@hdm@infosec.exchange

Founder & CEO of runZero (@runZeroInc@infosec.exchange - https://runzero.com), previously the founder and lead developer of Metasploit, a CSO, a consultant, and the head of various security research teams.

My work is focused on #infosec, #security, #networking, #discovery, #osint, #postgresql, #aws, #engineering, #opensource, #devops, and #startup stuff. For fun I write #golang, build #IoT projects, and

Notes: 1329
Following: 0
Followers: 0

Home: https://hdm.io
Github: https://github.com/hdm
Work: https://www.runzero.com/
Twitter: https://twitter.com/hdmoore
Bluesky: https://bsky.app/profile/hdm.bsky.social
Signal: hdm.01

HD Moore
@hdm@infosec.exchange

Hello Austin-area software engineers (or aspiring engineers)! Join us tonight, Wednesday, August 13, 2025 for two hours of lightning talks and discussion at the ATX Go meetup. The focus tonight is on infosec/cybersecurity/hacking tools written in Go, but all Go-related talks are welcome.

This meetup is hosted by Capital Factory and runs from 6:30 PM to 8:30 PM CDT (with pizza and drinks): https://www.meetup.com/atxgolang/events/305492505/?slug=atxgolang&eventId=305492505

HD Moore
@hdm@infosec.exchange

If you missed this talk at BH/DC last week, it's worth a read: "From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion". Awesome work from Shu-Hao, Tung (123ojp) covering practical attacks on GRE and VxLAN tunnels: https://media.defcon.org/DEF%20CON%2033/DEF%20CON%2033%20presentations/Shu-Hao%20Tung%20-%20From%20Spoofing%20to%20Tunneling%20New%20Red%20Team%27s%20Networking%20Techniques%20for%20Initial%20Access%20and%20Evasion.pdf (repo: https://github.com/123ojp/GREtunnel-scanner & wp https://i.blackhat.com/BH-USA-25/Presentations/USA-25-Tung-From-Spoofing-To-Tunneling-New-wp.pdf)

DEF CON title slide for "From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion"

HD Moore
@hdm@infosec.exchange

Blue Team Con (@BlueTeamCon@infosec.exchange) is only three weeks away! I'm excited to share "The Death and Rebirth of Vulnerability Management", an analysis of coverage, tradeoffs, and efficacy across vulnerability scanners, endpoint agents, and open source security tools.

https://blueteamcon.com/directory/the-death-and-rebirth-of-vulnerability-management/

HD Moore
@hdm@infosec.exchange

Thank you to everyone who made it out for my DEF CON 33 presentation, "Shaking Out Shells With SSHamble", you can find the materials online at https://hdm.io/decks/MOORE%20-%20Shaking%20Out%20Shells%20With%20SSHamble.pdf

This deck includes some lightly-censored zero-day and I recommend tossing sshamble scan -u root,admin,guest 22,24442,2222,70,222,10022,10399,2022,22222 --interact=all at your local network to see what shakes out =D

(PS. You can find most of my presentations at https://hdm.io/)

A top-level overview of the presentation presented as a grid of thumbnails, showing 42 slides.

HD Moore
@hdm@infosec.exchange

Are you an Austin-area software engineer who writes Go (or aspires to become one)? Join us Wednesday, August 13, 2025 for two hours of lightning talks and discussion, including recaps of awesome Go work presented at the Black Hat and DEF CON conferences. Have a short talk on Go (with or without security focus)? Bring it!

This meetup is hosted by Capital Factory and runs from 6:30 PM to 8:30 PM CDT: https://www.meetup.com/atxgolang/events/305492505/?slug=atxgolang&eventId=305492505

Please RSVP so we can accurately order enough pizza and drinks.

HD Moore
@hdm@infosec.exchange

Hello DEF CON! Tomorrow (Saturday/August 9th) I'll be speaking with Nicole Schwartz on Forging Strong Cyber Communities in Uncertain Times at 1pm in W205 (TDI) and then shortly after on Shaking Out Shells with SSHamble at 3pm in Track 2 (LV1), with even more shells. Hope to see you there!

1. https://calendar.google.com/calendar/u/0/r/month/2025/8/9?eid=NDBmOWhyMzZsaDBsYWU0MjRudHBkbHBjZ2ggY184YmI1ODdmNzM0NGNmNTJjNTIzY2Y2NWE1MGM4YzU3ODlhY2VlZDVlMGVkZTQyYWQzNjE4YjI2MzUwOTg4YjVmQGc
2. https://defcon.org/html/defcon-33/dc-33-speakers.html#content_60360