Post

How to get URL link on X (Twitter) App

On the Twitter thread, click on or icon on the bottom
Click again on or Share Via icon
Click on Copy Link to Tweet
Paste it above and click "Unroll Thread"!
More info at Twitter Help

mRr3b00t

@UK_Daniel_Card

Mar 5, 2023 • 13 tweets • 4 min read • Read on X

Scrolly

lazy cyber weapons!

is this the AI powered cyber war?

oh no this would not pass the OSCP! bad AI! #Tryharder

LAME!!!

ok so it will show me something that is not vulneable... LOL

ok hahahha we are getting there!

ok cool.. :) fun times

see this is fun!

find me all ADUSERS

@shotgunner101

@shotgunner101 @HackingLZ @Bandrel @Random_Robbie we should play a game :D

fun fun fun
pwndefend.com/2023/03/05/act…

TOOLS!

it won't write this in one go but it will in two parts that you can combine :P

• • •

Missing some Tweet in this thread? You can try to force a refresh

This Thread may be Removed Anytime!

Twitter may remove this content at anytime! Save it as PDF for later use!

More from @UK_Daniel_Card

mRr3b00t

@UK_Daniel_Card

Oct 25, 2023

twitter have rolled out audio calls on twitter using STUN.

Be warned if you call someone the recipient (and anyone in the traffic path) can see your egress IP.

Apple private relay does not cover this.

Microsoft teams uses STUN

basically every single P2P audio probably uses this:

Whats app
Facebook Messenger
Signal
Telegram
can you do audio calls in Snapchat?

This is the common protocol....

this IP leakage is in everything (signal has a feature to mask it) and for all the others you need to either accept how it works or use a vpn etc.

You know every time you visit a webpage your IP leaks right?

Or just use LTE/xG and CGNAT....

Since I'm a cyber werido and I have an iphone tap setup...

I'll grab some of my test identities and will now do testing....

but we can probably just use google!

Read 19 tweets

mRr3b00t

@UK_Daniel_Card

Jul 31, 2023

had a request from someone.... time to deploy...

HOME EDITION! (WTF!)

ok what we need to do is odd.. we need to fuck with the OOBE experience...

The customer is stuck in a loop during the setup process

PC names? what are these CATS? :P

Read 13 tweets

mRr3b00t

@UK_Daniel_Card

Jun 10, 2023

ok so true OFFLINE backups are hard. but you can look at layered approaches or there's immutable backups etc.

I'm showing this because this works for more than backups.

and YES it's complex from an identity plane point of view (that's the whole point!)

twitter.com/i/web/status/1…

now it gets complicated in the details. If you do this with servers/storage and locations you own Plane 4 can litterally be physically isolated at it's management/access plane. Think of a hypervisor and where the networks are physically split (outside of the requirement to have… twitter.com/i/web/status/1…

twitter.com/i/web/status/1…

You could also do this and skip the remote repo and just wrap identity plane 2 in the same way 4 is working.

The point is: if you compromise plane 1 you don’t compromise plane 2. You can however affect the data on plane 2 by messing up the integrity of plane 1! (Confused yet) 😆… twitter.com/i/web/status/1…

Read 8 tweets

mRr3b00t

@UK_Daniel_Card

Jun 10, 2023

Major 🇬🇧 Bad Cybers recently:

🇬🇧 Capita Breach
🇬🇧 Manchester Uni "Cyber Incident" (probably ransomware actors!)
🇬🇧 MoveIT Breaches (Boots, BA, BBC) and more!