Chuck @chucksploit

Red Team | Thoughts are my own. aptc.io C$ Joined March 2009

Tweets

97
Followers

378
Following

809
Likes

9K

Ryan Reynolds @VancityReynolds

5 months ago

I love these little pr*cks. Support @sickkids today.

748 7K 36K 5.4M 1K

Download Video

Pinehurst Resort @PinehurstResort

6 months ago

Being that we're now 220 days from the U.S. Open, it only seems right we would do this giveaway...twice. And so it stays open another day. Happy reposting.

Pinehurst Resort @PinehurstResort

6 months ago

Being that we're now 220 days from the U.S. Open, it only seems right we would do this giveaway...twice. And so it stays open another day. Happy reposting.

130 3K 2K 639K 6

Download Image

35 1K 783 202K 3

Justin Elze @HackingLZ

8 months ago

Red teams really nailed the SMS phishing angle it’s been abused for several years prior to recent large breaches by TAs using it mandiant.com/resources/blog…

0 5 19 3K 1

I'm going to speak in generalizations here... because... well yeah. Casino's consider themselves hospitality services - not security although physical security is a huge component as we know - logical/cyber not at all. Flat networks, lack of patch management, shared passwords,…

49 54 437 153K 64

Clays & Birds @ClaysandBirds

5 years ago

Every year as we move away from the events of 9/11, I find the images of the towers falling don’t impact the way they use to. I now try to focus on individual stories from that day to help remind me of the emotions I felt. This year I want to focus on the dogs of 9/11

2K 116K 294K 0 8K

Download Image

Chuck @chucksploit

9 months ago

Greatest tweet of all time.

Halo @Halo

9 months ago

Greatest tweet of all time.

258 11K 54K 3.7M 2K

Download Video

0 0 0 260 0

Wiz @wiz_io

9 months ago

👀 Wiz Research's deep dive into the recent security incident reveals a twist - the compromised Microsoft key is a skeleton key — opening up not just Outlook and Exchange Online, but a Pandora's box of Azure applications.

2 80 158 135K 58

vx-underground @vxunderground

10 months ago

Dana White, President of the UFC, has been working day and night to arrange an Elon Musk vs. Mark Zuckerberg fight. He believes the fight could make billions of dollars. He doesn't seem to understand that you can watch nerds fight for free on Infosec Twitter.

17 82 789 65K 13

Barstool Sports @barstoolsports

11 months ago

NYC looks straight out of an apocalyptic movie right now

640 2K 18K 4.3M 464

Download Video

V2 @ZeroMemoryEx

11 months ago

Tired by EDRs and AVs continuously flagging your executables? This program terminates protected anti-malware processes by exploiting the GMER driver github.com/ZeroMemoryEx/B…

7 172 531 148K 207

Kleiton Kurti @kleiton0x7e

11 months ago

We took a Cobalt Strike profile, modified it, and bypassed Crowdstrike & Sophos without encrypting the shellcode. Also bypassed all published YARA rules, sleep detections, and string detections around a CS beacon. Blog: whiteknightlabs.com/2023/05/23/unl… #CyberSecurity #redteam #infosec

14 177 459 69K 211

Dennis @DennisF

a year ago

"I'm the cybersecurity director at NSA and you could absolutely craft a phishing message that would get me to click a link. You’ve got to design your architecture to assume the humans are humans and bad things will happen." @RGB_Lights AMEN

8 264 873 143K 55

The Haag™ @M_haggis

a year ago

Introducing the Living Off The Land Drivers (LOLDrivers) project, a crucial resource that consolidates vulnerable and malicious drivers in one place to streamline research and analysis. loldrivers.io LOLDrivers enhances awareness of driver-related security risks and…

28 616 1K 254K 347

CS2 @CounterStrike

a year ago

Today we're excited to announce Counter-Strike 2. Counter-Strike 2 is an overhaul to every system, every piece of content, and every part of the C-S experience. First, let's talk about smoke grenades:

9K 56K 311K 37.7M 5K

Download Video

Oliver Lyak @ly4k_

a year ago

Today we're publishing new techniques for recovering NTLM hashes from encrypted credentials protected by Windows Defender Credential Guard. These techniques also work on victims logged on before the server was compromised. research.ifcr.dk/pass-the-chall…

36 704 2K 212K 529

Joshua Browder @jbrowder1

a year ago

Here it is! The first ever Comcast bill negotiated 100% with A.I and LLMs. Our @donotpay ChatGPT bot talks to Comcast Chat to save one of our engineers $120 a year on their Internet bill. Will be publicly available soon and work on online forms, chat and email.

194 1K 11K 0 2K

Download Video

Chuck @chucksploit

a year ago

Far from perfect, but Copilot is seriously impressive. Building BOFs just got a whole lot easier. #RedTeam #CobaltStrike

0 0 1 0 0

Download Image

Jono Tan @jonotan86

a year ago

RT this and ruin your friends' day

766 9K 41K 0 1K

Download Video

Rachel Tobac @RachelTobac

2 years ago

🔑How does a FIDO security key limit the hacks we're seeing in the news now?🔑 Beyond fun to work with @Yubico & partner with @twitter to answer that question + demo how social engineering is used to steal passwords & siphon out MFA codes to gain admin access with @evantobac.

39 232 765 0 228

Download Video

Greg Darwin @gregdarwin

2 years ago

Cobalt Strike 4.7 is now available. This release sees support for SOCKS5, improvements to how BOFs live in memory, improvements to how Beacon sleeps, plus dark mode and a lot more. See the blog post for more information: cobaltstrike.com/blog/cobalt-st…