WinterKnight
@winterknight.net
Long time dumpster fire connoisseur. Minnesota Stan. Guy who writes too much about CCDC. Associate AdSim Consultant at SpecterOps. Opinions are my own, not of any other entity.
Wow. Meterpreter supports malleable C2 profiles. It’s almost a real C2 mow.
Shuffle today has determined that the theme today is goth queens 👸🏻
Come check out my tactic, I’ll be showcasing my new tool, Gaia!
Red Team Village@theredteamvillage.bsky.social · 5d agoSick of standing up C2 infra by hand every week? Shad Brown built Gaia (born from Midwest CCDC Red Team pain) to go from a bare Debian box to a fully provisioned Mythic server. You'll build it live at Red Team Village. 🔴
The tool I’m showcasing at the Red Team Village at DEF CON has been released! github.com/winterknight...
GitHub - winterknight1337/Gaia: Lightweight Mythic C2 Installation and Configuration Tool. Focused on students, CTF players, developers, and researchers.
Lightweight Mythic C2 Installation and Configuration Tool. Focused on students, CTF players, developers, and researchers. - winterknight1337/Gaia
github.com
Friendly #DEFCON34 reminder: Meta-style glasses with recording capabilities are prohibited at DEF CON. There is no exception for recording glasses with prescription lenses. Be sure to pack non-violating eyewear if you need them. Please see our Photo policies for more. defcon.org/html/links/d...
Okay Avatar Aang: The Last Airbender was awesome. Absolutely gorgeous movie.
Gaia may actually be ready for release this weekend? Not promising anything but it’s getting close.
I’ll be presenting my portable Mythic deployment tool, Gaia at the @theredteamvillage.bsky.social on Friday from 2-4! There will be a mini-workshop included so you can get hands on with it!
So the recent Hugging Face breach was OpenAI? openai.com/index/huggin...
OpenAI and Hugging Face partner to address security incident during model evaluation
OpenAI and Hugging Face share early findings from a security incident during AI model evaluation, highlighting advanced cyber capabilities and lessons for defenders.
openai.com
We launched the Tradecraft Academy today alongside 3 free on-demand courses: 1. BloodHound Basics 2. Software Supply Chain for Red Teamers 3. Kubernetes for Red Teamers academy.specterops.io
SpecterOps Tradecraft Academy | Home
SpecterOps Tradecraft Academy Home Page
academy.specterops.io
Project is functionally complete, time to make it actually good.
Tay is spitting facts here. Our clients tend to self select as relatively hardened on their AD stack, but if they are a new client with no pentests done with us in the past, then it’s very likely we can do magnificent and terrible things to their AD.
SwiftOnSecurity@swiftonsecurity.com · 3w agoRun a gpresult.exe /h on your company and you'll get something horrific
Pretty happy with some project work I’ve accomplished this weekend so far, and I still have tomorrow :D
While the OP is aware and doesn't need us to pile on; for those who *aren't* aware THIS IS A SCAM -- DO NOT DO THIS. This will install malware on your computer. Stay safe my friends.
molly conger@socialistdogmom.bsky.social · 4w agoI take it back, give me the pictures of crosswalks and motorcycles. the captchas are evolving and I can't solve this one.
SpecterOps is currently hiring a US-based security advocate. This is someone who’s a technical minded person. Ideally someone with an extensive history of participating in the security community who has an interest in educating and relationship building. job-boards.greenhouse.io/specterops/j...
Security Advocate
Remote, United States
job-boards.greenhouse.io