Pentester, Vulnerability Researcher, Hacker of things. My views are entirely my own.
England, United Kingdom
Joined February 2015
- Tweets543
- Following366
- Followers484
- Likes758
Congrats @RadioTimes for getting someone to write a @OfficialBlueyTV article without ever seeing the show before, let alone the episode in question.
😅
That's an impressively inaccurate sentence.
Ten years ago I was waiting sooooo patiently as each of the beautiful 'Color Editions' of Scott Pilgrim were released. Still pride of place on my shelf. So perfect. So wild and yet so relatable.
And now this, @bryanleeomalley?! Explain yourself! How are you so damn genius?
What an amazing day at @bsidesbristol
Thanks so much to all the people who organised it, spoke at it, attended, and generally just made it great.
See you next year!
#BSidesBristol
ticarpi retweeted
Did you ever see a technical tweet you didn't understand? No worries, I'm here for you! 🧑🏫
youtube.com/watch?v=3zShGLEq…
ALT Hacker Tweets Explained
One day we might actually be able to report directly from @Burp_Suite... maybe.
Good effort with this, keeping things tagged and organised sounds really useful.
You can now attach notes to requests via the new 'Organizer' tab, on @Burp_Suite's early-adopter release channel! More details here:
portswigger.net/burp/release…
Calling #pentest and #BugBounty pros: how often do you find #SQLi?
I'm trying to impress on a client how bad it is that I've found SQL Injection on EACH of the 3 apps I've tested for him in the last 6 months...
Watched it a hundred or more times and somehow only just realised that the opening credits of @OfficialBlueyTV is a game of musical statues.
Oh man. #sleepdeprivation #dadlife
Great resources and flow. Thanks @Jhaddix
ticarpi retweeted
The video recording of my Black Hat talk this summer "Backdooring and Hijacking Azure AD Accounts by Abusing External Identities" made it to YouTube: youtube.com/watch?v=uKDS2t9_…
ticarpi retweeted
JWT Attack Playbook: great resource for JWT attacks @ticarpi:
github.com/ticarpi/jwt_tool/…
ticarpi retweeted
In our latest blog post, we publish a MS "won't fix" unauthenticated SSRF to RCE in Microsoft Office Online Server mdsec.co.uk/2022/10/microsof… by @IndiShell1046
Having a lovely time pumpkin-ing with my darling and the scampering ones at Orway #orwayporchfarm
Me: [Daughter], have you had enough lunch? Where's the rest of your sandwich?
[Daughter]: Your mouth, Daddy.
Me: ...oh.
#guilty #nothungryanymore
ticarpi retweeted
Active Directory cheatsheets come back alive. Full refactor and some new cool tricks with WSUS, SCCM, Masky, Diamond & Sapphire tickets, Kerberoast w/o preauth, and so on.
- AD from Windows: hideandsec.sh/books/cheatshe…
- AD with Python : hideandsec.sh/books/cheatshe…
Who needs to learn app/inf fundamentals when the tools are so good?
Oh yeah...
This Post is from an account that no longer exists. Learn more
ticarpi retweeted
This is a superb article for pentesting Cisco networks
medium.com/@in9uz/cisco-nigh…