Bad Horse 🐎

118 Followers
93 Following
451 Posts

~The Thoroughbred of Sin

I feel like it's okay to put this here. Since no one knows who tf I am, I'm not outting anyone:
Proud dad of a 16 year old trans boy, an 11 year old special needs boy, and 3 year old boy who is actually fury incarnate (but adorable fury!).

Loving husband. Fortunate enough to have married a feelings/intelligence-clone of myself. We are seriously the same person but with different naughty bits.

LGBTQIA2S+ ally
Women's rights advocate
Worker's rights advocate
Equal rights advocate
I'm for anything that puts everyone on the same playing field.

Cyber Security (Vulnerability Management mostly) for a Fortune 500 Corpo

Cyberpunk

Tinkerer of electronics.

Developer of stuff (mostly JavaScript and Python)

Musician

Lifelong learner

and ... part time villainous horse?

Haven't been in cyber security all that long. Been hacking around since the 90s, but only to suit my own needs. Everyone here is way cooler than me and I hope to learn all the things from them.

@boblord said some pretty impactful things today at VulnCon. One of the things I'm taking to heart, and would ask of the rest of the community was "We should be increasingly intolerant of [unforgivable vulnerabilities]". To me, that means we need to call out and stop consuming products of companies who don't invest in their vulnerability management (or security in general). If a company has a product with a vuln that shouldn't exist this day in age, we need to stop empowering them with our dollars and start bringing awareness to how dangerous their products are for the entire world.
@coleens_ Got a friend with those and he swears by them. My adjustable weights are my coffee mugs, they get lighter with ever lift :P
@jerry Pro-tip. If you ever get triple-booked, you can safely ignore all three meetings. Who's going to know that you aren't in one of the other two? ;)
RIP Steve Katz :(
I'm sorry, did you forget the last 200 years of technological progress advancing productivity yet leading us to work even longer hours? If we want to work less, we need unions, not tech.
Project management simplified. You may thank me later.
@ChickenPwny I've gotten lazy... now I let ai do the boring bits of coding for me... I also think in the future I'll move to ai stuff... but more accurately, it'll probably be me telling ai to do ai stuff :D

@armamix That's the year they added Jill Barad to their board completing M$'s transformation into a cash-grabbing powerhouse. She's an amazing business woman, and clearly makes companies profitable, but that's when I started spelling Micro$oft with a dollar sign. Bunch of other stuff happened that year to support the cash-grabbing. Coincidentally the same year I discovered Warez ;)

https://learn.microsoft.com/en-us/shows/history/history-of-microsoft-1996

The History of Microsoft - 1996

For Microsoft, 1996 is all about partnerships. The Interactive Media Division is created consisting of MSN, the MSN online service games and kids' titles and the information businesses formerly residing in the now-dissolved Consumer Division. Microsoft Internet Explorer version 2.0 for Windows 95 is available in 22 languages, bringing Microsoft's Web browser to the largest international audience of any Internet client software and Microsoft and America Online (AOL) form a partnership. Previous Episodes: 1975, 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995 1996 1996 Revenue/Headcount The 1996 fiscal year-end sales total $8,671,000,000. The 1996 fiscal Year employee headcount totals 20,561 people. Official Subsidiaries Launched: Microsoft Kenya , Microsoft Côte d’Ivoire, Microsoft Romania, Microsoft Croatia Sales Offices Established: Microsoft Vietnam (Representative Office), Microsoft Corporation (Representative Office) Egypt January 16, 1996 Microsoft acquires Vermeer Technologies. Vermeer's flagship software application, FrontPage, is a tool for easily creating and managing rich Web documents without programming. FrontPage will become a key component of Microsoft's strategy to provide a full range of tools for both Internet and intranet publishing. February 6, 1996 Microsoft names Mattel USA President and Chief Operating Officer Jill E. Barad on its Board of Directors. Barad is the first woman named to the Microsoft Board of Directors since Portia Isaacson served in 1986 and 1987. February 15, 1996 The Interactive Media Division is created consisting of MSN, the MSN online service games and kids' titles and the information businesses formerly residing in the now-dissolved Consumer Division. The new division will focus on creating and marketing worldwide, interactive entertainment and information products across a variety of media, including the Internet. February 20, 1996 The Platforms Group is aligned to more closely coordinate the Microsoft Windows family strategy and to concentrate on developing complementary products and technologies for the Internet. March 4, 1996 Microsoft, along with 3Com Corporation, Ascend Communications, ECI Telematics, and U.S. Robotics, announces point-to-point tunneling protocol (PPTP), a new networking technology that supports multiprotocol virtual private networks, enabling remote users to access corporate networks securely across the internet. March 6, 1996 Microsoft Internet Explorer version 2.0 for Windows 95 is available in 22 languages, bringing Microsoft's Web browser to the largest international audience of any Internet client software. The 22 available languages are as follows: Chinese Traditional (Taiwan), Czech, Danish, Dutch, English, Finnish, French, German, Greek, Hungarian, Italian, Japanese (AT and NEC 098), Korean, Norwegian, Polish, Portuguese (Brazilian), Portuguese (Iberian), Russian, Slovenian, Spanish, Swedish, and Turkish. March 12, 1996 Microsoft and America Online (AOL) form a partnership. AOL integrates Internet Explorer into its client software for Windows 95, Windows 3.1, and Macintosh. Microsoft gives users of the Windows 95 easy access to the America Online service via a folder on the Windows 95 desktop. March 25, 1996 MSN enrolls more than one million members in more than 190 countries, in its first seven months of service, making MSN the fastest-starting Internet online service in history. April 2, 1996 Exchange Server is available. Exchange Server is the first integrated messaging and groupware server designed to provide users and system administrators with native open and secure access to the Internet. April 5, 1996 Cartoonist Garry Trudeau drops the Microsoft® Encarta name in a Doonesbury strip providing free publicity for the product while at the same time signaling success for Encarta in becoming the first name that comes to mind when people think of an online encyclopedia. April 8, 1996 Microsoft signs a definitive agreement to acquire aha! software corporation of Mountain View, California, a leading developer of electronic-ink note-taking and editing software for mobile computers and communicators. April 15, 1996 As part of this year's National Library Week, Bill Gates will host an online chat on MSN, The Microsoft Network online news service, at 10 a.m., Wednesday, April 17, 1996, to celebrate the "cyberlaunch" of Libraries Online! *this is interesting as it eventually morphs into one of the cornerstone programs of the Bill & Melinda Gates Foundation. April 26, 1996 In a press release, Bill Gates describes the enormous business opportunity involved with using an intranet. He encourages customers to use the full capability of the Microsoft tools they have already purchased. June 11, 1996 Microsoft acquires eShop, a leader in Internet commerce software technology based in San Mateo, California. Known for its Internet shopping mall, eShop Plaza, the company is also the developer of eShop Technology, the leading merchandising and shopping system that merchants use to build online commerce operations. eShop's technologies will be integrated into the Merchant product--a comprehensive solution for Internet retailing. June 16, 1996 Microsoft acquires Electric Gravity, creator of the Internet Gaming Zone (IGZ), a spot for playing games using the Internet. IGZ features classic games such as bridge, chess, spades, checkers, Reversi, go, and hearts, with log-ins currently registering at more than 30,000 each week. IGZ was created by Electric Gravity co-founders Kevin Binkley and Hoon Im. Electric Gravity employees will relocate to Microsoft's Redmond campus. June 24, 1996 Slate, an interactive magazine of politics, culture, and public policy edited by Michael Kinsley, goes live on the Internet. July 15, 1996 Microsoft launches MSNBC, the 24-hour news, talk and information network from NBC News and Microsoft. July 15, 1996 Microsoft and Kao Infosystems Company have reached an agreement in which Microsoft will award Kao a three-year contract to produce the majority of its packaged products for the North American market. As part of the agreement, Kao will purchase and operate Microsoft's Canyon Park production facility in Bothell, Washington, and offer employment to all of the facility's 400-plus manufacturing employees. Both companies believe the contract represents the software manufacturing industry's single largest turnkey services contract.*This meant that Microsoft no longer operated a manufacturing location in the U.S. July 22, 1996 Microsoft promotes Jeff Raikes to group vice president, Sales and Marketing. In his new position, Raikes becomes a member of Bill Gates’ Office of the President. July 31, 1996 Microsoft Windows NT Workstation version 4.0 is released to manufacturing. Windows NT Workstation 4.0 combines the ease of use of the Windows 95 operating system with the reliability and security of Windows NT. August 7, 1996 Microsoft Corp. and VeriSign Inc. today announced that the first technology to allow secure downloading of software over the Internet is now available. September 16, 1996 Microsoft presents Windows CE, an open, scalable Windows operating system platform for a broad range of communications, entertainment, and mobile computing devices. It was formerly known by the code name "Pegasus." October 10, 1996 New Web-based version of The Microsoft Network debuts. October 22, 1996 Microsoft ® Expedia, a free, comprehensive, user-friendly travel service, debuted today on the World Wide Web. Expedia marks the entry of Microsoft Corp. as the first major technology player in the online travel services arena. October 29, 1996 Patty Stonesifer resigns from her position as senior vice president of the Interactive Media Division. Stonesifer is credited with building Microsoft’s position as the world’s leading consumer and interactive media company. November 7, 1996 Microsoft Flight Simulator for Windows 95 releases, marking the first time in its 14-year history that the product is available on the Windows platform. November 12, 1996 Microsoft's Board of Directors approves a 2-for-1 stock split. Shareholders will receive one additional share for every share held on the record date of November 22, 1996. December 3, 1996 The Executive Committee replaces the Office of the President as the most senior management team at the company. Senior Vice President Jim Allchin and Senior Vice President Brad Silverberg will join Steve Ballmer, Bill Gates, Bob Herbold, Pete Higgins, Paul Maritz, Nathan Myhrvold, and Jeff Raikes on the new Executive Committee. December 3, 1996 Microsoft announces SQL Server sales have increased by over 100 percent compared to last year, bringing the total number of users to more than 2 million. Other Products Released in 1991: Direct 3D API, Scholastic’s The Magic School Bus® Explores Inside the Earth, ActiveMovie API, Microsoft® Music Sampler For Windows® 95: An Enhanced CD, Microsoft® ActiveX™ Development Kit, Mastering Visual C++, Mastering Microsoft Access, ActivePoint for PowerPoint® for Windows® 95, Microsoft Bookshelf 1996-97 Edition, ActiveX Animation Player for PowerPoint, Internet Assistants for Access and Schedule+, SQL Server 6.5, Internet Starter Kit, Internet Explorer 3.0, FrontPage version 1.1, Deadly Tide, Monster Truck Madness, Hellbender, NBA Full Court Press , Close Combat, Microsoft NetMeeting,Microsoft®Internet Explorer Administration Kit, Visual FoxPro™ v 5.0, Internet Assistant for Word for Macintosh, The Microsoft® Empowerment Pack for the Mac, Creative Writer 2, Beyond the Limit™: Ultimate Climb, Microsoft Visual C++ version 4.2 development system and tools, MSN Investor 1.0, Microsoft CarPoint, Mungo Park online travel magazine, IntelliMouse, Visual FoxPro 3.0 for Power Mac, Picture It! 1.0, SideWinder game pad, SoftImage 3D V 3.5 for Windows NT,Systems Management Server 1.2, OLE DB SDK, Encarta 97, Cinemania 97, Automap Streets Plus, Automap Streets Plus Deluxe Edition, Automap Trip Planner, DirectX 3.0, NetMeeting SDK, Money 97, Visual J++, Visual SourceSafe 5.0, Personal Web Server for Windows 95, Proxy Server 1.0, ODBC v 3.0 SDK, Transaction Server 1.0, Internet Information Server 3.0, SNA Server 3.0 Notable New Hires: Alexey Pajitnov, creator of Tetris, joins the Games group In the World: · Designed to create small programs that travel over computer networks as the user needs them, Sun Microsystems's Java programming language is licensed to every major hardware and software company. · A new generation of faster, sleeker hand-held PCs hits stores, many featuring Microsoft's streamlined operating system, Windows CE. · President Clinton beats Bob Dole to continue onto his second term in office. · Air Disasters: A nervous year for air travelers, as ValuJet Flight 592 crashes in the Florida Everglades and TWA Flight 800 explodes off Long Island. There were no survivors from either flight. · Internet: eBay is founded. · Winter: Major blizzards and record low temperatures strike the East and Midwest, leaving over 100 dead. · Stock Market: The Dow Jones Industrial Average closes above 6,000 for the first time, then closes above 6,500 barely a month later, leading Federal Reserve Board chairman Alan Greenspan to condemn the “irrational exuberance” of the market. · TV: Seinfeld, E.R., and Friends are among the top television programs.Spin City, Everybody Loves Raymond, and 3rd Rock from the Sun premiere. · Arrest: “Unabomber” Theodore Kaczynski is arrested at his Montana cabin. · Chess: IBM’s Deep Blue defeats world champion Gary Kasparov in the first game of a six-game playoff. Kasparov goes on to win the series, scoring 4-2. · Olympics: The Summer Olympics in Atlanta are struck by tragedy when a bomb explodes in Centennial Olympic Park, killing two and injuring over a hundred. Right-wing extremist Eric Robert Rudolph is later convicted for the attack. · Computers: Palm launches the first successful PDA, the Palm Pilot. · Science: Dolly the sheep is born, becoming the first successful clone of a mammal from an adult cell. · Crime: Six-year-old beauty queen JonBenét Ramsey is found murdered in Boulder, Colorado. No one was ever arrested for the crime. · Internet: The Onion launches its online satire site. · Divorce: Charles and Diana, the Prince and Princess of Wales, are formally divorced. · Games: id Software releases first-person shooter Quake. · Movies: Top grossing movies of the year include Independence Day, Jerry Maguire, Twister, and_Mission_ : Impossible. The English Patient won the Best Picture Oscar, while Geoffrey Rush won Best Actor for_Shine_ and Frances McDormand won Best Actress for Fargo.

Been playing with Beau Bullock's GraphRunner post-exploit tool in my org's Azure. Wow, what an amazing tool! Even with a low-priv user, the amount of data you can gather is pretty nuts. Beau's webcast is tomorrow, be there or be square. https://blackhillsinfosec.zoom.us/webinar/register/WN_6g9j6BqkQ0-2T49xO4ZHHA
Welcome! You are invited to join a webinar: GraphRunner: A Post-Exploitation Toolset for M365 – Beau Bullock & Steve Borosh | 1-Hour . After registering, you will receive a confirmation email about joining the webinar.

In the rapidly evolving realm of cloud productivity suites, Microsoft 365 (M365) has solidified its position as a fundamental resource for numerous organizations. While M365 presents a host of opportunities, it equally introduces challenges. By default, M365 offers a range of security measures within its tenant structure. However, it also contains a number of default configurations that hold the potential for exploitation by malicious actors. This talk focuses on a new post-exploitation toolset called GraphRunner, that can be used to exploit certain default M365 configurations. During this Black Hills Information Security (BHIS) webcast, Beau and Steve will provide an in-depth exploration of GraphRunner’s features, showcasing its role in elevating post-exploitation strategies. Designed to empower both red team professionals and defenders, this toolset equips users with a means to navigate the intricate Graph API at the heart of M365 and manipulate it for offensive purposes. GraphRunner offers functionalities that aid in lateral movement, data exfiltration, privilege escalation, and persistence within M365 accounts. By offering practical demonstrations of the toolset’s capabilities, this talk aims to bridge the gap between theoretical attack concepts and their tangible real-world application. Chat with your fellow attendees in the Black Hills Infosec Discord server here: https://discord.gg/BHIS -- in the #webcast-live-chat channel.

Zoom