@raphaelmudge.bsky.social I gotta ask, why are tcg releases not on something easier to script pull like github lol, plz my docker images are in pain
checky d luffy
checky d luffy
@checkymander.bsky.social
hacker, maldev, pokemon irl
294 followers109 following131 posts
checky d luffy reposted
In his latest research, Michael Grafnetter looks at Okta attack paths, and where they actually show up. Not in Okta itself, but in everything connected to it. With OktaHound you can map that in BloodHound. Check it out: https://ghst.ly/4t1UcHl
checky d luffy reposted
Early career pen tester wanted to break some of azures specialist clouds. #infosecJobs
checky d luffy reposted
GitGoon: Git for gooners Tired of your Pokemon Stadium mod to give Lapras heckin bonkers getting taken down by GitHub? Worry no more. gitgoon.dev
checky d luffy reposted
TCG's vision is to separate tradecraft from capability and encourage an ecosystem of ground truth research. I started w/ UDRLs because the need & interfaces are there. This post applies the same ideas to BOFs. Each working tradecraft/capability pairing is a win. Some caveats (see post), exciting.
checky d luffy reposted
checky d luffy reposted
Hi I’m a professional YouTuber and I’m starting to have sponsors back out of contracts because tariffs. I’ve done well for many years and I’m not worried about myself; I merely offer this information as an anecdotal indicator.
Just wait until the moment podcasters realize that tariff-induced ecommerce bankruptcies are causing their ad money to dry up. That's when consumer sentiment is really going to drop like a lead balloon.
checky d luffy reposted
This has been a LONG time coming! This is just the beginning though :) I'll be recording more videos for updates, new features, workflow enhancements, and yes - a developer series too! Be sure to let me know what you do/don't like about this format and what kinds of things you'd like to see!
Mastering Mythic doesn't have to be complicated. 😵💫 Check out our operator-focused video series w/ @its-a-feature.bsky.social, which cuts through the noise & delivers exactly what you need to customize & leverage Mythic effectively. 👀: ghst.ly/mythic-op
checky d luffy reposted
Windows OpenSSH agent will store SSH keys under "HKCU:Software\OpenSSH\Agent\Keys". It's on my TODO list to write a tool that will extract these and decrypt them if needed
Haven't seen much TTP sharing on bsky. So in order to help start to be the solution, for the next few days I'm going to share some of my favorite places to find secrets such as SSH Keys, Credential Objects, Access Tokens, and other stuff that usually gets forgotten about.
See if your target is using some kind of remote connection management software, tools such as PuTTY and MobaXTerm can store credentials for hosts, and can easily be decrypted github.com/xillwillx/Mo... PuTTY stores creds in HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions\
Was not expecting to jump on a meeting and see @malwarejake.bsky.social today
checky d luffy reposted
checky d luffy reposted
My team has an intern position available! US based (hard req), preferably in the VA area (not a hard requirement, just a nice to have if you want to attend some intern events/team events) If you know someone trying to get their start in red teaming, who are smart/driven have them apply!
Big things happening with Mythic right now.
Many in the Mythic Community have asked for a way to standardize BOF/.NET execution within Mythic Agents. Today I'm releasing Forge, a new Mythic container to do just that: posts.specterops.io/forging-a-be... We're starting off with default support for Apollo and Athena. Check it out! :)
checky d luffy reposted
TIL about the ntfs Master File Table learn.microsoft.com/en-us/window... If you have a high integrity beacon on a box it's a way quicker way to search for files on windows
@myraccoonhands.com it only took me until I was in my 30s but I finally conquered my childhood white whale 😂