Security Engineer: loving cloud, red teaming, automation and learning
Joined February 2013
- Tweets 199
- Following 204
- Followers 161
- Likes 111
36 Photos and videos
10 Feb 2025
please watchout; this repo https://github].[com/TechDevNest[/]BTSwap is dropping #BeaverTail and #InvisibleFerret some IoCs:
216.173.115[.]200:1244
67.203.7[.]205:1244
45.59.163[.]55:1244
95.179.135[.]133:1244
node ~/.vscode/test.js
python3 "~/.npl"
@github @malwrhunterteam
4
3
11
2,254
Edoardo Rosa retweeted
18 Sep 2024
Ongoing spam campaign involving github repos.
Domain github-scanner[.]com puts malicious content in users clipboard upon button click and requiring for Windows payload execution
cc @malwrhunterteam
1
17
57
12,294
Edoardo Rosa retweeted
19 Sep 2023
#Ursnif SMB 62.173.145.]113 [.]164 #Italy
Change from exe To Vbs > Url > exe payload
Samples
bazaar.abuse.ch/browse/tag/6…
Url
http://serverlogins].com/pit.exe
Run
app.any.run/tasks/0f33d667-d…
cc @felixw3000 @58_158_177_102 @fumik0_ @sugimu_sec @bry_campbell
18 Sep 2023
#Ursnif SMB 62.173.145.]113 #Italy
Samples
bazaar.abuse.ch/browse/tag/6…
cc
@58_158_177_102 @felixw3000 @fumik0_
14
34
8,590
Edoardo Rosa retweeted
15 Aug 2023
Ok fellas... I am droppping a thread about all the cool #Hackers 🧑💻🥷stuff I have found around #Aliexpress...
It will keep growing with the time! #HackerArsenal
6
122
620
171,191
Edoardo Rosa retweeted
27 May 2023
La squadra rinuncia alla finale per dare il suo sostegno
onrugby.it/2023/05/27/la-fin…
1
6
440
Edoardo Rosa retweeted
26 Nov 2022
A #pentesting tool for your #hacking arsenal: Use nuvola to dump perform automatic & manual #security analysis on #AWS environments, configurations, and services via predefined, extensible and custom rules created w/ a simple #Yaml syntax. Try it today! bfx.social/3TUVYIm
2
8
Edoardo Rosa retweeted
5 Oct 2022
We are proud to release Datadog's first security study: "The State of AWS Security - A Look Into Real-World AWS Environments"
Read the report to learn about key mechanisms to secure AWS environments and how organizations worldwide are implementing them. dtdg.co/state-of-aws-cloud-s…
25
64
Edoardo Rosa retweeted
4
3
26 Sep 2022
On nuvola's repository README (github.com/primait/nuvola) you can find all links for the #RomHackCamp #slides and #demos that you saw during the "You Shall Not PassRole!" talk
1
5
23
Edoardo Rosa retweeted
24 Sep 2022
Today we're releasing nuvola 🌩️(github.com/primait/nuvola) during #RomHack camp. nuvola is a new born open-source tool to dump and perform automatic and manual security analysis on AWS environments, especially useful to find privilege escalation paths! #aws #redteam #security
7
16
23 Sep 2022
#RomHack Camp has finally started!
Thrilled to be here and have the fantastic opportunity to talk at the best security conference in Italy 🔥
2
15
Here's a demo of the MFA bypass, which I particularly love because it could all be done in the GUI, no need to do any lower level operations (original at dirkjanm.io/assets/raw/mfaov…)
3
49
148
Edoardo Rosa retweeted
25 Jul 2022
It's cloudy today... and that’s a good thing.
Our Global Cloud team has officially released our internal cloud security documentation to the world.
Check it out at secwiki.cloud
And if you want to help make cloud security a bit clearer, please contribute 🌤🌤
2
26
43
25 Jul 2022
Finally has arrived!
AC remote cloned ✅
NFC cards decrypted ✅
Now what?
ALT A Flippee Zero
1
6