Rogan Dawes

@RoganDawes

Researcher . Open DMs

Johannesburg
Joined November 2009
122 Photos and videos Photos and videos

Tweets

You blocked @RoganDawes

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @RoganDawes

  1. Retweeted
    4 hours ago

    Just pushed a new tool for password spraying Microsoft Online accounts (Azure/O365) to Github called MSOLSpray. It logs if a user cred is valid, if MFA is enabled, if a user doesn't exist, if the account is locked, if the account is disabled, and more.

    4 replies 100 retweets 243 likes
    Undo
  2. Retweeted
    Mar 11
    Replying to

    Rushed through the README: seems to be timing based detection. P4wnP1 should be able to bypass this with `typingSpeed` For LOGITacker the respective logic has to be added For reference:

    2 replies 3 retweets 13 likes
    Undo
  3. Retweeted
    Mar 11

    We are happy to announce will be giving an online talk "Hardware Hacking: Hands-On" at the Embedded Online Conference May 20th. You can register for free until March 16th with code NEWAE .

    17 retweets 28 likes
    Undo
  4. Retweeted
    20 Sep 2019

    One of my largest customers (400k+) has only 3 Global Admins. How many do you have? One of the best documents we have shows the MINIMUM permissions you need to perform a task in . Check this out.

    11 replies 80 retweets 207 likes
    Undo
  5. Retweeted
    Mar 11

    So much the little Old can do

    Added support for brute forcing Mifare Ultralight card numbers using hf_bruteforce lua script. script run hf_bruteforce -s start_id -e end_id -t timeout -x mfu Or -x mfc for Mifare Classic.
    1 reply 3 retweets 13 likes
    Undo
  6. Retweeted
    Mar 11

    I can't evaluate the impact of this SMB over QUIC vector (if there is one). Could someone with more insight step forward & tell us if this means that blocking outgoing port 445 isn't enough to protect our SMB clients?

    9 replies 28 retweets 75 likes
    Undo
  7. Retweeted
    Mar 11

    Google engineers open-source Linux tool that prevents USB keystroke injection attacks Blog: Demo: GitHub:

    7 replies 222 retweets 451 likes
    Undo
  8. Retweeted
    Mar 9

    We are giving away 10,000 FREE orders to celebrate our 10th birthday! RT to enter to win. Follow so we can DM you. Ends 3/16 at 10PM EST. Read about our 10-year journey below 👇

    10 years ago Sticker Mule was born out of frustration.
    Show this thread
    3,012 replies 47,871 retweets 19,387 likes
    Undo
  9. Mar 10

    Ah, I see there is a power failure on Vumatel’s network. Thanks!

    Show this thread
    Show this thread
    Undo
  10. Mar 10

    Tcpdump on the upstream interface only shows my own router attempting dhcp, and what I suspect to be the fiber cpe sending some unknown ethertype 0x9003.

    1 reply 1 like
    Show this thread
    Show this thread
    Undo
  11. Retweeted
    Mar 10

    One of the funniest and most evil things I’ve ever built, It’s time for my old project “Malicious Notebook” to see the light. Keep your access cards away from it, you’ve been warned 😈 More:

    This media may contain sensitive material. Learn more
    2 replies 3 retweets 18 likes
    Undo
  12. Retweeted
    Mar 9

    We’re super privileged to have visiting us in South Africa to share some of his AWS skills with . Welcome to Africa Scott :)

    4 retweets 31 likes
    Undo
  13. Retweeted
    Mar 5

    Remotely Injecting Keystrokes through an Industrial Barcode remotely. Below the Video PoC

    9 replies 67 retweets 179 likes
    Show this thread
    Show this thread
    Undo
  14. Retweeted
    Mar 5

    I’m sad to say, due to COVID-19 travel restrictions we’ve had to cancel our attendance & training. We’re going to offer it remote and free for those who signed up and want to tough it out, otherwise students can get a refund or swop to another course.

    1 reply 9 retweets 30 likes
    Undo
  15. Retweeted
    Mar 4

    You can now jailbreak an iPhone with an Android phone

    1 retweet 4 likes
    Undo
  16. Retweeted
    Mar 4

    Introducing Project Sandcastle: Android for the iPhone. We’re excited to see what the developer community builds from this foundation. We’d particularly like to thank the team behind Checkra1n and PongoOS for their support and assistance.

    110 replies 860 retweets 2,385 likes
    Undo
  17. Retweeted
    Mar 2

    A writeup from on V8's optimisation engines, Ignition & TurboFan, and how to use Turbolizer to visualise their behaviour Done in the pursuit of understanding 's TypeConfusion in V8

    8 retweets 19 likes
    Undo
  18. Retweeted
    Feb 29

    I scraped UrbanDictionary entries in to . Phrases have punctuation removed, unicode replaced, casing and spaces preserved. Words are lowercase and sorted by occurrence. Who knew offensive words could be so popular online :P

    5 retweets 11 likes
    Undo
  19. Retweeted
    Feb 29

    Ok Twitter! Any rfid tag you have and have no use for, how about you send it to me? I am always looking to increase my collection.

    5 replies 9 retweets 18 likes
    Undo
  20. Retweeted
    Feb 27

    Just published a video on how to reverse engineer bare-metal ARM firmware using and SVD-Loader!

    7 replies 113 retweets 387 likes
    Undo

@RoganDawes hasn't Tweeted yet.

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·