Benjamin Sølberg

I often get annoyed with rundll32.exe while working with malware, hence I have made a 32/64 bit replacement where running an export is optional and at the same time also has the possibility of run multiple exports in succession. Feedback is appreciated. github.com/BenjaminSoelbe…

@DennisNilsson A VGA GEV1000 electric scooter. I managed to dump the flash even so it was read out protected.

@BenjaminSolberg What vehicle is now without its controller?

Let’s test the security on this bad boy

@Apple Today my "Phishing Domain Finder" tool found: id-support-apple[.]com iclouds-location-apple[.]com apple-found-alert[.]live apple.icioudv[.]cn live-location-apple[.]live www.apple.ifindmy-id[.]com and many many more Source: github.com/BenjaminSoelbe…

@postnord Today my "Phishing Domain Finder" tool found: min-postnord[.]se paket-postnord[.]se postnordcustomerservice[.]life postnord-ld[.]se postnord.njcjw[.]xyz www.min-postnord[.]se www.paket-postnord[.]se www.postnord-ld[.]se Source: github.com/BenjaminSoelbe… #postnord

Today my "Phishing Domain Finder" tool found an active @DanskeBankFI @DanskeBank_DK phishing campaign: danskebank.fi-lukittu[.]net Source: github.com/BenjaminSoelbe… #danskebank

Today my new "Phishing Domain Finder" tool found: www-postnord[.]site service-postnord.stidner[.]com paket-leverans.postnord[.]live paketleverans.postnord[.]live postnordexport.xpwdv.beeweb[.]se postnord[.]live postnord.orderinfo[.]online github.com/BenjaminSoelbe… @postdanmark

I’m currently on some Certificate Transparency data and it seems to be spammed with a lot of domains names with say “gitlab.git.git.gitlab.[redacted].com” certificates. Does anyone know why besides that it probably is malicious? See for your self using “certstream --full | jq -C”

If you were wondering where the calculator unit is and what it looks like in a CPU…😁 die shot i made while testing my cheap new microscope.

@r0ns3n You’ve earned it!

I'm super excited to announce that Monday I will be joining the #Mandiant #AdvancedPractices team 🦅 as Senior Security Researcher.

I have created a small Java Forensics Toolkit that is able to dump all classes currently loaded in a running JVM. It’s a great little tool when you need verify the byte code of a running system. #cybersecurity #infosec #DFIR #blueteam github.com/BenjaminSoelbe…

My 1978 LED replacement watch module was featured on Hack’a’day. To be honest it was a hard project to make but very rewarding and fun. PCB made in KiCad and firmware in TI Code Composer Studio. Featuring an MSP430 MCU and a 10 year battery life: hackaday.com/2022/03/31/mod…

In episode 314 of @thetalkshow @gruber is trolling @caseyliss hard as “the other guy” which made me laugh. @marcoarment laughingly notes that Casey will kill him for that.. Casey we love you. You are the glue that holds ATP together, the balance and the equalizer. #LissIsMore

@TheAmpHour Love the show. The sponsor read in #526 was done in an interesting and entertaining way.

@johndmcmaster @toolotheday This tool should be called a Magic Smoke Examiner.

Transistor can opener (@toolotheday): thorlabs.com/newgrouppage9.…

@zvikam Try IDDQD next time

in a meeting today, discussing some low-level troubleshooting screen, i suggested using IDKFA as a feature flag to control access. sadly, no one understood the reference. this is not ok.

@_hyp3ri0n djokovic808 could be DJ okovic 808 since the tr-808 is a famous drum machine by Roland and exactly what a dj would use or like.

he goes by the name James0x40 on twitter (now banned), @kw0dem on telegram, gmail is kvlpmap@gmail.com, and djokovic808 (maybe a tennis fan!?). Anyway, yes I was hacked. No, no customer information was leaked, this was on a private VM for this exact reason. Anyway I'm offering

Hey folks, story time. A guy going by the name James Willy approached me about help with a 0-day. After providing a writeup on root cause analysis I realized the visual studio project he gave me was backdoored.

@POTUS Welcome, Mr. President. May you restore my faith in the other half of the American people and may you tweets be the truth, the whole truth, and nothing but the truth, so help me God.

There is no time to waste when it comes to tackling the crises we face. That's why today, I am heading to the Oval Office to get right to work delivering bold action and immediate relief for American families.

@FireEye @Mandiant #flareon7 Thank you, this was my biggest and proudest accomplishment during 2020. I’m looking forward to getting my butt kicked again in 2021.

@DNewcomer @anthomsec @ICS_Gabe Check out the Flare Github page. Tons of tools and tons of info.

@anthomsec @ICS_Gabe I need to learn Flare. Got any recommended resources?

@DNewcomer @anthomsec @ICS_Gabe There are many Flares but I wish this Flare was mine.