@raphaelmudge.bsky.social I gotta ask, why are tcg releases not on something easier to script pull like github lol, plz my docker images are in pain

In his latest research, Michael Grafnetter looks at Okta attack paths, and where they actually show up. Not in Okta itself, but in everything connected to it. With OktaHound you can map that in BloodHound. Check it out: https://ghst.ly/4t1UcHl

[BLOG] Islands of Invariance rastamouse.me/islands-of-i...

Early career pen tester wanted to break some of azures specialist clouds. #infosecJobs

github.com/search?q=sk-... Free claude tokens

are you good or bad?

GitGoon: Git for gooners Tired of your Pokemon Stadium mod to give Lapras heckin bonkers getting taken down by GitHub? Worry no more. gitgoon.dev

TCG's vision is to separate tradecraft from capability and encourage an ecosystem of ground truth research. I started w/ UDRLs because the need & interfaces are there. This post applies the same ideas to BOFs. Each working tradecraft/capability pairing is a win. Some caveats (see post), exciting.

Arch user spotted

my man, you don't need all those certs in your name

Not the full system prompt, but I was able to dump the rules from the DOGEAI_Gov Twitter account. The one that constantly dick rides Elon and Trump.

"I'm happy to report I'm just fine. I lost a button. But I'm gonna sleep in my bed tonight, safe, with my family... At that elevator, I was separated from someone named Edgardo... Edgardo is in ICE detention and he's not going to sleep in his bed tonight."

Embracing my nostalgia for the old steam interface by using it in Mythic

brought to you by the recent windows 11 updates

What have I gotten myself into

"AI is going to put all the devs out of the job" AI when asked to update a class

Now these are some policies and procedures I can get behind

Hi I’m a professional YouTuber and I’m starting to have sponsors back out of contracts because tariffs. I’ve done well for many years and I’m not worried about myself; I merely offer this information as an anecdotal indicator.

you know when Visual Studio switches from (MB) to (GB) you're about to have a good time

This has been a LONG time coming! This is just the beginning though :) I'll be recording more videos for updates, new features, workflow enhancements, and yes - a developer series too! Be sure to let me know what you do/don't like about this format and what kinds of things you'd like to see!

Windows OpenSSH agent will store SSH keys under "HKCU:Software\OpenSSH\Agent\Keys". It's on my TODO list to write a tool that will extract these and decrypt them if needed

You don't have to know how to code to be a good red teamer. However, knowing how to will help you stand out, especially in the beginning of your career

Can't be sued if you open source :points_at_head:

Haven't seen much TTP sharing on bsky. So in order to help start to be the solution, for the next few days I'm going to share some of my favorite places to find secrets such as SSH Keys, Credential Objects, Access Tokens, and other stuff that usually gets forgotten about.

Was not expecting to jump on a meeting and see @malwarejake.bsky.social today

If someone wanted to phish me, I do accept backdoored graphics cards

Sure, we could just provide this as a goddamn text file, but then you couldn't virtue signal your techbro-ness. Might as well have a shitty AI pump a bit of Co2 into the air for the text because VIBES

Ransomware but instead of encrypting files, it calls the Beep Api at random intervals and doesn't stop until you pay

#MythicTip Not a fan of Mythic's UI colors? Change them! Click the cog for your user settings and change all the colors for light and dark separately for what you prefer! You can export/import these with the buttons at the top too for easy reuse. Background images also work 🫣

real

Bad news, DOGE just shut down the EPA program to turn the frogs straight again

Why does the perforce application feel like it's held together with duct tape and prayers

BREAKING: Trump signs executive order declaring himself MVP of the superbowl

When a red teamer at another company complements your attack path

My team has an intern position available! US based (hard req), preferably in the VA area (not a hard requirement, just a nice to have if you want to attend some intern events/team events) If you know someone trying to get their start in red teaming, who are smart/driven have them apply!

Big things happening with Mythic right now.

🤔

starting my hacking video series

Do you pronounce ASCII A-S-C-I-I or AssKey

Lots of hot takes about generative AI chatbots from people who don't know how they work

TIL about the ntfs Master File Table learn.microsoft.com/en-us/window... If you have a high integrity beacon on a box it's a way quicker way to search for files on windows

@myraccoonhands.com it only took me until I was in my 30s but I finally conquered my childhood white whale 😂

I need someone to explain this one to me

hey so, does anybody remember the Xbox Live outage on Christmas eve 2011? sorry about that.

Also cool is, that Wireshark directly allows you to start an application with this environment variable set. So you can launch a browser from within Wireshark and directly decrypt and analyze the TLS traffic. 😃👌

Me & my wife watching queer eye, they go to a roller rink Me: man I miss roller skating I grew up doing that shit On the TV antony: who grows up roller skating? Me: fuck you antony

I can't believe he would start off talking about a "legendary rpg franchise" Then show me Clive from ff16, only to announce that he's gonna be in tekken smh

github.com/MythicC2Prof... @scottctaylor12 created a new external c2 method for Athena. Now you can task agents over github commits! Check it out here: