Post

@shotgunner101

This Thread may be Removed Anytime!

Twitter may remove this content at anytime! Save it as PDF for later use!

More from @UK_Daniel_Card

mRr3b00t

@UK_Daniel_Card

Nov 4

Morning world! Slept ‘ok’ (not great not terrible)

So yesterday I was doing some mitm6 over public WiFi (in the lab) and whilst I was speeding dns responses to Microsoft Google Facebook Twitter etc.

My web clients simply did not follow the responses and went to the actual sites!

Anyone know why? (It’s probably something like dnssec etc.)

Now in this instance it’s not even spoofing (you would see an event)

Let’s grab a windows laptop!

Now to show you the server is working here We have spoofs being sent!

Read 34 tweets

mRr3b00t

@UK_Daniel_Card

Oct 25, 2023

twitter have rolled out audio calls on twitter using STUN.

Be warned if you call someone the recipient (and anyone in the traffic path) can see your egress IP.

Apple private relay does not cover this.

Microsoft teams uses STUN

basically every single P2P audio probably uses this:

Whats app
Facebook Messenger
Signal
Telegram
can you do audio calls in Snapchat?

This is the common protocol....

this IP leakage is in everything (signal has a feature to mask it) and for all the others you need to either accept how it works or use a vpn etc.

You know every time you visit a webpage your IP leaks right?

Or just use LTE/xG and CGNAT....

Since I'm a cyber werido and I have an iphone tap setup...

I'll grab some of my test identities and will now do testing....

but we can probably just use google!

Read 19 tweets

mRr3b00t

@UK_Daniel_Card

Jul 31, 2023

had a request from someone.... time to deploy...

HOME EDITION! (WTF!)

ok what we need to do is odd.. we need to fuck with the OOBE experience...

The customer is stuck in a loop during the setup process

PC names? what are these CATS? :P

Read 13 tweets

mRr3b00t

@UK_Daniel_Card

Jun 10, 2023

ok so true OFFLINE backups are hard. but you can look at layered approaches or there's immutable backups etc.

I'm showing this because this works for more than backups.

and YES it's complex from an identity plane point of view (that's the whole point!)

twitter.com/i/web/status/1…

now it gets complicated in the details. If you do this with servers/storage and locations you own Plane 4 can litterally be physically isolated at it's management/access plane. Think of a hypervisor and where the networks are physically split (outside of the requirement to have… twitter.com/i/web/status/1…

twitter.com/i/web/status/1…

You could also do this and skip the remote repo and just wrap identity plane 2 in the same way 4 is working.

The point is: if you compromise plane 1 you don’t compromise plane 2. You can however affect the data on plane 2 by messing up the integrity of plane 1! (Confused yet) 😆… twitter.com/i/web/status/1…

Read 8 tweets

mRr3b00t

@UK_Daniel_Card

Jun 10, 2023

Major 🇬🇧 Bad Cybers recently:

🇬🇧 Capita Breach
🇬🇧 Manchester Uni "Cyber Incident" (probably ransomware actors!)
🇬🇧 MoveIT Breaches (Boots, BA, BBC) and more!