Andrew Chiles

@AndrewChiles

Operator at SpecterOps.io, Security Researcher, Tech Enthusiast, Health Nut

Huntsville, AL
threatexpress.com
Joined March 2009
7 Photos and videos Photos and videos

Tweets

You blocked @AndrewChiles

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @AndrewChiles

  1. Pinned Tweet
    Jul 12

    New Commit - Invoke-HostEnum updated for Empire 2.0 compatibility. Welcoming ideas and feature requests on Github!

    6 retweets 7 likes
  2. Retweeted
    Dec 5

    [blog] Designing Effective Covert Red Team Attack Infrastructure

    142 retweets 212 likes
  3. Retweeted
    Nov 28

    On my Mac, running the current public beta of High Sierra this worked to fix the root problem. Give root a password. Open Terminal. Type: $ sudo su Password: (your password) sh-3.2 # passwd Changing password for root. New password: (enter something you'll remember) Retype new:

    18 replies 77 retweets 138 likes
  4. Retweeted
    Nov 28
    Replying to

    🤣🍎👾💀☠️

    12 replies 278 retweets 309 likes
  5. Retweeted
    Nov 17

    Blog Post - Application Whitelisting bypass: mshta.exe - Credits to

    3 replies 79 retweets 132 likes
  6. Retweeted
    Nov 20

    The fourth post in my "PowerView PowerUsage" series - covers enumerating cross-trust DACLs/ACEs

    1 reply 186 retweets 237 likes
  7. Retweeted
    Nov 16

    [Blog] Lateral Movement Using Outlook’s CreateObject Method and DotNetToJScript

    7 replies 422 retweets 570 likes
  8. Retweeted
    Nov 6

    Join me in Vegas for Red Team training on Nov 30! SANS SEC564 Red Team Operations and Threat Emulation

    2 replies 9 retweets 19 likes
  9. Retweeted
    Nov 6

    [Blog] A Look at CVE-2017–8715: Bypassing CVE-2017–0218 using PowerShell Module Manifests

    250 retweets 339 likes
  10. Retweeted
    Nov 5

    My course review of Adv Tactics Red Team Ops course. Easily the best tech course ever!

    3 replies 104 retweets 194 likes
  11. Retweeted
    Nov 2

    In Win 10 RS3, MSFT introduced a new abusable binary. "Bypassing Application Whitelisting with runscripthelper.exe"

    8 replies 459 retweets 607 likes
    Show this thread
    Show this thread
  12. Retweeted
    Nov 2

    Solid blog about the DDEAUTO attack vector. Great detail, examples & obfuscation techniques. Nice job !

    2 replies 92 retweets 143 likes
  13. Retweeted
    Nov 1

    Google Calendar Event Injection with MailSniper - cc

    4 replies 46 retweets 77 likes
  14. Retweeted
    Nov 1

    Excited that MINIS is joining forces with ! Combining 2 great companies with similar visions for growth of the community

    SpecterOps is Proud to Announce Acquisition of . More info at:
    5 retweets 13 likes
  15. Nov 1

    Super excited about the things to come with !

    1 retweet 8 likes
  16. Retweeted
    Oct 21

    [Good Read] EternalBlue – Everything there is to know

    74 retweets 151 likes
  17. Retweeted
    Oct 19

    and I will be on tonight to discuss our tool MetaTwin. Hide binaries in plain sight.

    5 retweets 6 likes
  18. Retweeted
    Oct 19

    Tonight! of , & of , & security news! 6pm ET

    1 reply 7 retweets 12 likes
  19. Retweeted
    Oct 19

    With another CVE under his belt, demonstrates another constrained language mode bypass.

    127 retweets 175 likes
  20. Retweeted
    Oct 10

    Announcing 1.4 - The Object Properties Update, including several improvements and new features:

    9 replies 121 retweets 166 likes
  21. Oct 10

    MetaTwin updated today with PowerShell v2.0 compatibility!

    MetaTwin - Borrowing Microsoft Metadata and Digital Signatures to 'Hide' Binaries Thanks for SigThief
    1 retweet 2 likes

@AndrewChiles hasn't Tweeted yet.

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·