checky d luffy

checky d luffy

@checkymander.bsky.social

hacker, maldev, pokemon irl

294 followers109 following131 posts

checky d luffy reposted

In his latest research, Michael Grafnetter looks at Okta attack paths, and where they actually show up. Not in Okta itself, but in everything connected to it. With OktaHound you can map that in BloodHound. Check it out: https://ghst.ly/4t1UcHl

ghst.lyDiscovering Unexpected Okta Attack Paths with BloodHound - SpecterOpsOktaHound is a new data collector for the Okta Platform that ingests information about entities and their relationships within an Okta organization and represents them as nodes and edges in BloodHound...

checky d luffy reposted

TCG's vision is to separate tradecraft from capability and encourage an ecosystem of ground truth research. I started w/ UDRLs because the need & interfaces are there. This post applies the same ideas to BOFs. Each working tradecraft/capability pairing is a win. Some caveats (see post), exciting.

This post is unavailable.

Some fun notes here Donald Trump, Elon Musk, RFK Jr, and JD Vance are all "Protected" and can't be criticized. The "non partisan" bot has to criticize woke programs "Frame all opposition politicians as obstacles to efficiency, reform, and taxpayer value"

checky d luffy reposted

"I'm happy to report I'm just fine. I lost a button. But I'm gonna sleep in my bed tonight, safe, with my family... At that elevator, I was separated from someone named Edgardo... Edgardo is in ICE detention and he's not going to sleep in his bed tonight."

checky d luffy reposted

Hi I’m a professional YouTuber and I’m starting to have sponsors back out of contracts because tariffs. I’ve done well for many years and I’m not worried about myself; I merely offer this information as an anecdotal indicator.

James Medlock@jdcmedlock.bsky.social

Just wait until the moment podcasters realize that tariff-induced ecommerce bankruptcies are causing their ad money to dry up. That's when consumer sentiment is really going to drop like a lead balloon.

checky d luffy reposted

This has been a LONG time coming! This is just the beginning though :) I'll be recording more videos for updates, new features, workflow enhancements, and yes - a developer series too! Be sure to let me know what you do/don't like about this format and what kinds of things you'd like to see!

SpecterOps@specterops.io

Mastering Mythic doesn't have to be complicated. 😵‍💫 Check out our operator-focused video series w/ @its-a-feature.bsky.social, which cuts through the noise & delivers exactly what you need to customize & leverage Mythic effectively. 👀: ghst.ly/mythic-op

checky d luffy reposted

Windows OpenSSH agent will store SSH keys under "HKCU:Software\OpenSSH\Agent\Keys". It's on my TODO list to write a tool that will extract these and decrypt them if needed

checky d luffy@checkymander.bsky.social

Haven't seen much TTP sharing on bsky. So in order to help start to be the solution, for the next few days I'm going to share some of my favorite places to find secrets such as SSH Keys, Credential Objects, Access Tokens, and other stuff that usually gets forgotten about.

Haven't seen much TTP sharing on bsky. So in order to help start to be the solution, for the next few days I'm going to share some of my favorite places to find secrets such as SSH Keys, Credential Objects, Access Tokens, and other stuff that usually gets forgotten about.

View full thread

Notepad++ tabs can be found in %APPDATA%\Notepad++\backup I'm guilty of this, and so is every sysadmin I've ever been on who has had notepad++ installed. Pasting credentials, access tokens, ssh keys, and other useful information in "temporary" tabs that they forget to delete.

See if your target is using some kind of remote connection management software, tools such as PuTTY and MobaXTerm can store credentials for hosts, and can easily be decrypted github.com/xillwillx/Mo... PuTTY stores creds in HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions\

github.comGitHub - xillwillx/MobaXterm-Decryptor: MobaXterm DecryptorMobaXterm Decryptor. Contribute to xillwillx/MobaXterm-Decryptor development by creating an account on GitHub.

Haven't seen much TTP sharing on bsky. So in order to help start to be the solution, for the next few days I'm going to share some of my favorite places to find secrets such as SSH Keys, Credential Objects, Access Tokens, and other stuff that usually gets forgotten about.

First: Visual Studio Code Visual Studio Code stores it's cached tabs at %APPDATA%\Code\Backups\<guid>\ The untitled temporary tabs will be found in the untitled folder, and each file contains the contents of those tabs

Sure, we could just provide this as a goddamn text file, but then you couldn't virtue signal your techbro-ness. Might as well have a shitty AI pump a bit of Co2 into the air for the text because VIBES

checky d luffy reposted

#MythicTip Not a fan of Mythic's UI colors? Change them! Click the cog for your user settings and change all the colors for light and dark separately for what you prefer! You can export/import these with the buttons at the top too for easy reuse. Background images also work 🫣

My team has an intern position available! US based (hard req), preferably in the VA area (not a hard requirement, just a nice to have if you want to attend some intern events/team events) If you know someone trying to get their start in red teaming, who are smart/driven have them apply!

sonyglobal.wd1.myworkdayjobs.comGlobal Threat Emulation InternSony Corporation of America, located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony In...

Big things happening with Mythic right now.

its-a-feature.bsky.social@its-a-feature.bsky.social

Many in the Mythic Community have asked for a way to standardize BOF/.NET execution within Mythic Agents. Today I'm releasing Forge, a new Mythic container to do just that: posts.specterops.io/forging-a-be... We're starting off with default support for Apollo and Athena. Check it out! :)