DMFR

I hate computers. All kinds.

In your opinion, what are the biggest shifts in adversary tactics/behaviors in the last 10 years? Looking for high-level, *macro* trends, backed by anecdotes or publicly documented examples. I have my own ideas, but looking for additional angles/inputs.

@vxunderground lgtm

LiNuX iS tHe sUpErIoR Os Delete all zip files in a directory on Windows: del *.zip Delete all zip files in a directory on Linux: find "$(pwd | awk '{ print $1 }')" -type f -name "*.zip" -exec sh -c 'for file; do if [ -w "$file" ]; then rm -f "$file"; fi; done' sh {} +

It’s October. Get ready to be aware.

LoL, LMAO even @_lennart I've got a new detection for you

@QuinnyPig My home servers were named for "cheeses unsuitable for grilling", probably at the suggestion of @andybrown

@rootsecdev It is about time for me to declare tab bankruptcy.

Down to 15 chrome tabs which is an improvement.

@_JohnHammond Very cute.

rate my twitchcon recording setup

@0x4D31 @benreardon Great idea. I'm sure a lot has changed since it was initially built. I need to figure out a way to maintain the database less manually.

has anyone tried using @benreardon (and me)’s hasshServer* (ssh server fingerprint) to identify vulnerable servers? the banner isn’t reliable. you can also use my nmap script github.com/0x4D31/hassh-u… (cc @dmfroberson, any plans to update hasshdb? :) * github.com/salesforce/has…

Numbers station challenge on the air this Saturday at 21:00 UTC! From our KPH friends at Point Reyes (San Francisco). Can you decrypt the message? Details and freqs: priyom.org/blog/mrhs-even… How-to: radiomarine.org/events-2 Send results to crypto@radiomarine.org for certificates!

✨finally carved out time to polish a weekend project! meet Galah 🦜: an llm-powered web honeypot using the @OpenAI api. stay tuned for a blog post diving into the 3 months of data collected from a gcp deployment in early 2023. github.com/0x4D31/galah @ProjectHoneynet

About a month from now, #100DaysofYARA will kick off! Explainer on how to participate is linked below but the TL;DR is: A self-paced, concerted effort to learn YARA by writing a new rule everyday, starting January 1

@rand0hmized @summer__heidi This is the cutest thing i have ever read.

@summer__heidi I’m just tying to sell you my heart at a 100% discount.

@HackingLZ github.com/0x4D31/hassh-u…

What are your favorite Nmap scripts? My personal favorites for completely different reasons are nfs-ls and grab_beacon_config. nfs-ls never lets me down in random pentest environments finding something fun.

The ARISS #SSTV fans must have wished upon a star, because the planners have scheduled a short event for next week. It starts at 08:55 UTC on Thursday 7-December. See the graphic for detailed times. More soon at ariss-sstv.blogspot.com too.

I added some maturity models and stuff to the framework section of my awesome detection list a while back (#frameworks" target="_blank" rel="nofollow noopener">github.com/0x4D31/awesome…), thinking they'd come in handy one day. today, after needing something similar and spending hours on a d&r maturity model, I revisited my list and

Without telling your age, what was the first video game you remember ever playing?

@EricaZelic 💯

My digital art project this evening called Deep Learning

Check it out, it's tmp.0ut Volume 3! tmpout.sh/3/