HD Moore

@hdm.io

2078 Followers 1437 Following

runZero & Metasploit

JawnCon closing session - stats on badges, speakers, bandwidth, and money raised for FU Cancer
SecTor Briefings: The Once and Future Rules of Cybersecurity - day two keynote by HD Moore
A picture of HD Moore wearing plaid shirt, blue lanyard, and green backpack.
DEF CON title slide for "From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion"
A top-level overview of the presentation presented as a grid of thumbnails, showing 42 slides.
A screenshot of ToneLoc, a wardialing program from the 1990s, displaying network scan data from the 2020s
A photo from the UT Thompson Center auditorium with banners on the right for the ringzer0 conference and Trend Micro ZDI (a top sponsor). On the project screen is the text "If you build it, they will not come" with a picture of a baseball on a field.
A set of three photos taken by Charles Blast, the first shows the GPD Pocket 3 (hacktop) with the runZero console loaded, sitting in front of a normal-sized laptop. The second photo shows a SpaceX rocket launch over the water of Cape Canaveral. The third photo shows the Royal Caribbean ship, Voyager of the Seas, docked off of CoCo Key
A photo of a metal box with a label stating "Keno Diskette" and a sticky note saying "Be very careful not to catch diskette in the lock mecs.", next to an alarm panel and keypads for each hotel of the hotel. The alarm code is "1234".
A screenshot of the runZero console showing an ESXi 8 VM running under Proxmox. ESXi 8 can no longer update from the esxcli software command due to arcane "out of memory" errors as on the online repo is now bigger than the 300m limit for the python script. The workarounds now trigger tamper errors in ESXi. To download an offline zip of the Depot now requires an active Broadcom support contract. The final alternative is downloading the installer ISO and running the upgrade from the physical console, but this also requires a support contract. Security incidents based on unpatched ESXi are going to be even more of a thing in 2025.
The AHA logo (AHA)
A photo of a Ring video doorbell that was accidentally embedded in concrete.
A screenshot of the Apple iOS Shortcuts application, showing the details for a shortcut that automatically restarts the device every day.