Fl@wdc0de

For those who answered "What is ClickFix" here is a short video including a demo and walk-through. And, for those who answered indicating they are thinking about doing ClickFix penetration tests, this video provides a demo of BeaconatorC2 payloads that will give you a jump-start (see links/repo). Also, looping in some people I respect a lot to weigh in, not because I think we have it figured out, but so we can all ring a very loud bell around ClickFix/Fake CAPTCHA to start a broader conversation. @UK_Daniel_Card, @0xTib3rius, @techspence, @Cl0uddStrife, @AccidentalCISO, @NotNordgaren, @BushidoToken, @corewarrior, @NathanMcNulty, @ZackKorman, @kuzushi, @whereduck @_JohnHammond has done 100x better videos on this, but the problem persists, so throwing my own crood take into the mix to see if it helps. Special thanks to @Shammahwoods and @christian_tail for amazing work/collaboration on this research. My hope is that people start testing for this, talking about this, and working toward resolution. Disclaimer: For those new to my videos, they are uncut, no edits, and usually single take/yolo. Buyer beware. youtu.be/1SyoQ2qJ2Ok

So, is this getting a CVE? It seems like if clicking an RDP file can leak this type of info, there is a serious flaw/deeper issue. It is super great to focus on the adversary, but is there something we are stepping over here @Microsoft ? Want a second opinion @FlawdC0de, @UK_Daniel_Card, @Shammahwoods, @christian_tail - does this seem right? -Files and directories -Connected network drives -Connected peripherals, including smart cards, printers, and microphones -Web authentication using Windows Hello, passkeys, or security keys -Clipboard data -Point of Service (also known as Point of Sale or POS) devices microsoft.com/en-us/security…

@CroodSolutions @UK_Daniel_Card @ItsCharlieBrown @christian_tail lol. Fake news

My vibe tonight @UK_Daniel_Card, @ItsCharlieBrown, @christian_tail and @FlawdC0de

The “other duties as assigned” part of being a CISO can be brutal. @FlawdC0de was just teasing me about my real job, as the scanning appliance administrator.

@KariLake You’re going to lose again. And I can’t wait. Let me guess, it was rigged? Lmao

Ruben Gallego seems to think this election is about who can lie the most to Arizonans or put out the most TV ads. I think it's about policy. I think it's about who can help the most people. From the moment I join the Senate, I will work to fulfill these promises to Arizonans⤵️

@KariLake So when you lose this one, is it all rigged again?

CHECKING IN: I wanted to give you an update from the campaign trail. We’re traveling to every corner of this great state & I hope to see you soon. I love you! ♥️

@0verfl0w_ Damn. Wish I would’ve saw this before the end date.

🎉 It's that time of year! Snag a spot in the Zero2Automated course (or bundle) with a 25% discount using code BLACKFRIDAY. Don't miss out – offer ends midnight, November 27th! 👉 courses.zero2auto.com/?coupon=BLACKF…

And we watch, as our beloved clouds drift out beyond the stratosphere, leaving behind our essence as mere presupposed notions of how we hoped to be represented among the stars. So long cloudflare. reuters.com/science/spacex…

@KariLake Oh god, she is still spewing the crap?

They can sue me, they can threaten me, they can lie about me & attack me all they want. It only strengthens my resolve to FIGHT for our Children's future. I will never, ever back down from this battle to SAVE AMERICA! Can you help fuel my legal fund? Visit: KariLake.com/Fight 🇺🇸

@RepBuddyCarter @GeorgiaFootball If you all are actually able to abolish the IRS, I may just switch parties. Please make this happen.

Congratulations to the @GeorgiaFootball on their second College Football National Championship in a row! And congratulations to all of the players from Georgia’s First District, you have made us all so proud! Go Dawgs! #NationalChampionship

@KariLake Looking more pathetic day by day.

The corruption in Arizona is going to go into hyperdrive.

@KariLake huffpost.com/entry/kari-lak…

Katie Hobbs plans to form a “task-force” to study elections… This is the same person who oversaw the disastrous & fraudulent 2022 elections. She is the last person that should be “studying elections.” Here’s why (THREAD🧵):

This always remains a serious threat… links in email and chat are not the only ways to compromise accounts or exploit browser vulnerabilities: bleepingcomputer.com/news/security/…

@KariLake @ShaneCashman

Excellent reporting and writing from ⁦@ShaneCashman⁩ timcast.com/news/cashman-k…

.@KariLake: "I am standing up for the people of this state. The people who were done wrong on Election Day and the millions of people who live outside of Maricopa County, whose vote was watered down by this bogus election in Maricopa County."

@KariLake ENJOY THOSE SANCTIONS @KariLake !!!

The People want Justice. We demand Honest & Transparent Elections.

@KariLake No evidence. Your case in court was a laugh.

My Election Case provided the world with evidence that proves our elections are run outside of the law. This Judge did not rule in our favor. However, for the sake of restoring faith and honesty in our elections, I will appeal his ruling.

@CollinRugg @KariLake No proof.

BREAKING: Pollster Rich Baris testified in Kari Lake’s trial that voter disenfranchisement was so bad in Maricopa County that Lake would have won if the tabulator issues had not taken place. Should the Arizona election be redone?