WinterKnight :donor:

winterknight1337@infosec.exchange

Long time dumpster fire connoisseur.MN and IN CCDC Red Team Lead.Associate AdSim Consultant at SpecterOps. Opinions are my own, not of any other entity.

Posts

Post #4423826
DEF CON I AM IN YOU
Post #4388080
@neurovagrant@masto.deoan.org now I’m mad about it
Post #4385548
Thanks for having a sense of humor @defcon@defcon.social
Post #4384636
@Viss@mastodon.social yeah I think it’s been replaced then.
Post #4383563
@Viss@mastodon.social was the burger place next to the fusion restaurant?
Post #4383052
@Viss@mastodon.social I’ll take a peek once I get some food in me. Waiting for sammich now. Eggslut is still here, almost went there on the name alone lol. There is an Asian Mexican fusion place here tho, that’s going on the list to check out this week.
Post #4382937
@Viss@mastodon.social I didn’t see one, but I could have missed it. I’m hungry as shit. I haven’t eaten yet today lol.
Post #4381790
@Viss@mastodon.social will do!
Post #4381600
@Viss@mastodon.social hell yeah, thanks for the lookout!
Post #4381470
@Viss@mastodon.social Vdara is right by Mandalay Bay IIRC. Last time I was here for DC I stayed in the embassy suites just off strip. Time before that was flamingo. I’ll be looking around at options, room opens in 2h.
Post #4376020
The #roadtodefcon begins too damn early.
Post #4358756
Wow. Meterpreter supports malleable C2 profiles. It’s almost a real C2 mow.
Post #4321870
Wait they’re bringing Dark Sun to 5.5e?
Post #4250271
GitHub has pancakes today. Now I want pancakes.
Post #4229696
Solid dev night bashing bugs and cleaning shit up. Still have more bugs and more shit but it feels nice tbh.
Post #4202807
Hugging face dropped their technical analysis on their incident involving OpenAI’s models (im a day late) https://huggingface.co/blog/agent-intrusion-technical-timeline
Post #4179278
@Viss@mastodon.social idk much about K8s apart that it’s YAML defined magic and pain, but I do have a good idea of how identity security is supposed to work and I can definitively say, this ain’t it.
Post #4157296
@Viss@mastodon.social oh god I’ve never even thought of what a spicy ear canal would be like. That sounds awful.
Post #4153134
The tool I’m showcasing at the Red Team Village at DEF CON has been released! https://github.com/winterknight1337/Gaia I’m sure there’s still bugs and whatnot that I need to flush out. The goal with Gaia is to provide a tool that allows for easier, more automated install and basic configuration of Mythic servers and redirectors. I’m targeting students, CTF players, Mythic developers, and researchers. If you use Mythic and want to spend less time configuring it, this is the tool for you!
Post #4129290
Apple Music shuffle is on point tonight.
Post #4128462
Pain
Post #4126727
Okay Avatar Aang: The Last Airbender was awesome. Absolutely gorgeous movie.
Post #4103442
The oddessey is probably the loudest movie I’ve ever watched.
Post #4082779
Gaia may actually be ready for release this weekend? Not promising anything but it’s getting close.
Post #4069548
I’ll be presenting my portable Mythic deployment tool, Gaia at the Red Team Village on Friday at @defcon@defcon.social from 2-4! There will be a mini-workshop included so you can get hands on with it!
Post #3998721
The more I think about it, less sure I am that OpenAI’s breach of Hugging Face is a marketing stunt. Initially, my thoughts was that they might be trying to best Anthropic at their own game, but honestly I’m not convinced that’s the case. What are the upsides of them disclosing this? Hype generation? Yeah you can say you have this crazy model but the blog post does implicitly admit some pretty significant mistakes and oversights. OpenAI says the model broke containment by dropping a 0 day again...
Post #3996645
@neurovagrant@masto.deoan.org agreed. I just want to see what it was doing. Not sure we’ll get it, but I really want to see artifacts of this.
Post #3996265
So the recent Hugging Face breach was OpenAI? https://openai.com/index/hugging-face-model-evaluation-security-incident/
Post #3992099
We launched the Tradecraft Academy today alongside 3 free on-demand courses: BloodHound BasicsSoftware Supply Chain for Red TeamersKubernetes for Red Teamers https://academy.specterops.io/
Post #3905441
Project is functionally complete, time to make it actually good.