Dominic White š¾
@singe
Followers
12K
Following
11K
Media
2K
Statuses
31K
Hacker @sensepost - minimally active here. Fine me at https://t.co/quAKFLpcgM || @singe.bsky.social
Joined August 2007
Earlier this week I gave a talk to our internal hacking teams about the difference between good hackers and great ones that have been able to impact our field. I included three extended quotes - two from writers and one from Hamming that influenced my approach early on. Maybe
6
30
101
I know some folks might be trying to squeeze their BlackHat training courses into a budget number. Perhaps this could help. (Link in the next tweet.). Also our WiFi training is pretty good ;)
2
6
16
RT @sensepost: Adriaan was struggling to get an interactive shell on the *nix application server he had popped, so he wrote a turn-based miā¦.
0
17
0
It's been a long time since someone showed me a new way to shell. Nice work Adriaan!.
Adriaan was struggling to get an interactive shell on the *nix application server he had popped, so he wrote a turn-based mini binary to give you a semi-interactive shell in restrictive environments. Writeup & code šš§µ
0
2
9
A banned PyPI account and a big old bug bounty later Felipe wrote a tool to uncover nested dependency problems from GitHub repos.
After @felmoltor argued about dependency confusion & supply chain attacks & was confused with the feasibility of doing this in 2025, he decided to take a practical approach & create his own tool š· to detect Orphan and Misspelled packages š·:
1
0
3
RT @sensepost: After @felmoltor argued about dependency confusion & supply chain attacks & was confused with the feasibility of doing thisā¦.
0
5
0
RT @leonjza: Great thread that challenges what you know about modern WiFi hacking. The next iteration of our @BlackHatEvents Las Vegas courā¦.
0
2
0
RT @Stealthsploit: Following my @securityfest talk yesterday I've released Hashcatalyst, a wrapper that helps automate non-distributed workā¦.
0
9
0
When you see @Zero_ChaosX RT your wifi hacking post. (This is also his opportunity to remind everyone how badly I did at WCTF š
)
0
1
1
If youād like to learn the trade and not just the tricks - join us at BlackHat USA FIN
2
0
5
More importantly, have you built and architected your wifi networks to be defensible against someone that actually understands how the protocols work, and can modify what theyāre doing in the face of obstacles? 6/7.
1
0
1
Even if youāre doing some old fashioned WPA2 handshake cracking, do you know what it means when you only get frames 1 & 3 and how to handle it? Do you have a process for handshake cracking that moves you beyond getting lucky? 5/7.
1
0
1
An otherwise well implemented corporate AP setup can still be vulnerable to certificate validation problems that would allow you to impersonate a legitimate AP and capture credentials. (10:28) 4/7.
1
0
2
Very few people seem to know that PEAP relay gives you network access without needing to crack a password or for the victim to be onsite. (17:12) 3/7.
1
0
3
Finding clients across the massively increased spectrum of 5/6/7Ghz needs different approaches if you want to be successful with a single wifi card on a pentest. (2:33) 2/7.
1
0
2
Wifi hacking can be a useful tool, but people are out here grinding on WPA2 handshake cracking tutorials & menu driven attack tooling. When @sensepost built the 3rd iteration of our wifi hacking course for @BlackHatEvents - we did it to show what really works & how it works. 1/7
1
19
41
