Ash @_bin_Ash

Computer enjoyer // бегство от действительности)) (@Mandiant+@GoogleCloud) 0xAsh.io Joined November 2020

Tweets

833
Followers

937
Following

235
Likes

4K

Ash @_bin_Ash

5 months ago

@rad9800 lemonmaxxers assemble

0 0 1 29 0

View Details

@nikseeth I obviously do not cheer for the breach of any company, but I imagine that people in the SOC 2 world who have been shouting from the hilltops for years about the disingenuousness of automated SOC 2 platforms, feel very vindicated rn

0 0 1 107 0

View Details

Ash @_bin_Ash

7 months ago

@IceSolst @Atredis @DistrictCon "If that is what you want." "This is hard work." "I will do what I must." "This hammer is heavy." "Can I have some shoes?" I don't think they could release a game like this nowadays lmao

0 0 1 18 0

View Details

Ash @_bin_Ash

7 months ago

PSA technique is not completely dead The implied attack path of the post is coerce auth from system -> relay to LDAP -> computer account writes its own attribute Post patch, there are still use cases for shadow creds. (GenericAll, GenericWrite, or AddKeyCredentialLink, etc).

Aurélien Chalot @Defte_

7 months ago

Anyone know if Microsoft silently patch the Shadow Creds attack recently ? Looks like a computer object cannot write its own attribute anymore :D

11 29 130 44K 66

2 10 33 4K 13

View Details

Ash @_bin_Ash

7 months ago

@ConsciousHacker lots of people who used to post cool stuff on Twitter, got consulting jobs, and now are 🤐🤐🤐

0 0 2 193 0

View Details

Graham Helton (too much for zblock) @GrahamHelton3

7 months ago

Excited to disclose my research allowing RCE in Kubernetes It allows running arbitrary commands in EVERY pod in a cluster using a commonly granted "read only" RBAC permission. This is not logged and and allows for trivial Pod breakout. Unfortunately, this will NOT be patched.

46 368 3K 415K 2K

View Details

Ash @_bin_Ash

7 months ago

@WYTCHRR @hourlybladee What is it like living that close to holy ground?

0 0 1 14 0

View Details

Ash @_bin_Ash

7 months ago

@tcstacks_ If you’re really good at infosec you can be wrong and still get paid

0 0 0 60 0

View Details

Ash @_bin_Ash

7 months ago

I thought infosec twitter was toxic until I discovered meteorology twitter

1 0 0 161 0

View Details

Ash @_bin_Ash

7 months ago

@techspence @jeffmcjunkin MFA on SMB when? @Microsoft

0 0 1 72 0

View Details

Ash @_bin_Ash

7 months ago

@GrahamHelton3 If I had followed this I would have become a lifelong SAP admin

0 0 1 107 0

View Details

Ash @_bin_Ash

7 months ago

@OutflankNL @StanHacked @mariuszbit Whoa!! awesome congrats y’all

0 0 2 239 0

View Details

Ash @_bin_Ash

7 months ago

@jamieantisocial People who say this have obviously never heard of spongemaxxing Always try to be around smart people. Ask them for advice. Find people building or doing cool things and ask them about it I’m lucky to feel dumb on a daily basis at work when I talk to colleagues

0 0 3 118 0

View Details

Joeyꪗ @Jxxyy

7 months ago

Why does my Washer machine need AI

0 31 391 10K 4

View Details

Ash @_bin_Ash

7 months ago

@tcstacks_ Ok but what about pentesting 2?

0 0 0 104 0

View Details

Ash @_bin_Ash

7 months ago

@Blurbdust @ch1gg1ns Thank u Mr Losby ❤️❤️❤️

0 0 0 50 0

View Details

Ash @_bin_Ash

7 months ago

@HackingLZ @HackingDave brb telling Google marketing to dislike this post

1 0 1 44 0

View Details

Ash @_bin_Ash

7 months ago

@vysecurity Also somewhat related but there are SO many super super talented red teamers that are _not_ on Twitter/x at all. Take what u read on here with a grain of salt

0 0 3 85 0

View Details

Ash @_bin_Ash

7 months ago

@vysecurity Some of the most talented people I've had the pleasure of working with are great because of this. ofc technically they are gifted, but I learned to most from people who thing strategically about how to break in, what to do next, what levers to pull to get someone to do xyz, etc