1.
Nasreddine Bencherchali
@nas_bench
@HackingLZ The funny thing is that most of these had unauth RCEs at least once in the last year or so
23 Feb 23
copy & paste +upvote -downvote @HackingLZ The funny thing is that most of these had unauth RCEs at least once in the last year or so 😭
2.
Nasreddine Bencherchali
@nas_bench
Our technical deep-dive for the recent #Fortinet FortiNAC CVE-2022-39952
POC Exploit for RCE
Reversing the Patc… twitter.com/i/web/status/1…
POC Exploit for RCE
Reversing the Patc… twitter.com/i/web/status/1…
Retweet of status by @Horizon3Attack
21 Feb 23
copy & paste +upvote -downvote Our technical deep-dive for the recent #Fortinet FortiNAC CVE-2022-39952
🔺 POC Exploit for RCE
🔺 Reversing the Patc… https://t.co/froX1fBnGQ
3.
4.
5.
6.
7.
Nasreddine Bencherchali
@nas_bench
We are looking for any info/data about the Sega 8-bit version of "The Godfather" by Creative Materials / US Gold.… twitter.com/i/web/status/1…
09 Jan 23
copy & paste +upvote -downvote 📢We are looking for any info/data about the Sega 8-bit version of "The Godfather" by Creative Materials / US Gold.… https://t.co/ScS05e8GVB
Nasreddine Bencherchali
@nas_bench
With a heavy I am sad to report that a great talent/researcher/friend has passed away shortly after Thanksgiving… twitter.com/i/web/status/1…
Retweet of status by @HerbieZimmerman
30 Dec 22
copy & paste +upvote -downvote With a heavy ♥️ I am sad to report that a great talent/researcher/friend has passed away shortly after Thanksgiving… https://t.co/qoAM9qoBss
Nasreddine Bencherchali
@nas_bench
days of techniques
- T1480 is restricting payload exec based on matching expected traits of the victim,… twitter.com/i/web/status/1…
- T1480 is restricting payload exec based on matching expected traits of the victim,… twitter.com/i/web/status/1…
Retweet of status by @jamieantisocial
08 Dec 22
copy & paste +upvote -downvote 2️⃣5️⃣ days of techniques🎄
1️⃣- T1480 is restricting payload exec based on matching expected traits of the victim,… https://t.co/wWmSQTKki6
Nasreddine Bencherchali
@nas_bench
Infosec ability to evaluate risk is really something to behold Now we know why no vulnerability management program ever worked.
10 Nov 22
copy & paste +upvote -downvote Infosec ability to evaluate risk is really something to behold 😂 Now we know why no vulnerability management program ever worked.
Nasreddine Bencherchali
@nas_bench
1/ #ThreatHunting: Normal users (not developers) who have Python in their Music (!) directory? This screams TA
I… twitter.com/i/web/status/1…
I… twitter.com/i/web/status/1…
25 Sep 22
copy & paste +upvote -downvote 1/ #ThreatHunting: Normal users (not developers) who have Python in their Music (!) directory? This screams TA 😅
I… https://t.co/uXwMLJph8A
8.
9.
10.
11.
Nasreddine Bencherchali
@nas_bench
@cyb3rops Finally, a SIEM that I can invest in Just imagine your entire SOC walking in Minecraft looking for "bad stuff"
11 Jun 22
copy & paste +upvote -downvote @cyb3rops Finally, a SIEM that I can invest in 😂Just imagine your entire SOC walking in Minecraft looking for "bad stuff"
Nasreddine Bencherchali
@nas_bench
I've reached 1000 followers on my blog Thanks to each and every one of you for reading. I really appreciate it.… twitter.com/i/web/status/1…
10 Jun 22
copy & paste +upvote -downvote I've reached 1000 followers on my blog 🥳🎉 Thanks to each and every one of you for reading. I really appreciate it.… https://t.co/R1X0iMeBna
Nasreddine Bencherchali
@nas_bench
Adding this detection idea by @breakersall as a public @sigma_hq rule so that future generations who may have mis… twitter.com/i/web/status/1…
07 Jun 22
copy & paste +upvote -downvote Adding this detection idea by @breakersall as a public @sigma_hq rule so that future generations 😄 who may have mis… https://t.co/uh7wg35XEU
Nasreddine Bencherchali
@nas_bench
Here's an MHT version (saved as .doc) to break your Yara rules
You can easily see the URL Moniker within the XML… twitter.com/i/web/status/1…
You can easily see the URL Moniker within the XML… twitter.com/i/web/status/1…
Retweet of status by @buffaloverflow
31 May 22
copy & paste +upvote -downvote Here's an MHT version (saved as .doc) to break your Yara rules 😈
You can easily see the URL Moniker within the XML… https://t.co/CrKCA0Lyqw
...but wait! There's more!
1.
fakhright
@fakhright
astaghfirullah peng.krim guaaaaaaaa..............a *salto sambil solat*
14 Jan 13
copy & paste +upvote -downvote astaghfirullah peng.krim guaaaaaaaa..............a *salto sambil solat* 🙈🙈🙊