
"Tactics, techniques and procedures for different offensive ML attacks encompassing the ML supply chain and adversarial ML attacks. Focused heavily on attacks with code you can use to perform the attack right away"
wiki.offsecml.com/Welcome+to…
w/ @WHITEHACKSEC
lɐʍɹǝuɔǝ ɯnuɹo retweeted
CISA Security by Design alert for SOHO routers.. the team at @NCSC highlighted this morning that from April 2025, any SOHO router provided or managed by a ISP in the UK will be legally required to have these properties 🔥
PRC-sponsored #VoltTyphoon threat actors are compromising small office/home office (SOHO) routers by exploiting software defects. Manufacturers are urged to adopt @CISAgov’s #SecurebyDesign principles during software design to protect users. 👉 cisa.gov/resources-tools/res…
lɐʍɹǝuɔǝ ɯnuɹo retweeted
Before I was 30 years old, I’d started 2 companies that are each now worth over a billion dollars. And it almost broke me.
Here’s my story.
youtu.be/QKPgBAnbc10
lɐʍɹǝuɔǝ ɯnuɹo retweeted
Demo version of CsWhispers is now public. Any and all feedback is welcome.
github.com/rasta-mouse/CsWhi…
lɐʍɹǝuɔǝ ɯnuɹo retweeted
SOAPHound is out for walkies!
SOAPHound is a #BloodHound collector to enumerate AD over SOAP instead of LDAP directly.
Proud of Nikos for all his hard work!
Blog: medium.com/falconforce/soaph…
Tool repo: github.com/FalconForceTeam/S…
Detections:
github.com/FalconForceTeam/F…
lɐʍɹǝuɔǝ ɯnuɹo retweeted
I am thrilled to announce the launch of my new Training Platform focused on teaching you the essentials of Hunting and Tracking Adversarial Infrastructures, including Advanced Persistent Threats (APTs), Ransomware, and Criminal Groups 🔥
academy.intel-ops.io/courses…
Stay tuned for pre-sales content (with a discounted price of 299 USD) coming your way by the end of January 2024.
Pre-sales content will include for now 👇
Infrastructure Hunting Tooling 🎯
Hunting Rhysida Ransomware Group 🎯
Hunting Lazarus Group 🎯
Hunting Cobalt Strike Redirectors 🎯
Searching Open Directories 🎯
FIN7, Pikabot, and Phishing infrastructure content should be ready in February 🔥
Sign up if you are interested and if you have any questions, feel free to send me a DM or check the FAQ.
Cheers!
lɐʍɹǝuɔǝ ɯnuɹo retweeted
Tune in to @SecWeekly today at 6pm ET / 3pm PT as @jaredcatkinson joins @securityweekly to discuss the evolution of purple teaming.
Watch live at ghst.ly/48jUaAx