Dan Guido

@suqdiq @daveaitel @dguido @flyryan pulling valid creds or sessions is not useless, not sure why Dave said the vuln was

@jstnkndy @suqdiq @daveaitel @flyryan It requires attention to detail and does not easily scale as an attack vector. Shellshock does.

@dguido @jstnkndy @suqdiq @flyryan it was because trying it gota whole lot of nothing. In theory it gets useful info...never saw it in wild.

@daveaitel @dguido @jstnkndy @suqdiq @flyryan What? Have you talked to many IR folks? HB was *definitely* used in the wild. A lot.

@chort0 @daveaitel @jstnkndy @suqdiq @flyryan Agreed, lots of people knocking on doors but I haven't seen a lot of breaches attributed to it

@chort0 @daveaitel @jstnkndy @suqdiq @flyryan Do you have anything I can cite? I'm looking.

@dguido @daveaitel @jstnkndy @suqdiq @flyryan Most of it was DIB, SFAIK. Good luck. I got IOCs privately.