Electronic engineer, security researcher, hacker, tinkerer
Cape Town, South Africa
- Tweets 1,061
- Following 415
- Followers 413
- Likes 2,743
shif/tty/mike retweeted
I love @RoganDawes 's Apostille for cloning x509 certificate chains to make certs look identical to users when they're forced to eyeball them when a rogue AP presents a different cert. But I wanted something more portable with fewer deps. You can grab GOpostille from 👇
1
8
14
1,580
shif/tty/mike retweeted
The work from @vanhoefm and friends showed that malicious channel switch announcements is a pretty good deauth primitive for management frame protection networks, so I added it to @aircrackng. Link below.
4
3
16
4,380
shif/tty/mike retweeted
Year 25 of SensePost training at BlackHat, I think this is my 17th time. cc @shifttymike
4
1
45
1,591
shif/tty/mike retweeted
Need to open doors from the outside without touching anything? Turns out thats possible with no touch sensors as @shifttymike details in his latest blog post. Link in 🧵👇
1
5
15
4,018
shif/tty/mike retweeted
Wifi hacking can be a useful tool, but people are out here grinding on WPA2 handshake cracking tutorials & menu driven attack tooling. When @sensepost built the 3rd iteration of our wifi hacking course for @BlackHatEvents - we did it to show what really works & how it works. 1/7
ALT A DALL-E generated image of a hooded person behind a computer with a large glowing wifi symbol on it. In the background are neon posters with the words WPA2 handshake cracking, PEAP relay access, certificate bypass and BLACK HAT. The style is neon cyberpunk.
1
18
40
8,482
shif/tty/mike retweeted
Attacks against AD CS are de rigueur these days, but sometimes a working attack doesn’t work somewhere else, and the inscrutable error messages are no help. Jacques replicated the most infuriating and explains what’s happening under the hood in this post sensepost.com/blog/2025/divi…
ALT A screenshot of an AD CS ESC1 attack using Certipy getting a KDC_ERR_INCONSISTENT_KEY_PURPOSE error.
1
109
309
37,257
I found the ZA hacker community through 0xc0ffee_cpt somewhere around 2013, now 12 years later I had the privilege of kicking off the first PTA event. What a cool group of people. May the community grow from strength to strength!
🔥 Our first 0xC0ffee in Pretoria was a massive success! 🔥
A huge thank you to everyone who joined us, and shoutout to Michael Rodger for an awesome first talk. 👾
We’re making this a monthly thing-every 2nd Tuesday at Rock@88 Moreleta!
📅Next meetup: 11 March, 7–9 PM. ☕🔥
1
10
349
shif/tty/mike retweeted
Instead of relying on RemCom, what if we had a python client to interact with the latest, Microsoft signed PSExec? In this post @Defte_ details how he and the team did exactly this, including a tool, some PSExec internals and detection opportunities!
sensepost.com/blog/2025/psex…
1
46
155
8,956
shif/tty/mike retweeted
🚀 Exciting news for Pretoria hackers! 🚀
No more long drives to Joburg!
Join 0xCoffee PTA and connect with like-minded hackers.
📅 11 Feb 2025
🕖 7–9 PM
📍 Rock@88 Moreleta
👾 Show off projects
👥 Meet fellow hackers
🍵 Great vibes
💡 Got something cool to show? Message us!
7
13
553
shif/tty/mike retweeted
@0xc0ffee_jhb Reminder: @gerbot_ will be talking about AI for Offensive Operations, tonight (27 January) at Milkbar, Sandton.
3
3
552
shif/tty/mike retweeted
Our lineup for 0xcon JHB 2024 is live! 0xcon.co.za/#schedule
We received more submissions than expected and, unfortunately, couldn’t accept them all. Emails are on their way, check your inbox. 📢
A huge thank you to everyone who submitted—your contributions were amazing! 😎
8
10
845
shif/tty/mike retweeted
Calling all hackers: See you there! 🦀 🖥️
Tonight's (30 Sept) #0xC0FFEE Jozi will feature Gerhard Botha talking about lessons learned while building offensive tooling in Rust - with comparisons between C & Go.
It's at the usual place and time - Milk Bar, Sandton, 7pm. Be there.
4
11
730
shif/tty/mike retweeted
In @sensepost's #BlackHatTrainings API Exploration & Exploitation, embark on a learning journey to explore the art of attacking and securing API's. This course equips you to mitigate the majority of vulnerabilities through improved development practices. Register here: bit.ly/3XFgAbq ⚙️
1
1
3,695
shif/tty/mike retweeted
REMINDER to SAVE THE DATE! 📢
We are excited to announce that #0xcon2024 #Johannesburg is coming up on 9 November 2024 at the MTN Innovation Center! 0xcon.co.za
Tickets are available through Quicket - quicket.co.za/events/277605-…
See you all there! 😎 #infosec
3
3
104
shif/tty/mike retweeted
gowitness v3 is out! A huge task, but I refactored basically _everything_ for version 3 in just over a week, followed by also writing the longest release notes of my life! Hopefully it's the best version yet.
A lot has changed, so feel free to dig in. 🤖
🧵👇
9
67
196
18,815
shif/tty/mike retweeted
📢 The clock is ticking!
Our CFP for #0xcon2024 closes on 15 October 2024.
If you have groundbreaking ideas, this is your chance to share them with the community.
📝Submit your sessions here: forms.gle/YS2H5naMSsRjNdKK6
#infosec #CyberSecurity
5
5
311
shif/tty/mike retweeted
Joburg hackers! We’re alive and well and will be meeting at the usual place, usual time (Milk Bar Parkmore, 7pm)
@shifttymike will be taking us through some recent IoT hackery he did. Join us for some good conversation, food and networking.
See you there 😁
5
6
310
shif/tty/mike retweeted
REMINDER: #0xcon2024 CFP is still open! 📢 Be sure to submit before 15 Oct 2024 here: 0xcon.co.za/#cfp
#Tickets to the #0xcon2024 #JHB event will be going out soon, you don't want to miss it, watch this space! 👀
#cybertech #cybersecurity #community #infosec #HackSouth
4
2
204
shif/tty/mike retweeted
We've just opened up the #0xcon2024 CFP! Details are at 0xcon.co.za/#cfp. If you've been working on something interesting, come show it off
9
5
847
shif/tty/mike retweeted
Me & @mariankabotes will be hosting a @BlackHatEvents session at 15:20 today.
It’s a way for newbies to find out all the ways in which people who’ve done this for a while have screwed up - on the belief that this helps make our industry more accessible.
blackhat.com/us-24/features/…
2
2
13
1,076