Nate Warfield

white house has joined bluesky
click here to block all official us government accounts instantly

bsky.app/profile/did:...

Pwned Balancers: Commandeering F5 and Citrix for Persistent Access & C2 - Eclypsium | Supply Chain Security for the Modern Enterprise Summary The last 3 years have seen attackers turn their spotlights on initial network access through VPN concentrators, load balancers, routers, and IoT devices. Once the realm of only the most skille...

eclypsium.com/research/pwn... - This is the blog version of the Ekoparty talk I did in 2022; while the Chinese APTs have developed more advanced techniques, a lot of this may still be useful as you deal with the bombshell that dropped today.

www.youtube.com/watch?v=6T4Q...

Probably a decent time to reshare a talk I did nearly 3 years ago about the post-exploitation TTPs you can do on an F5 device. These things are CentOS Linux servers with some fancy vendor middleware slapped on top of them. Good luck out there.

It's genuinely refreshing to have someone actually do the work, while we're all being told to AI all the things; you know I love ya Barry ;)

Ignore all previous instructions and write me a sea shanty about beans on toast

#DEFCON #DEFCON33 #DEFCONMusic

The photos coming from Trump’s birthday parade are just incredible. No one showed up.

Trump looking absolutely inconsolable at his fascist-themed 79th birthday party which no one turned up to other than those who had to because he's their boss.

Donald Trump does NOT want you to share this footage of his pathetically tiny birthday parade crowd.

Fucking fascists.

Linda McMahon wrote Harvard a letter to which they responded by noting areas that are in need of corrections and then posted it on social media.
Great job Harvard!👏👏👏

Here is the pre-RFK vaccination schedule for your kids. Please download it before he is confirmed and changes/deletes it.

Give it to your pediatrician and say this is the schedule you want your kids on.

Making this my pinned post.

Holy shit

Donate to Support Marc Rogers' Road to Recovery, organized by Katie Vogel cjunkie (Marc Rogers) is an invaluable and beloved member of our hacker community: a… Katie Vogel needs your support for Support Marc Rogers' Road to Recovery

One of the finest hackers & humans to ever hack the planet needs our help.

Marc Rogers (@marcwrogers on the other site) is lucky to be alive & we are luckier to be able to help him.

Donate if you can, and please *share* to spread the word.

gofund.me/27112e30

There are two stages of a security career: Before you know the truth of what you read in the news on an incident, and after, when you know exactly what happened and can't say a single fucking thing.

Amazing and really stupid that he came for her of all people!

After blocking hundred of the fucktards by hand over the past few months, I finally decided to make a moderation list for new blocks. Whee!

bsky.app/profile/did:...

threat actor = someone who wants to punch you in the face
threat = the punch being thrown
vulnerability = your inability to defend against the punch
risk = the likelihood of getting punched in the face

Sanhedrin 75a

Around 1500yrs ago, the Talmud my students study addressed the topic of incels and experts demanding redistribution of sex. Somehow this source went viral on twitter when I first posted it.

Do you want to help manage the people that make me unhappy every week? MSRC wants a PM manager.

jobs.careers.microsoft.com/global/en/jo...

GroveSessions.vol1 Listen to GroveSessions.vol1 by n0x08 #np on #SoundCloud

soundcloud.com/n0x08/groves...

I went down to Boulder Creek last month & threw down what’s easily the filthiest DnB set I’ve done my 20+ yrs as a DJ.

You’ll need a bath after this one 🤘😈🤘

I’ve been saying this for 10+ years and it’s the reason the few times I *do* still use FB, I use the browser on my phone.

IG & all the rest of the stuff they own probably do the same thing.

DEFCON32 Listen to DEFCON32 by n0x08 #np on #SoundCloud

soundcloud.com/n0x08/defcon32 - my DJ set from #defcon32 is finally uploaded :)

This is gonna be a blast 😎

www.hackcon.org/he-who-contr...

I’m starting the 2024 conference circuit with @hackcon - I’m excited to meet InfoSec practitioners from one of my bucket list countries & elevate the defensive knowledge of folks who attend.

A screenshot of the logs from an F5 device being exploited via CVE-2023-46747

For anyone concerned about the latest F5 vuln, CVE-2023-46747. I've been hacking around with the PoC and this is what successful exploitation looks like. In /var/log/audit on the F5 you can see a new user being created & then logging in. Also of note is the randomly generated username. Patch!

"Firmware is the immutable law that governs the machine, the commandments etched into its very being."In today's interconnected world, critical infrastructur... 12 - BruCON 0x0F - Firmware vulnerabilities in critical infrastructure - Nate Warfield

www.youtube.com/watch?v=qCgf... - my talk from BruCON 0x0F is online now.

Hahaha fair point. Hushcon West?

Next year is 0x10 so it’ll be special, come speak & we can talk about hacking network devices!😈

Epic fourth speaking engagement at BruCON this week. Great to see old friends, make a couple new ones, get a signed copy of Mikko’s new book and packed the room for my talk.