Saw a client that had actually tightened enrolment of vulnerable ADCS cert templates this week.

Found service account creds in SCCM distribution point shares, which then opened up ADCS ESC1 to auth my way to DA.

In 2015 I did a weekly photo challenge - a pic of Mathias (middle) taking a photo and also the pic Mathias took.

10 years later he’s back with his wife (they met during the 2015 project) and their daughter, and I’m sharing his pics again.

2015 project - www.flickr.com/photos/rustl...

In 2015 I did a weekly photo challenge - a pic of Mathias (middle) taking a photo and also the pic Mathias took.

10 years later he’s back with his wife (they met during the 2015 project) and their daughter, and I’m sharing his pics again.

2015 project - www.flickr.com/photos/rustl...

Occasionally I work up the courage to talk at conferences or local meetups. Slides and recordings (where available) live in this repo, should you ever want to listen to/watch my ramblings.

github.com/rustla/talks

Look I’m more than 15 yrs late to the party on this, but I just finished playing Portal for the first time and just wanted to tell someone I loved it.

Obligatory 🎂

Here's the commit for that convo over on X.
github.com/hattonsec/ha...

Ruh roh

github.com/peass-ng/PEA...

"curl -s "http[s]://log.linpeas.sh/?uuid=$(cat /proc/sys/kernel/random/uuid)&id=$(cat /var/lib/dbus/machine-id)&root=$IAMROOT&hostname=$(hostname)&user=$(whoami)&uname=$(uname -a | base64 -w 0)&cwd=$(pwd | base64 -w 0)" > /dev/null 2>/dev/null"

Feeling fancy with a custom domain setup 💅
bsky.social/about/blog/4...