Joe Słowik
In other news #blueteam #offsec
Nov 23, 2022 at 5:17pmWeb
Show threadx0rzNov 23, 2022
@jfslowik most redteams are losing sight what their actual goal is supposed to be. It's actually pretty sad. They do more harm than good and think their job is cool cause they get to pwn stuff all day...
Dude, what's the end goal of what you're trying to acheive when you conceive yet another offsec tool and not let defense teams analyze the stuff because "copyright".
Show threadRob PritchardNov 23, 2022
@x0rz @jfslowik agree. 'Hey we pwned you because we threatened legal action against the orgs who provide your defence' is not a good red team result.
Show threadinstacyberNov 23, 2022
@x0rz @jfslowik or refuse to disclose missed elements of successful tests so that blue teams are completely in the dark about how to improve. Not all red teams are like this-some are great-but I’ve seen it enough to have an extremely dim view of that part of the industry and their actual value to securing networks
Show threadsplitcaber Nov 23, 2022
@x0rz @jfslowik I agree that defense teams should be able to analyze the tools, but I’ve seen them just block our IPs, domains, or our in house implementation of an exploit or exfiltration method without patching the vulnerability or blocking the method. 9 times out of 10 I can switch IPs or reobfuscate strings and recompile a tool. So it makes more work for me without making them any more secure.
Show threadSean Gallagher  🐀 Nov 23, 2022

@jfslowik @da_667

Are-we-the-baddies dot gif

Show threadprobablyNov 24, 2022
@jfslowik this energy is powerful
Show threadTanawtsNov 24, 2022
@jfslowik better together
Show threadmRr3b00t    ​🐘Dec 5, 2022
@jfslowik ​