Researcher, Red Teamer, Developer. Opinions are my own
Joined December 2018
- Tweets 96
- Following 174
- Followers 215
- Likes 250
Photos and videos
Anthony Rhodes retweeted
10 Nov 2019
Version v3.3.0 of #OWASP Amass has been released!
The first version of the new data model has been implemented. Future releases will support saving findings into Gremlin (@apachetinkerpop) and @neo4j #GraphDatabase systems
#osint #recon #opensource #assetdiscovery #bugbounty
3
56
132
Anthony Rhodes retweeted
20 Oct 2019
Version v3.2.0 of #OWASP Amass has been released!
The tool has been refactored quite a bit and the default settings run the enumerations much faster.
Use the '-max-dns-queries' flag if you wish to slow things down
#osint #recon #infosec #opensource #assetdiscovery #bugbounty
3
72
163
Anthony Rhodes retweeted
12 Oct 2019
Please share this as widely as possible. Why should we have to police Amazon? This problem is ongoing since 2017. These counterfeits are shipped and sold by AMAZON, NOT A THIRD PARTY. This is not Marketplace.
Amazon counterfeit. Images were posted to Amazon.com by a concerned customer July 12, 2019, amazon.com/gp/customer-revie…. Counterfeit is shipped and sold by Amazon.com -- NOT a third party. Why do we have to police Amazon? Please RT. @nostarch @amazon
46
1,294
1,697
🎉 Go 1.13 RC1 is released!
🏃♀️ Run it in dev. Run it in prod. File bugs.
🗒️ Release notes: tip.golang.org/doc/go1.13
⬇️ Download: golang.org/dl/#go1.13rc1
#golang
10
243
541
Anthony Rhodes retweeted
18 Aug 2019
One time some tech bros called security on me at a coworking space for having too many network adapters.
28
39
398
Anthony Rhodes retweeted
12 Aug 2019
Pre-auth RCE on Fortinet and Pulse Secure (prior: Juniper) SSL VPN's by @orange_8361 and @mehqq_ - over 500k such VPN's on the internet. Heap overflow, arbitrary file read, plaintext passwords, magic backdoor, command injection...
Defcon slides:
media.defcon.org/DEF CON%2…
99
219
Anthony Rhodes retweeted
10 Aug 2019
Nmap Defcon release! Enjoy version 7.80: seclists.org/nmap-announce/2…
7
245
524
As promised during our talk, we have released the user exploitation features for SharpGPOAbuse! @den_n1s @VillageRedTeam #DEFCON27
github.com/mwrlabs/SharpGPOA…
137
292
Thanks all for attending my #DEFCON talk! Humbling to see such a full room even on Sunday. Slides and demo videos are online at the media server.
Slides: media.defcon.org/DEF CON%2…
Demo vids: media.defcon.org/DEF CON%2…
10
123
334
Anthony Rhodes retweeted
11 Aug 2019
I’m suprised that CVE-2018-13382 (a trivial « backdoor » in Fortigate SSL VPN) didn’t get much attention, even after @orange_8361´s talks in Vegas... blog.orange.tw/2019/08/attac…
5
66
203
Ready to start automating your own custom workflows?
Sign up for the beta of GitHub Actions with built-in CI/CD today 👇
github.com/features/actions
39
566
1,481
Anthony Rhodes retweeted
8 Aug 2019
Garfield may know lasagna, but does he know the required height of a fence or the appropriate type of fire extinguisher to use for an electrical fire?
6
6
28
Anthony Rhodes retweeted
1 Aug 2019
8
7
Anthony Rhodes retweeted
25 Jul 2019
Question: How do I abuse a relationship that #BloodHound is showing me?
Answer: Right click the edge and click "Help" for lots of useful info including abuse instructions, opsec considerations, and references.
12
189
542
Anthony Rhodes retweeted
28 Jul 2019
Two #OWASP #Amass contributors (@fork_while_fork and I) will be demonstrating use of the tool at #ReconVillage #DEFCON27 @PHVegas from 14:40 - 15:15. We look forward to speaking at such an excellent event!
reconvillage.org/talks.html
4
13
Anthony Rhodes retweeted
21 Jul 2019
OWASP Amass v3.0.22 has been released!
Amass now supports "hashcat-style" wordlist masks within the #DNS name alteration and brute forcing engines. Use this to perform mask attacks against your target!
#osint #recon #redteam #bugbounty #AssetDiscovery
github.com/OWASP/Amass
3
51
90
Anthony Rhodes retweeted
21 Jul 2019
The implementation of the "hashcat-style" wordlist masks for the Amass name alteration and brute forcing engines was provided by another project contributor.
Thank you for this feature @fork_while_fork!
1
6
Anthony Rhodes retweeted
17 Jul 2019
Another One! #PDXOWASPTrainingDay OWASP Amass: Discovering Your Exposure on the Internet with @jeff_foley project lead of @owaspamass!
3
9