>be me
>find exposed phpinfo file with ssh/sftp/database creds, private keys, & tokens during external pentest
>creds work & give access to customer data
>contact customer
>customer devs working w/ 3rd party tool
> 3rd party tool: “oh yeah it’s supposed to be public”
>???
>find exposed phpinfo file with ssh/sftp/database creds, private keys, & tokens during external pentest
>creds work & give access to customer data
>contact customer
>customer devs working w/ 3rd party tool
> 3rd party tool: “oh yeah it’s supposed to be public”
>???
10
8
74
2,507
1 hour until “Hook, Line, & Pretext”workshop! Come learn how to create an effective phishing email in room W320
7
3
185
5,666
Going to DEF CON and need something to bring back to work? Come to @sec_defcon’s workshop & leave with a customized phishing pretext 😈
Only the first 42 in line get in!
Aug 8 • 1:30–3:00 PM • SEC Labs W320
Only the first 42 in line get in!
Aug 8 • 1:30–3:00 PM • SEC Labs W320
1
5
27
1,346
Thank you to @REKCAHComics and @BHinfoSecurity. Huge shoutout to my fellow panelists @AletheDenis, @adamcecc and our amazing moderator, Joe Keatinge
0
0
2
333
I promise I was happy about this (..again)
Another most excellent panel at #SDCC is in the bag.
Thank you to @BHinfoSecurity @REKCAHComics @_nextjenn @adamcecc and Joe Keatinge, our amazing moderator.
Appreciation to @bishopfox for the time and support.
5
2
29
2,282
Jenn retweeted
We are BACK at #SDCC this year with @REKCAHComics and a couple surprise guests (including @_nextjenn 😈) joining our panel this year.
I couldn’t be more thrilled! More details to come!
Appreciation for @bishopfox for the support of my most dorky bucket list items 🦊
I couldn’t be more thrilled! More details to come!
Appreciation for @bishopfox for the support of my most dorky bucket list items 🦊
0
3
9
960
We are BACK at #SDCC this year with @REKCAHComics and a couple surprise guests on our panel this year. I couldn’t be more thrilled! More details to come!
Appreciation for @Dent @bishopfox @Antisy_Training @BHinfoSecurity and @comicsthemag and Joe Keatinge for moderating!
0
2
14
1,486
*writes email*
*rereads it 50 times*
*hovers over send button*
*rereads it another 5 times*
*rewrites email*
*rereads it 50 times*
*hovers over send button*
*rereads it another 5 times*
*rewrites email*
3
0
14
1,533
Why doesn’t anyone ever invite me to do a heist? I’d be great at heists
Aways test your pretexts by social engineering your way onto a reality tv show
#SecurityHumanAwarenessMonth #SHAM
5
2
23
4,091
If you/friends/fam have Facebook app installed, check these settings as FB is silently switching them on
7
15
55
8,197
Aways test your pretexts by social engineering your way onto a reality tv show
#SecurityHumanAwarenessMonth #SHAM
#SecurityHumanAwarenessMonth #SHAM
2
1
20
5,596
