Given up on the Twitter trashfire. Feel free to hit me on Discord (thecolonial) discord.gg/mabFmst

Joined June 2008
1,670 Photos and videos
Pinned Tweet
1st tweet in over two years and probably my last ever. I won't use this shitshow of a platform again. I might toot a bit at oj@infosec.exchange (Mastodon) instead, but if you're keen to talk real-time jump on Discord. Peace and love to all the wonderful humans out there. #micdrop
3
3
37
Going live RIGHT NOW! We're doing some CTF challenges. Come join in the fun. twitch.tv/ojreeves Bring ya friends, bring ya mum, bring ya tea, and bring ya chocolate!

2
16
Went bouldering with @TheColonial . As Trent Reznor once said "I focus on the pain, the only thing that's real". Gonna be sore tomorrow.
1
4
ටل 🧗 retweeted
(1/2) Out running this morning on a new route and a lady runs past me. Despite only passing, when I get home @Strava automatically tags her in my run. If I click on her face it shows her full name, picture and a map of her running route (which effectively shows where she lives)
205
1,715
2,987
Aim to be the best human you can be today. Tomorrow, do better.
1
8
32
ටل 🧗 retweeted
How I Hacked Facebook Again! Unauthenticated RCE on MobileIron MDM (slides inside) blog.orange.tw/2020/09/how-i… #HITCON

53
1,204
2,816
Had a bit of fun with the lads doing CSAW CTF challenges this weekend (between parenting responsibilities). I am always amazed at how I take so long to pop something. Looking back it always seems so obvious/trivial!
6
Up past 2am for two nights in a row. Imma burning. Big time.
1
9
ටل 🧗 retweeted
11 Sep 2020
Finally got around to weaponizing some of the awesome research I've only just read about regarding group policy. Full attack path write-up coming soon. 😁
2
41
184
ටل 🧗 retweeted
9 Sep 2020
Introducing #BlindSide: 1 buffer overflow to mount Speculative Blind ROP attacks that repeatedly probe the address space, craft arbitrary memory read gadgets, and enable reliable kernel exploitation in minutes - despite #FGKASLR #XoM #Spectre mitigations: vusec.net/projects/blindside
9
152
384
ටل 🧗 retweeted
10 Sep 2020
Come work with me.
#RedTeamJobs Happy Saturday!! @Lares_ Is STILL hiring. Do you need a challenge? Looking to work on a team that will have your back? We have some of the most challenging tests and dedicated clients. 2 of 4 spots filled. Job Descrp here . Plz RT linkedin.com/pulse/looking-r…
1
14
20
ටل 🧗 retweeted
8 Sep 2020
💥💥boomm. Atlassian jira template RCE
13
162
537
ටل 🧗 retweeted
SeManageVolumePrivilege to "Full Admin" escalation: 1. Enable the privilege in the token 2. Create handle to \\.\C: with SYNCHRONIZE | FILE_TRAVERSE 3. Send the FSCTL_SD_GLOBAL_CHANGE to replace S-1-5-32-544 with S-1-5-32-545 4. Overwrite utilman.exe etc. 5. 😎

ALT Pinky Up GIF

3
143
356
ටل 🧗 retweeted
A hack quest format CTF running until end of the week - these are pretty rare story-driven CTFs, jump on :)
7 Sep 2020
Twardowski has been missing for 3 day now 👀 He left some notes but nobody can read them 🔒 Check your hacking skills at twardowski.securing.pl!
10
42
ටل 🧗 retweeted
Great databases, showing the most powerful use of Hex-Rays: virtual calls, mapped variables, and so on, and so on. A lot to learn from them!
New blog entry: An Exhaustively-Analyzed IDB for ComRAT V4. This is one of the most thorough analyses I've ever done; certainly the largest. msreverseengineering.com/blo…
21
75
ටل 🧗 retweeted
4 Sep 2020
Announcing vimforvscode.com s Learn how to supercharge your favorite editor @code through 100 exercises that teach you the basics of Vim. You get: - hands-on practice - tips to remember commands - short quiz questions Best $10 you'll spend this year. RTs appreciated!
44
227
919
I just read an article that reminded me of @CathyFreeman's amazing history and the moment in the Sydney Olympics when she won gold. I still remember that day like it was yesterday. It was incredible. Cathy is a national treasure!
5
RT @aionescu: It’s taken a lot of soul searching and back and forth, but I’ve decided to step down from the public InfoSec circle as a whol…
33