Brad Richardson

is now a bad time to bring up KernelHound

@dagrz @PlerionHQ This guy blogs

Edit a Terraform state file 👉 Get code execution in the deploy pipeline. My latest post on the @PlerionHQ blog. blog.plerion.com/hacking-terraf…

The Pittsburg Center Station is closed due to a shooting that occurred around 3:50pm. One person injured. We are gather more details. Trains are running through the station but not stopping.

Excited to share the stage with @xorrior next week for #OBTSv5! We will be discussing “living off the land” techniques for macOS! Please say hello if you will be there! #Speaker_18" target="_blank" rel="nofollow noopener">objectivebythesea.org/v5/talks.html#…

@cedowens When I was a kid my parents would take me to "Family Video" to rent movies. Good times. Thanks for the memory.

This was epic!

@subtee @mubix I’ve been waiting a long time for someone to say this. Yes detections fail too.

I know some friends have been waiting to see the talk myself and @desi_jarvis put together for Bsides SF on red team operations in GCP so if you weren't able to make the live presentation then check it out here: youtu.be/uHeXt0Yu9ts

My talk @BSidesSF is up on YouTube if anyone wasn't able to make it in-person or catch the stream! youtube.com/watch?v=RKidBa…

Super excited to be speaking at @BSidesSF on Sunday about Securing Your Cloud with Red Team Engagements in GCP. Hope to you see you all there! sched.co/rjrR

In 1 week, BSidesSF Staff and Volunteers start the physical work of getting everything for the conference. Do you have your ticket to join us on June 4th & 5th to enjoy the efforts of our labor? No? We want to see you! bsidessf.regfox.com/2022

@medus4_cdc images.app.goo.gl/KWvKGpWgfD2Uvk…

Post a TV show that you're the only person you think remembers it exists (Even google barely remembers this show)

@N7WEra @desi_jarvis Awesome! 🔥🔥

@desi_jarvis @Richarjb Just in time! Starting a GCP cloud review today

gcpHound v2.0 is out. It comes with the Web UI to query IAM permissions for different targets. Next evolution will have Attack Paths as well as other cool GCP abuse cases from @Richarjb desi-jarvis.medium.com/gcphound-v2-0-…

@desi_jarvis just significantly raised the bar on quickly visualizing GCP IAM roles and permissions for red and blue teams. Checkout gcpHound v2.0!

🧵 1/ Two days ago I shared this image to demonstrate how many unique paths exist for a single behavior. At the time I didn't know how to use it, but today I realized it shows why red teams, MITRE evals, & vendor tests can't answer Technique coverage questions without change.

Is it GCP or GC? - Learn from Cool Kids of Google Cloud! @antoniscloud & @hashishrajan - cloudsecuritypodcast.tv/season-3/googl… #cloudsecuritypodcast #googlecloud #infosec

Red Team in Google Cloud! -@Richarjb @hashishrajan cloudsecuritypodcast.tv/season-3/red-t… #cloudsecuritypodcast #googlecloud #infosec

@CloudSecPod @hashishrajan Thanks for having me on the podcast. The questions were great and I always enjoy meeting members of the community.

We are learning RED Team in Google Cloud tomorrow with @Richarjb & @hashishrajan #cybersecurity #GoogleCloud x.com/i/spaces/1YqJD…

If you are looking for a Metasploit module for scanning Log4Shell , check out my write-up below. I have also outlined some things I found useful as well as resources you can use to write / customize your own module. desi-jarvis.medium.com/custom-metaspl…

gcpHound: This hound has learned some new tricks Learn about the new features by @desi_jarvis and myself and why the cat is upset at my latest blog post link.medium.com/zq4zg7sjZlb

Just added support to LDAP Serialized Payloads in the JNDI-Exploit-Kit. This attack path works in *ANY* java version as long the classes used in the Serialized payload are in the application classpath. Do not rely on your java version being up-to-date and update your log4j ASAP!