RT @njmulsqb2: Having sensitive credentials hidden in plain sight in M365 is a common practice, no?. You can use GraphRunner in your next s….

RT @PwnedLabs: [Meet the team!] We sat down with penetration tester and Pwned Labs trainer Filip Jodoin to get to know him a bit better. Y….

[Meet the team!] We sat down with penetration tester and Pwned Labs trainer Filip Jodoin to get to know him a bit better. You can read the full interview here: For more about the Microsoft Cloud Attack and Defense bootcamp go to:

RT @BsidesHbg: They say if you play stupid games you win stupid prizes. On April 25 you can play FUN games and win COOL prizes. Try your ha….

RT @joehelle: Teaching AWeSomeUserFinder some new SSH tricks. Coming soon.

RT @joehelle: On @PwnedLabs? Come check out my new, FREE lab on authenticating and scripting with the boto3 module in Python3. Not on Pwne….

RT @egre55: [FREE community live session in cloud security]. We're excited to announce our next 2-hour community live session will be on We….

[New blog post]. Following Cloud Security Researcher and Advocate Seth Art’s recent article, whoAMI: A cloud image name confusion attack (link in replies)—which shows how attackers can trick AWS users into choosing a malicious AMI by matching the name of a trusted AMI—we’ve

RT @tecvity: I have just published walkthrough of @PwnedLabs's "Intro to Azure Recon with Bloodhound" here: #Azure….

Reminder! Join us at 5pm UTC today for our Intro to Purple Teaming in Azure live community session. In this live session we'll be covering:.- Introduction to Azure, M365, ARM and Microsoft Graph.- Harden Azure against ransomware attacks.- Exploit RBAC for Azure privilege

(Officially) introducing PWNCLOUDOS - a community driven, multi-cloud security platform for red and blue. - VM Images for AMD64 and ARM64.- Pre-loaded with tooling used in real AWS & Azure engagements and Pwned Labs training.- Optimized for cloud security, smooth performance and

RT @egre55: We're running a FREE hands-on cloud security workshop "Intro to Purple Teaming Azure", covering:. - Introduction to Azure, M365….

RT @joehelle: Really great course and neat exam from @PwnedLabs .

Only a few more days until the 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗖𝗹𝗼𝘂𝗱 𝗔𝘁𝘁𝗮𝗰𝗸 𝗮𝗻𝗱 𝗗𝗲𝗳𝗲𝗻𝘀𝗲 𝗕𝗼𝗼𝘁𝗰𝗮𝗺𝗽 kicks off!. Learn more about the bootcamp and the 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗖𝗹𝗼𝘂𝗱 𝗥𝗲𝗱 𝗧𝗲𝗮𝗺 𝗣𝗿𝗼𝗳𝗲𝘀𝘀𝗶𝗼𝗻𝗮𝗹 certification here ->

RT @egre55: Hey folks! We will do a 𝗰𝗼𝗺𝗽𝗹𝗲𝘁𝗲𝗹𝘆 𝗙𝗥𝗘𝗘 𝟮-𝗵𝗼𝘂𝗿 𝗰𝗹𝗼𝘂𝗱 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗹𝗶𝘃𝗲 𝘀𝗲𝘀𝘀𝗶𝗼𝗻 on February 12th @ 5pm UTC, and YOU get to choose t….

RT @PwnedLabs: Did you know that Pwned Labs also offers penetration testing services? . Our team of expert trainers are also practitioners….

Did you know that Pwned Labs also offers penetration testing services? . Our team of expert trainers are also practitioners with deep experience in Active Directory and the cloud!A Pwned Labs pentest means the familiar attention to detail and purple team focus. Learn more here:

RT @joehelle: Vv.1 of AWeSomeUserFinder is now available. I've made several changes, including a new enumeration method utilizing S3 bucket….

RT @theluemmel: Made a quick demo walkthrough of AzurePwn because it was too much to explain it in a few sentences. .