Thomas Clauwaert

Just finished sharing a trilogy of Azure AD hacking demonstration videos: youtube.com/channel/UCMWKJ… Please harden your setups :-)

Howest is looking for Cyber Security lecturers, all questions welcome. howest.be/nl/vacatures/2…

Here's what it was like developing for NES back in 1990. This video shows me running the Software Creations' IDE on a DOS PC and then loading up some of my NES Silver Surfer source files. We used our own in-house dev tools and the game was written in 6502 assembly language.

So this is a thing now on various Windows 10 and 11 systems. Just open C:\Windows\System32\Config in explorer once and this becomes possible. Screenshots from fresh and updated Win11, Win10 20H2 and Win10 21H1.

CVE-2021-1675, please patch/mitigate ;-) Remote verification: `rpcdump.py @10.11.0.19 | grep MS-RPRN`

Just released some cryptography research on Windows Credential Storage including some new tooling. insecurity.be/blog/2020/12/2… Thanks: @gentilkiwi

Nice, got invited for one of the famous Intigriti hacking events. Looking forward! #1337up1120

Right now: #AnsibleFest is going on, and to celebrate, I'm giving you 50% OFF Ansible for DevOps! leanpub.com/ansible-for-de… — up your automation skills today!

Using a Local Account, and have Windows Hello PIN code configured? ('cause Microsoft says it's more secure 🤷‍♂️) Cleartext password is in the SYSTEM vault TPM or not #mimikatz loves your passwords 🥰 Thank you @tijldeneut for questions on it (I was too much on PRT 🤔)

Interesse in een online Howest CTF? De door lectoren, custom-made challenges gaan van extreem simpel tot advanced en dat over heel wat categorieën. Meer info: ctf.howest.be Niet zeker of het iets voor u is? Probeer onze demo challenges: nsahack.be/demo

Want to get a better understanding of DevSecOps using Promise Theory? Join @markburgess_osl and me for an online workshop on the 26th of March / Signup via eventbrite today ! RT = <3 eventbrite.com/e/promise-theo…

So proud to be doing this together with @markburgess_osl An online Promise Theory & DevSecOps workshop What more do you need to register! RT = Karma points!

This fundraising virtual conference is finally happening - glad to be part of it and help people

@pczarkowski @bertvanvreckem @tybritten Thx will look into it (#famouslastwords) ^_^ thx again!

@Ciberth @bertvanvreckem @tybritten We used a fairly custom pks cluster, you could probably do the same with gke or aks, but you'd need to figure out how to do auth per user for them.

@patrickdebois @jjasghar Cool looking forward to it. Might try it out with some students one day!

@Ciberth @jjasghar yes! not perfect but fixable :) Will blog on it

big shoutout to @jjasghar for being extremely helpfull during the #mobops session !

I'm working on some new Kubernetes security features at @snyksec, to help find and fix security issues in your configs. I'm looking for folks who would be interested in early access in exchange for letting me know what you think. Interested? Send me a DM.

@beddari I love the "old" people at #cfgmgmtcamp #fosdem #devopsdays and other conferences. Yet I'm searching for a better format for students/juniors/noobs. Starting points or something. Do we need #NoobObs ?