Dominic White

@singe

Hacker at Orange Cyberdefense's SensePost Team

768 Folgt1.237 Follower674 Posts

Bluesky

Ist das dein Profil?Übernimm es — dann gehört dir singe.dirty.social.Profil übernehmen

Dominic White@singe· 10d

The work from Mathy and friends showed that malicious channel switch announcements are a pretty good deauth primitive for management frame protection networks, so I added it to aircrack-ng: https://github.com/aircrack-ng/aircrack-ng/pull/2724

A screenshot of the new CSA deauth tool running, showing a wpa_supplicant with management frame protection connected to a hostapd with management frame protection getting deauthed. The handshake is captured in shifttymike’s new airodump-ng TUI at the bottom.

Dominic White@singe· 14d

My fortune cookie is even giving me sh*t about maintaining our WiFi hacking course.

A fortune cookie wrapped that reads “You will obtain you goal if you maintain your course”

Dominic White@singe· 14d

Year 25 of SensePost training at BlackHat, I think this is my 17th time.

Dominic White@singe· 15d

BlackHat airport advertising is up but this is the only one that unintentionally makes any sense to a hacker.

An advert for a hidden speakeasy (lol) with the text “You’re only a password away”

Dominic White@singe· 16d

I always love the care our training ops team puts into our BlackHat training swag but the war games mainframe and WiFi themes are both close to my heart. Thanks Darryn & Andre!

Two T-shirts, several playing cards, a lanyard and sticker all WOPR/Wargames movie themed and the WiFi cards have lots of WiFi references.

Dominic White@singe· 16d

I’ve seen a few dry runs of the absolutely fire talk Reino has prepped for everyone at DEFCON this year. Want to see multiple exploit chains on a widely deployed PED device deemed so impactful the vendor asked us to wait two years to disclose, then catch “Very Pwned” info.defcon.org/defcon34/con...

Everyday billions of credit card transactions are made worldwide, with the vast majority being done on purpose-built card machines. In the USA alone, nearly 400 million transactions are performed per day on these popular devices present in nearly every retail store. In this talk, I’ll focus on a widely deployed Verifone product line of card machines, with an estimated global deployment of over one million units. For several consecutive years I conducted an annual security assessment on these devices, until a pattern emerged: I'd arrive at the assessment, find a fresh set of vulnerabilities, gain root access, and then have Verifone patch the devices — only for me to return the following year and gain root access in a new way. I’ll demonstrate the three separate attack chains I discovered, two of which only required network access to the target. I’ll also detail additional vulnerabilities that could be used to disable hardening features such as grsecurity, including the ability to modify the file system to gain persistent access. Next, I’ll show how an attacker could leverage this access to continuously capture credit card information - contrary to the device’s security claims. Finally, in a homage to trixr4skids' DEF CON 25 talk in which he hacked an older series of Verifone's devices, I'll also run Doom.

Dominic White@singe· 18d

Every time we give our wifi hacking training @blackhatevents.bsky.social, we need to help people understand the vagaries of aircrack's airodump-ng, until now, because @shifttymike.bsky.social fixed it!

Dominic White@singe· 20d

I really like this evaluation matrix from @RoelofTemmingh’s @BSidesJoburg keynote for judging quality in a flood of AI slop. The one that resonated with me in particular was: “Has this person ever paid a cost for being wrong”

Dominic White@singe· Jun 13

Check whether a site supports post quantum crypto* quantumhello.xyz * Well hybrid PQ key exchange in the form of TLS 1.3 with X25519MLKEM768

Dominic White@singe· Jun 9

Whoa “describe an extension” just worked.

Dominic White@singe· Jun 9

A quick run through the new iOS 27 beta system settings and I noticed: 1 You need to join a waitlist to access new Siri 2 it now shows what type of WiFi is in use when connected 3 it may not be new - but there’s an “impersonation risk detection” feature that can be shared with apps

Dominic White@singe· Mar 8

We must never again allow ourselves to dehumanise each other.

Our government is treating the suffering of the Iranian people as a backdrop for our own entertainment, as if it's just another piece of content to be swiped through while we're waiting in line at the grocery store. But, in the end, we lose our humanity when we are thrilled by the destructive power of our military. We become addicted to the
"spectacle" of explosions. And the price of this habit is almost unnoticeable, as we become desensitized to the true costs of war. But the longer we remain blind to the terrible consequences of war, the more we are risking the most precious gift God gave us:
our humanity.

Dominic White@singe· Mar 8

We’re in the third cycle of the cybers it seems.

Dominic White@singe· Mar 5

Time to exploit reducing? Zero day clock? Pepperidge farm remembers the early 2000’s.

A graph from Gerhard Eshelbeck’s 2005 Insecure Mag article on the reducing exploit window. First presented at BlackHat 2003.

Dominic White@singe· Feb 28

I AI generated this punk song a week ago. Kind of saw it coming. Wish we could move on from rhyming the death and misery.

Maybe World War
Alnge
TRADE ROUTES, NOT TRENCH COATS
We're marching to the drumbeat of a maybe
World War,
While the suits keep score from the safest upper floor.
Learn the damn lessons written in the mud and wire:
Talk beats trenches, trade beats fire.
Shut down the drone, pick up the phone-No more "us and them," no more blood for a throne.
[Verse 2]
They're power-hungry kings in modern tailored wear,
Trading lives for leverage like nobody's there.
Sanctions, counter-sanctions, "peace" in quotation marks,
Another "precision" conflict lighting global

Dominic White@singe· Feb 22

Over the years I’ve always used some app to prevent my Mac from locking during long running tasks like password cracking sessions or more recently agentic workflows. But they’re poorly maintained or over complicated. So I made my own. NoLock does what it says on the tin github.com/singe/NoLock

The app icon. A picture of a crescent moon and an open padlock with the text NoLock below it.

Dominic White@singe· Feb 18

I'm impressed by how light weight the Apple on-device Foundation LLM is for Apple Intelligence, so I vibe'd a small macOS tool (26.0+) to interact with them. It supports GUI and CLI and tool calling. Even big responses fail to move the CPU/GPU by a single percentage. Link below.

A screenshot of the GUI searching the web for information about Hari Seldon

Dominic White@singe· Jan 26

I updated that Burp Global Match & Replace plugin to use the Montoya API, be able to target specific Burp tools (or apply globally), extend the rule matching syntax, and give you a view per request and response of the changes. github.com/singe/burp_g...

A screenshot of the rule editing dialog with all the options described in the readme.

Dominic White@singe· Jan 19

In Portswigger's Burp I needed a way to do Match & Replace globally across all utilities, not just the proxy so I wrote an extension github.com/singe/burp_g...

Dominic White@singe· Jan 16

The number of times people have tried to kill Net-NTLMv1 eh? youtu.be/lm7Cuktpnb4?...

Dominic White@singe· Jan 15

I figure the conical burr cup has a mix of extraction flavours all mixed together (due to the initial distribution and higher number of fines). The flat burr made my boring beans taste boring and punished sooner with wrong grind size (but rewards so much more on right). Enjoying these at the moment.

4 coffees two from Dark Matter roasters UK and two from Father Coffee roasters ZA.

Dominic White@singe· Dec 31

Happy 0x7ea Nerds!

A happy hacker crab wishing you a happy new year in pixels. Made with DALL-E

Dominic White@singe· Nov 1

T’was 0xC0N Jozi today. That makes number 9, finally beating ZaC0N’s run of 8 years. It’s such a special con because it’s small and full of passionate attendees - no corporate wage slaves there for a day off work, just a bunch of hackers new and old.

shifttymike’s weaponised infrared remote no touch sensor trigger turned into a key fob. These were the speaker gifts.

Dominic White@singe· Oct 28

Just added SOCKS support to this reverse tunnelling tool github.com/singe/contun...

Three terminals stack on top of eachother. The top is running hub.pl on the host. The middle is running pool.pl on the “hacker” server. And the bottom shows a connection from the host through the hacked server to a target server over SOCKS.

Dominic White@singe· Oct 19

I missed Spinach & was tired of writing hard code that LLMs struggled to help with. So I decided to recreate the functionality of Spinach in a discord world. And so Cabbage was born. Cabbage is private for now, but it’s been so cathartic writing something easy and fun. And vhata saved Spinach’s DB!

A screenshot of the mobile view of GitHub looking at a private repo for the cabbage bot with 10 plugins in the plugins folder.

Dominic White@singe· Oct 11

Unsolicited tick pic

A close up macro picture of a tick (parasite) from Wikipedia with the comment “Ixodes ricinus, a hard tick, engorged”

Dominic White@singe· Sep 30

https://www.reuters.com/world/europe/south-africas-ambassador-france-found-dead-paris-le-parisien-2025-09-30/ 👀

Dominic White@singe· Sep 12

I had occasion to hack on some Wordpress’es and realised there’s a ton of surface area exposed over the "new" REST interfaces. Here's a small utility to convert it into a OpenAPI/Swagger file so you can explore it in your pentests/bug bounty work. github.com/sensepost/wp...

It turns this into this, with two screenshots, one of a browser showing the /wp-json endpoint and the other with a swagger-ui view of the same.

Dominic White@singe· Sep 8

Cyble wanted this blog post taken down … Barbra Streisand (woo ooh ooh woo woo)

Dominic White@singe· Sep 7

Total eclipse blood moon our side of the planet right now.