Sean Metcalf

@PyroTek3

Microsoft Certified Master , Consultant/Researcher. Speaker: Black Hat, DEF CON, DerbyCon, Shakacon, & BSides

4°08'15.0N 162°03'42.0E
adsecurity.org
Joined August 2014
238 Photos and videos Photos and videos

Tweets

You blocked @PyroTek3

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @PyroTek3

  1. Pinned Tweet
    Nov 28

    After an extended delay, the ADSecurity unofficial Mimikatz guide is now current & updated for version 2.1.1 (November 28, 2017). Includes all modules & commands.

    7 replies 437 retweets 621 likes
  2. Retweeted
    8 hours ago

    In my tenure on Twitter, I have seen a number of individuals in InfoSec go from curious students to rising stars/well compensated security professionals on the basis of their malware writeups or GitHub projects. It won't work for all roles, but you can prove skills via projects.

    3 replies 16 retweets 69 likes
    Show this thread
    Show this thread
  3. Retweeted
    8 hours ago

    Protip: if you want to get into security but have no resume/job role experience, you can demonstrate competency in core skills by doing things like SANS or Flare-On challenges and writing about them on the internet, or some other technology/project/thing that interests you.

    3 replies 33 retweets 84 likes
    Show this thread
    Show this thread
  4. Retweeted
    13 hours ago

    Really cool VBScript encoding found by -- definitely challenges any detections looking for that "wall of Chr()" ASCII-conversion syntax.

    Fresh APT loader technique for today's : cs=Array(#,#,#,#,...): cmd="": For each c in cs: cmd=cmd&Chr(c): Next: cmd=cmd&vbcrlf: Execute(cmd) This is remotely loaded into memory from source phishing doc that uses renamed wscript & pubprn.vbs to load COM Scriptlet.
    Show this thread
    31 retweets 67 likes
  5. Retweeted
    24 hours ago

    Don’t listen to the so-called “experts.” Keeping your passwords in one physical book, locked away, is simple to use, has much less chance of being compromised, and it will help your loved ones recover your accounts if needed.

    Experts Rail Against Internet Password 'Organizers'
    17 replies 54 retweets 135 likes
    Show this thread
    Show this thread
  6. Retweeted
    22 hours ago

    To all my followers, no matter what your beliefs may be, I wish you all the best for the holiday season. May peace and happiness be a gift to you and from you. And wishing you all a Happy New Year. Nollaig Shona agus athbhliain faoi mhaise daoibh go léir !! :) :)

    7 replies 3 retweets 35 likes
  7. Retweeted
    22 hours ago

    This is real. If you got your kid a gaming console for the holidays open it, plug it in, and update the console and controllers before Christmas morning. May also want to install/update at least one game too

    Not a gamer, never was. Bought an XBox One for the kiddo. OMG, 2hrs to dwnld updates?!? The worst UI I have used in a looong time. So frustrating!
    Show this thread
    21 replies 161 retweets 232 likes
  8. Retweeted
    Dec 20

    We’re rolling out an update to login verification. You’ll now be able to use a third party app for two-factor authentication instead of SMS text messages.

    87 replies 754 retweets 1,382 likes
  9. Retweeted
    Dec 21

    Any pentesters still use the Group Policy Preferences password trick to get passwords?

    Replying to @GossiTheDog
    The hot fix to prevent people setting the value was pushed out automatically... Other security tools have been looking for it for years... I have done a heap of blogs and talks about it... This is old news...
    23 replies 10 retweets 37 likes
  10. Retweeted
    Dec 21

    UPDATE: If you clean install RS4+ and have compatible hardware VBS/HVCI is now automatically enabled!! This means the Windows kernel now enforces by default: Kernel code integrity, runtime ACG, and control flow integrity via VBS. Huge for Windows security. Checkout WIP builds!

    This is HUGE. Kernel Control Flow Guard, HVCI, Hyper Guard and bunch of other goodness are now available on non-Enterprise Windows SKUs. Turn it on, now.
    Show this thread
    9 replies 173 retweets 270 likes
  11. Dec 21

    Obvious responses are obvious. Expect reaction/retaliation to actions you may be expected to make as a defender and prepare for it.

    1 reply 2 likes
  12. Dec 21

    When things aren't going to plan, it may be best to regroup and reevaluate instead of pushing on. (seriously, you can't pick a simple lock and then attempt to cut the *glass* door open).

    4 likes
  13. Dec 21

    If you are playing defense, you have home court advantage. Know where your weaknesses are and align defenses appropriately. Visibility is key.

    3 retweets 8 likes
  14. Dec 21

    No plan goes according to plan. Expect there will be parts that don't work out and planned milestones that fail. Plan alternatives for the key items and work around the rest as needed.

    2 replies 6 likes
  15. Dec 21

    If you need OPSEC, don't provide information your opponent didn't already have. Do provide alternative narratives that conflict and not accurate.

    1 reply 2 retweets 14 likes
  16. Dec 21

    Enjoy your rewards and treats. Don't worry about being judged. If you want to have a Twinkie each time you make progress on a goal (other than dieting perhaps), then go for it!

    1 reply 6 likes
  17. Dec 21

    Sometimes in live you have to make the hard decisions that will be painful (like running across broken glass while barefoot).

    1 reply 2 retweets 5 likes
  18. Dec 21

    Don't let ego be the thing that drives you. You can miss what the real situation is and be left with a painful lesson. "Hey, what am I, a method actor? Hans, babe, put away the gun, this is radio, not television."

    2 replies 1 retweet 9 likes
  19. Dec 21

    Stay flexible. Your goals and what you want may be very different than that of your employees, colleagues, customers, etc. Align your goals to their vision to gain them as an ally and all can be successful. "You throw quite a party."

    5 likes
  20. Dec 21

    Technology that is pervasive and critical for business today may not be around in 30 years. Adapt to the market or be left behind (Control Data Systems).

    5 likes
  21. Dec 21

    Don't be a jerk. Treat others with kindness and compassion and they will help you succeed. Walking over them to be successful only ensures everyone will root for your failure (or punch you in the face on national television or stun you on an airplane).

    4 retweets 13 likes

@PyroTek3 hasn't Tweeted yet.

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·