David Maynor
@Dave_Maynor
Followers
14,845
Following
6,287
Media
3,932
Statuses
49,838
No tree, it is said, can grow to heaven, unless it’s roots reach down to hell. Offensive Security, AI LLM Ops, hardware hacking
Columbia, MD
Joined August 2008
Don't wanna be here?
Send us removal request.
Explore trending content on Musk Viewer
FEMA
• 1195043 Tweets
Tina Peters
• 252599 Tweets
Liz Cheney
• 175745 Tweets
裏金議員
• 163487 Tweets
#LISAxMoonlitFloor
• 144337 Tweets
SCJN
• 107609 Tweets
Ten Hag
• 101065 Tweets
The Boss
• 98700 Tweets
#GHGala5
• 97885 Tweets
MOONLIT FLOOR OUT NOW
• 92703 Tweets
Bruce
• 83265 Tweets
Happy Anniversary
• 52629 Tweets
Rashford
• 46543 Tweets
Maguire
• 42965 Tweets
Brewers
• 40718 Tweets
原則公認
• 34902 Tweets
EL DESTELLO IS OUT
• 34531 Tweets
Violeta
• 32703 Tweets
天使の日
• 29169 Tweets
Falcons
• 24096 Tweets
もちづきさん
• 21594 Tweets
Halle
• 20814 Tweets
Garth Brooks
• 15408 Tweets
ゴールデン進出
• 14873 Tweets
Athena
• 14206 Tweets
Bucs
• 13389 Tweets
#911onABC
• 12920 Tweets
Bijan
• 11402 Tweets
Mike Evans
• 10651 Tweets
Wow.
@dell
wants to charge me $100 for Ubuntu. That is twice what they charge for Windows 11 pro.
218
260
4K
Its Friday lets talk about something fun. Grappling hooks. As a kid so much of my life was driven by a desire to get a real grappling hook, what I would do with a grappling hook, and how awesome my Batmanesque life would be with grappling hooks.
55
71
2K
If you are a mac osx user and ever bored open a terminal and do sudo nvram boot-args=”-v” before applying a patch. You get the see the boot process instead of just the apple logo and progress bar.
35
255
2K
Apple M chips really highlight how useless a laptop is without the ability to run VMs.
97
124
2K
Infosec relevant: I once attached a battery to a jailbroken iPhone and mailed it to a pentests victim. This sat in their mail room for a week and we could connect to phone over cellular then pivot using a WiFi vuln. This was 10 years ago with
@ErrataRob
17
365
1K
That's a ton of cash for a VPN provider. The 936 million price tag is around 312 dollars per user. Ask yourself why VPN subscribers are work that much.
18
167
646
Security isn't a job or a paycheck. It's a mindset. It is needing to know why or how. It is needing to know you can beat the system or make the system unbeatable. It's not 9-5. It's an obsession. A way you look at the world. The hardest part is not getting taken advantage of.
73
91
536
@dell
has a weird cart and way of computing price. This isn't because Ubuntu costs $100 its because Dell had a $200 discount in certain builds. I chose a build not eligible and rather than adjusting the price it waits till you make another selection. The $100 is because of the
18
13
485
12
108
421
So I have a grappling hook I keep close to my desk for ADHD fidget purposes. When I made a very convincing request as a child that I was grappling hook capable I was shot down by grappling hookless parents. I'm not big on conspiracies but adults without Ghooks (cool peep slang)
6
1
362
Well fiddlesticks. CVE-2021-40444 affects OSX with Macs. Thats terrifying. A real good cross platform bug. Next up, iOS. I have no reason to think iOS is affected but a few hours ago I had no reason to think OSX was affected.
17
89
337
My biggest failure as a hacker: I have no idea what happened at the end of Mr. Robot.
I watched it…I just have no idea.
48
9
326
I’m David Maynor, I worked for a large company that sent me to respond to the attacks in Ukraine. I spent time there, I have friends there, I care about Ukraine. Here is the story you should read:
3
146
292
@SCShipyards
That reminds me of critics that complained that the dogs in John Wick 3 were really badly animated. The director informed them the dogs were real.
3
8
271
6th time is the charm. I have a lot of people DMing me out how to get to the iOS field test mode in their Apple phone. Dial *3001
#12345
#* then call. I am on iOS 15. Here is a video.
10
58
266
Enough real talk. To prove I am an adult, here is me, my grappling hook, and a stiffed MewTwo. I am an adult! If you don't have your stuffed MewTeo and grappling hook, then why adult?
15
7
247
I do OffSec. Yesterday I helped keep my employer safe by creating a CVE-2021-40444 exploit for testing our vendors coverage. I also used behaviors of the exploit to hunt for potential attacks from the wild.
4
15
228
So I did.
Do you ever hear people say, "God, high school was so great!" Or “It was the best time of my life!” Consider the source and their Ghook status. I'm older now than my parents were when I asked for a hook. I can conclusively state that people my age are idiots.
2
2
230
3 years ago I got a call from Ukraine Intelligence partners that asked for help with what the described as a new ransomware strain. By noon I was informing people internal to
@TalosSecurity
that this wasn’t ransomware but a untargeted destructive attack.
7
39
222
are lame. When considering what kinda Ghook you want don't take advice from Hookless people.
Anyway my repeated requests to be come part of the global Ghook enabled elite was constantly shot down by parents with the "when you move out and pay your own bills you can get one."'
1
1
221
9
1
216
I just found a full RCE in movie theaters. If you buy a ticket, aka an entitlement, to one movie, you can then maliciously craft your position to gain access to other auditoriums, and you see other movies. Don't tell anyone I don't want big movie and big bug bounty to silence me.
14
17
209
I have an irrational hatred for people who put spaces in file names. What kind of psychos do this?
76
9
206
I can't imagine raising a family now because I can't intellectually hide behind losing an argument and then declaring “because I said so” due to the fact I am closer to death than younger people.
3
1
201
On Friday Feb 19th I will be giving away a VIP code for
@hackthebox_eu
. To enter you need to follow me and reply to this thread with your favorite
#CTF
tool.
#CyberSecurity
4
22
63
I want to wear a mask forever in places like airports, on planes, etc. that’s just me. I don’t care what others do but a lifetime of colds, upper respiratory infections, etc after traveling has made me a mask person.
10
4
158
If you are keeping CVE-2021-40444 score cards at home: evasion of work arounds, can execute from a remotely hosted CAB, 0 detection rate on EDRs, potential for execution with minimal interaction. This is bad.
3
39
149
I learned in life that if you are smart, you we're smart as a kid and an adult. If you are lacking in intelligence, you did as a kid and also as an adult.
There are so weird meta thoughts here about training children to be risk adverse, and it ends poorly…
1
2
151
I keep seeing people in infosec roles telling other business unit leaders to “fuck off.” These people fail quickly because they cant build consensus. They then blame thier failure on random factors. These people don’t understand that infosec isn’t a company’s business.
7
16
143
Just like last week I am giving away a free month of VIP at
@hackthebox_eu
. You have to follow me. If you already follow me that's great. But you also reply to this thread with you favorite tool to take notes with for CTFs. The winner is announced Friday.
43
9
47
From
#WandaVision
episode 6. Its great that Dr. Darcy aka
@OfficialKat
is now a hacker. First the RF stuff in ep4 and now she is piercing firewalls!
4
4
74
You have been invaded by Russia. The 6th picture in your gallery is what Russia used as pretext for invasion.
241
5
136
I still cant believe some buildings have giant balls under them to dampening the effects of earthquakes. Does anyone know where you can see one?
2
2
52
On Friday I’ll give away a 30 day VIP
@hackthebox_eu
code. All you need to do to enter is follow me and reply to this thread what your favorite CTF tool is.
64
18
65
To follow up on this its worth noting that an exec for ExpressVPN was just charged with building a cyber espionage group for a foreign government. For safety reasons maybe skip ExpressVPN and Kape
7
78
130
@PcPhilanthropy
I miss weird idea gambles before everyone tried to look like an apple product.
1
4
120
Wow I forgot the
@nfl
was a thing. Upping TV rights payments means it wont be a thing for long.
0
0
21
@SwiftOnSecurity
I dont like swords and sorcery stuff but I liked the movie. Chris Pine and Michelle Rodriguez were a great duo.
2
0
123
Ah the Lumbee tribe. The only place you can call your brother cuz and everyone knows what you mean.
0
0
18
The only thing worse than the Supermicro is when
@business
doubles down on jt. FYI the inclusion of a VCs thoughts shows how bad they are grasping at straws. Knowing Mike I assume he is trying to drum up business fkr one of his investments.
0
8
45
Wait...someone doesn’t want hackers to go to Monte Carlo or Miami? Thats ok, hackers hate sun.
1
0
20
@StarWars_Direct
I read six books about how awesome Thrawn and how he navigated Chiss and Emprire alliengences to protect his people. Now he is just a bad guy? I didn't read these books because he was generic evil villain.
#StarWars
13
6
108
@SWCulture
The Jedi and Sith are both arrogant fools. Show me which Mandalore I am based on my birth month.
5
1
102
Today's the last day, don't miss it!
Just like last week I am giving away a free month of VIP at
@hackthebox_eu
. You have to follow me. If you already follow me that's great. But you also reply to this thread with you favorite tool to take notes with for CTFs. The winner is announced Friday.
43
9
47
0
6
73
Real team work: i almost got unsweet ice and
@LawyerLiz
saved me from a fate worst than bland.
0
0
19
0
1
103
Ive been paid to break into a lot of networks. I can tell you things that don’t slow me down at all are firewalls, AV, MFA. Recently i realized my success wasn’t in evading the tools but unconsciously preying on the gaps between the tools and the teams that run them.
3
0
15
Startups, where the CEO is telling stories like “I was on the ski slope and saw the chatter in a slack room and transferred my company's cash”, are all self-identifying as high-risk potential victims of fraud in the future. Where are the dual controls?
4
22
101
Planetary Defense System. Can anyone say that without being amazed at when we live bit also cant stop thinking about the movie Independence Day.
DART is
@NASA
's first planetary defense test mission.
Launching 2021. 🚀
Impacting 2022. ☄️🛰💥
@AsteroidWatch
@JohnsHopkins
#planetarydefense
29
91
289
0
0
22
Me and
@SwiftOnSecurity
going to pick up a Linux box because the Halo TV sucks so she is migrating to Linux desktop.
4
6
98
I mostly don’t cloud infrastructure until I have to patch ESX.
0
0
9
For reasons I cant disclose due to spoilers John Wick has been spotted heading to Westview, NJ after stopping by Walmart to buy a bag of pencils.
#WandaVison
1
3
27
I wanted to take a nap in the middle of the day and couldn’t figure out how. Enter pasta.
1
0
20
@vxunderground
@_xpn_
The banner isn't wrong they just don't mention HOW they stop the breaches. 😆
1
0
92
Firewalls have lived long beyond their usefulness. To be honest I not quiet sure what the modern justification for them is beyond creating single points of failure. I don’t mean network filtering functionality but the implementation of it on stand aline systems.
4
0
16
Monster Hunter movie finally available digitally today. Adding this to queue for later.
#movienight
1
0
49
@andrewjclare
Go to Settings->Privacy & Security->Analytics & Improvements->Analytics Data. Look for files named JetsamEvent with today’s date and the time close to when you were running everything. These files give you insight into performance.
0
6
91
Here is a pic of
@LawyerLiz
after working a full day as the VP of Ops at
@scythe_io
, taking care of me who is a man child, single handedly stopping a random ware gang, and is about to aid the Avengers in taking down Ultron. Typing all this has my so tired I'm gonna take a nap.
10
6
89
If you need that kind of filtering check a box with your network provider and add it for a fraction of the cost of testing/selecting/implementing/tuning/maintenance.
1
0
9
Don’t forget this Friday. You have to follow me and name your favorite CTF tool in the below thread.
On Friday Feb 19th I will be giving away a VIP code for
@hackthebox_eu
. To enter you need to follow me and reply to this thread with your favorite
#CTF
tool.
#CyberSecurity
4
22
63
0
1
42
@giansegato
@BrendanEich
Coders can be modern day magicians. Instead of baking elixirs and trinkets, coders can hack the world.
3
0
86
You think you have fear of public speaking now wait till you have to wonder how everything you say is translated to 150 languages.
0
0
11
Oh look at Chance with the squeaky ball
@dadamitis
smuggled to him.
We want to deliver more than just doom and gloom news. We will start highlighting a Black Lotus Labs
#pet
each week. First up is
@Dave_Maynor
's dog, Chance. Chance likes squeaky toys.
0
4
15
0
0
45
Offensive security has no place in infosec. 🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩🚩
12
6
81
@Mike82137849
@Dell
You are correct. What happened was Dell was giving a $200 discount for certain configs. If you choose something that isn't in one of the discount builds it adds 200 to price. While removing ubuntu would normally remove 100, with the canceled discount it is +100.
3
4
85
0
0
12
That Senate Intel hearing today was far better than I expected.
1
0
18
Could you post a photo with a range or outfits or facial expressions I can use to train deep fake tools?
0
0
8
A great friend of mine just lost his dog. 18/10 amazing pups. He made a metal version of Blue. Days like this are only helpful since all dogs go to heaven. P
1
5
50
Using inspiration from
@jacksonfall
I have asked
#ChatGPT
to become CyberGPT and I will be their human counterpart to execute offensive testing. Let's see how good an
#AI
is at offensive testing.
#redteam
#infosec
8
16
79
Please don’t let this day pass unrecognized for what it represents: destructive cyber attacks are not only possible but are on the table for use by nation-state attackers.
4
13
75
So far I have an SDR startup button (a Robotech E-LINT), a button for starting Kali VMs, and a map button.
#nextgen
#
0
0
41
This is almost pornographic
5
12
74