Nick Frichette

@Frichette_n

Penetration Tester || OSCP, GXPN, GPEN, CSAA || he/him || I made a VulnHub VM, go play it:

~/
Vrijeme pridruživanja: kolovoz 2013.

Tweetovi

Blokirali ste korisnika/cu @Frichette_n

Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @Frichette_n

  1. 30. sij

    You can’t tell me this wasn’t made for pen testers/red teamers.

    Poništi
  2. proslijedio/la je Tweet
    28. sij

    Newest sticker, will have at RSA

    Poništi
  3. 29. sij

    Me: I wonder what saves look like. Maybe I can modify them to change my stats in the campaign? Blizzard: Try it kid. I dare you.

    Poništi
  4. proslijedio/la je Tweet
    27. sij

    Excellent thread on a photo I posted. Z Check it out!

    Poništi
  5. proslijedio/la je Tweet
    25. sij

    Happy to see our /Docker pentesting tool made public. If you find registry creds, quickly see if there are secrets stored in the metadata of other images in a registry. Or scan unauth'd registries. Did you know that ENV in a Dockerfile, is stored in the registry metadata? ;)

    Poništi
  6. 25. sij

    I think we’ll see more websites/companies adopting onion technology. Especially places with sensitive subject matter (news, porn, etc.)

    Prikaži ovu nit
    Poništi
  7. 25. sij

    Good thread on anti-censorship in the U.K. Most folks think it’s totalitarian regimes that block websites, but there are plenty of allies that do as well.

    Prikaži ovu nit
    Poništi
  8. 24. sij

    More and more places are standing up Onion sites. Although, I have to admit after the BBC I wasn’t expecting this one.

    Poništi
  9. proslijedio/la je Tweet
    23. sij

    “You don’t need Kubernetes” Until... You’re asked to resize all your VMs cause they’re all at 10% utilization... should have used Kubernetes. /1

    Prikaži ovu nit
    Poništi
  10. 23. sij

    TIL that i3wm protects you from coworker trolling.

    Poništi
  11. proslijedio/la je Tweet
    22. sij

    Knowledge is key to building secure applications. These three cheat sheets put that security knowledge at your fingertips for , , and data storage in the browser. Grab the free PDF, and subscribe to get updates if you want. Please share!

    Poništi
  12. 19. sij

    I’m having way more fun with this than I should be. I’d be curious about intercepting and modifying a game as it’s downloading. I wonder if it would be possible to get code execution like that. (Not sure if games are code signed)

    Poništi
  13. 18. sij

    But I can proxy apps like mixer no problem.

    Prikaži ovu nit
    Poništi
  14. 18. sij

    I’ve expanded on it a bit and am proxying and modifying traffic. (I added a note in the picture) It seems that somewhat part of the OS don’t use the vulnerable DLL (it doesn’t appear they like the cert).

    Prikaži ovu nit
    Poništi
  15. 17. sij

    Not sure who needs to know this but (no surprise) the Xbox One is also vulnerable to CVE-2020-0601. Game hacking anyone?

    Poništi
  16. proslijedio/la je Tweet
    15. sij

    Note that CVE-2020-0601 is a really novel and interesting flaw to talk about and follow along with. But normal people should just update their computers and go along with their day. The RDP Gateway flaw released yesterday is far more risky to the average company right now.

    Prikaži ovu nit
    Poništi
  17. 15. sij

    If InfoSec was a Vine:

    Poništi
  18. 14. sij

    As a former Tuba player this is disconcerting.

    Poništi
  19. proslijedio/la je Tweet
    13. sij

    Pentest your prevention controls Unit test your detection controls Red Team your response processes ☝️Mixing the above comes with diminished results.

    Prikaži ovu nit
    Poništi
  20. 11. sij

    Recently I was messing around with some Linux CLI tools and wrote a short blog post on how to intercept their traffic using Burp.

    Poništi

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.

    Možda bi vam se svidjelo i ovo:

    ·