Dr. Maik Ro

Dr. Maik Ro

@maikroservice.com

๐Ÿ’œ-Team Hacker my spirit animal is a trojan horse ๐ŸŽ๐Ÿ˜ˆ Training the next generation of purple team hackers (he/him) https://academy.maikroservice.com

1.7K followers524 following251 posts

Dr. Maik Ro reposted

Taking a break from the normal cybers to say this: Men, if you aren't **actively** holding your peers accountable for SA, misogyny, or any other form of discrimination/abuse of women, you are the problem too.

Dr. Maik Ro reposted

Friendly #DEFCON34 reminder: Meta-style glasses with recording capabilities are prohibited at DEF CON. There is no exception for recording glasses with prescription lenses. Be sure to pack non-violating eyewear if you need them. Please see our Photo policies for more. defcon.org/html/links/d...

This was a fun project a colleague just published: What can go wrong if your domain does not yet use verification/SSO with claude code. Turns out, a lot because pre/post hooks can run arbitrary code on the machine as soon as you join a team. Whoops ๐Ÿ’œ haussner.me/2026/05/24/c...

haussner.meGone Phishing with Claude Teams: From Deceptive Team Onboarding to RCE๐Ÿ•š tl;dr With a $125 investment, and a valid email address for an arbitrary โ€œbusiness domainโ€, an attacker can create a Claude Team. They then can actively invite targets of any domain into that Team o...
View full thread

WOHOOOOO IT WORKED WE ARE MAGICIANS! ๐Ÿช„๐Ÿฆ„ Well done friends, in the next post we shall do the same on multiple machines at the same time ๐Ÿ’œ Cant wait to talk to you again!

View full thread

What do we see here?! First all the machines are collected by a self-defined metagroup - โ€œinfrastructureโ€. now a list of all the hosts inside this group follows, in this example we will only have one for now - debian

It has an associated IP address, a username that should be used for the ssh connection and the private key needed to initiate the connection with that out of the way we can run the command from earlier: ansible -i hosts.yml infrastructure -a 'ping 192.168.188.1 -c 1'

View full thread
View full thread

fear not - that is totally expected - your key is well โ€œhiddenโ€ in the authorized keys - open that one and find out: aha - ok that looks like the correct key with the correct username at the end ๐Ÿ˜Œ

View full thread

wonderful - now two options exist 1. you copy the public ssh key to the machine via copy/paste 2. you use ssh-copy-id We shall use 2. today, because it is freaking cool!

you type: ssh-copy-id -i <location_of_your_ssh_key> username@controlled-machine press enter and then you need to enter the password for the controlled-machine user if all goes well you see something similar to the following image:

View full thread

now generate a private key on your host machine with ssh-keygen -b 4096 make sure to enter the correct location and add a passkey if you care about security ๐Ÿ™

View full thread

cool cool cool - what now? now you need to identify how you can connect to the controlled machine - e.g. via ssh if it is linux that means ssh needs to run on the controlled machine - check via: systemctl status ssh

View full thread

and the best part? you do _NOT_ have to install it on the client systems, only on your host / the controlling node! Ok great, but how do we start โžก๏ธย ๐Ÿ

View full thread

Well, it was not made for patching but who am I to judge if you need an automated solution and this is all you have?! ๐Ÿง‘๐Ÿปโ€โš–๏ธโŒ ansible is basically your go to shop ๐Ÿชย for running commands on existing machines it logs in for you, runs commands for you and gives you feedback if it all worked out

View full thread

wellโ€ฆ You could: ๐Ÿ”ย search for all the hostnames, ๐Ÿค gather possible login options ๐Ÿ•ต๏ธย find username/password combinations ๐Ÿคชย go mad because itโ€™s taking too long OR!

You could use your โ€œwell prepared automation setupโ€ that features: ๐Ÿค–ย ansible ๐Ÿฆพย packer ๐Ÿงžโ€โ™€๏ธ terraform ๐Ÿ”ย vault WAYYYY cooler, right? RIGHT?

Imagine the following situation - you have worked in IT for a while and some virtual machines + the services running on them need to be updated What do you do?

Dr. Maik Ro reposted

๐—ฆ๐˜‚๐—ฟ๐—ถ๐—ฐ๐—ฎ๐˜๐—ฎ ๐—ถ๐˜€ ๐—ป๐—ผ๐˜„ ๐—ฝ๐—ฎ๐—ฟ๐˜ ๐—ผ๐—ณ ๐——๐—ฒ๐˜๐—ฒ๐—ฐ๐˜๐—ถ๐—ผ๐—ป๐—ฆ๐˜๐—ฟ๐—ฒ๐—ฎ๐—บ ๐˜„๐—ถ๐˜๐—ต ๐—ฝ๐—น๐—ฎ๐˜†๐—ด๐—ฟ๐—ผ๐˜‚๐—ป๐—ฑ๐˜€ ๐—ฎ๐—ป๐—ฑ ๐—ฐ๐—ต๐—ฎ๐—น๐—น๐—ฒ๐—ป๐—ด๐—ฒ๐˜€! Big update for anyone working on network detections. ๐—œ๐—ป๐—ฐ๐—น๐˜‚๐—ฑ๐—ฒ๐—ฑ: โ€ข 45k+ ET rules available out of the box โ€ข Full ET Open ruleset preloaded โ€ข Build and validate custom Suricata rules

kostas-ts.medium.comDetectionStream Just Got a Major Upgrade: Suricata Integration is Here!Iโ€™m excited to share some big news! Weโ€™ve just rolled out a massive update to DetectionStream, and itโ€™s one that I had planned to add for aโ€ฆ

Ulalalaaaa would be a shame if this were used forโ€ฆ. Umm things? ๐Ÿค“

Caracal is a Rust implementation of eBPF techniques that: 1. hide target bpf programs & maps โ†’ won't be visible with bpftop, bpftool 2. hide target processes โ†’ won't be visible with ps, top, procs, ls /proc 3. are resilient to some "unhiding" bruteforce techniques github.com/adgaultier/c...

Dr. Maik Ro reposted

Happy Monday, all! ICYMI, there's a new version of my comprehensive guide to DevOps-based homelabbing available!

Taggart@taggart-tech.com

Hello, friends! I'm thrilled to announce that The Homelab Almanac, v3.0 has officially launched! There is a **ton** of new stuff in this version, including: - Proper DNS - PKI - Automatic signed certificates - New secrets management - Proxmox clustering - Cloud integration

Canโ€™t believe I am saying this but a new virus coming from china would sure be my preferred scenario compared to current situationโ€ฆ ๐Ÿซฃ

Is it finally the time the sh*tty search of confluence/jira saves the day? I want to believe ๐Ÿซฃ๐Ÿคฃ

Judd Legum@juddlegum.bsky.social

3. The memo acknowledges that the list includes many terms that are used by the NSA in contexts that have nothing to do with DEI. For example, the term "privilege" is used by the NSA in the context of "privilege escalation," which is a counterintelligence technique

Whenever someone is looking to learn something new in the later stages of life I had issues commending anything but โ€œwell YouTube and hope for the bestโ€ but now you can have a more guided approach how to learn to learn new things ๐Ÿ˜๐Ÿฅฐ

The Taggart Institute @taggartinstitute.org

New Courses This Week! Happy Monday, friends! We're so excited for this week. We're launching not one, but **two** new courses! We're kicking off with a course that @taggart-tech.com has wanted to make for a long, long time. taggartinstitute.org/p/the-learni...