Pinned
Pasting API keys in an LLM makes me feel kinda gross, so I created agentcordon. It's an agentic key vault that's:
✅Agent agnostic
✅Cedar policies for clear authorization
✅Fully auditable
✅Remote MCP Support
Daniel Heinsen
@hotnops
doin thangs @specterops
- The best creds are the ones you simply ask for =) specterops.io/blog/2025/07/3…
- This post goes more into Entra Connect tradecraft and how partially synced objects can be hijacked for cross domain attacks.
- i'm on the internet this week. head over to advent.cloudsecuritypodcast.tv to hear me talk about tokens and conditional access
- A new fun way to set shadow credentials
