WinterKnight
@winterknight.net
Long time dumpster fire connoisseur.
Minnesota Stan.
MN and IN CCDC Red Team Lead.
Associate AdSim Consultant at SpecterOps.
Opinions are my own, not of any other entity.
Minnesota Stan.
MN and IN CCDC Red Team Lead.
Associate AdSim Consultant at SpecterOps.
Opinions are my own, not of any other entity.
Now, I’m definitely not a lawyer, but the fact that there even *had* to be a ruling that this violated the 4th amendment is insane. Of course it did. It’s literally the example used in 9th grade civics textbooks.
NEW: A federal court ruling in Minnesota, which notes ICE agents broke the Fourth Amendment by entering a family's home sans warrant, lands as ICE faces scrutiny over a secret memo claiming their agents can enter homes w/ administrative paperwork alone.
US Judge Rules ICE Raids Require Judicial Warrants, Contradicting Secret ICE Memo
The ruling in federal court in Minnesota lands as Immigration and Customs Enforcement faces scrutiny over an internal memo claiming judge-signed warrants aren’t needed to enter homes without consent.
www.wired.com
January 23, 2026 at 10:49 PM
Now, I’m definitely not a lawyer, but the fact that there even *had* to be a ruling that this violated the 4th amendment is insane. Of course it did. It’s literally the example used in 9th grade civics textbooks.
Reposted by WinterKnight
and while you’re here, ready my story today: 8 weeks under siege in Minnesota minnesotareformer.com/2026/01/23/8...
8 weeks under siege in Minnesota • Minnesota Reformer
Frank has a hard time explaining to his 8-year-old daughter why they rarely leave their home in the Twin Cities. Why she can’t go to school, and why he can’t work. “The only thing we tell her is that ...
minnesotareformer.com
January 23, 2026 at 9:28 PM
and while you’re here, ready my story today: 8 weeks under siege in Minnesota minnesotareformer.com/2026/01/23/8...
Reposted by WinterKnight
It’s -9 degrees. Downtown Minneapolis is packed for the anti-ICE rally and the crowd keeps growing
January 23, 2026 at 8:16 PM
It’s -9 degrees. Downtown Minneapolis is packed for the anti-ICE rally and the crowd keeps growing
Reposted by WinterKnight
this photo. minneapolis. 💜
📷️ Alex Kormann/Star Tribune
📷️ Alex Kormann/Star Tribune
January 23, 2026 at 10:04 PM
this photo. minneapolis. 💜
📷️ Alex Kormann/Star Tribune
📷️ Alex Kormann/Star Tribune
It’s frozen eyebrows temperature outside
January 23, 2026 at 6:42 AM
It’s frozen eyebrows temperature outside
Power blip. A few friends apparently had it blip for them too. Lakeville, Brooklyn park, Zimmerman. All over the twin cities.
January 23, 2026 at 3:08 AM
Power blip. A few friends apparently had it blip for them too. Lakeville, Brooklyn park, Zimmerman. All over the twin cities.
He’s right here. Same with engine coolant! For those of you who use primarily water-based coolant, keep the car warm to avert disaster!
Make sure your wiper fluid is good down below freezing if you live in an area where it normally doesn't freeze!
I was leaving DC/VA during a snowstorm and literally dozens of drivers were stuck on the side of the interstate with wiper fluid frozen to their windshields. Not a single shop had fluid.
I was leaving DC/VA during a snowstorm and literally dozens of drivers were stuck on the side of the interstate with wiper fluid frozen to their windshields. Not a single shop had fluid.
January 22, 2026 at 11:06 PM
He’s right here. Same with engine coolant! For those of you who use primarily water-based coolant, keep the car warm to avert disaster!
Reposted by WinterKnight
I was recently laid off, so I’m officially open to new opportunities. If you need a Hacker, or a teachable moment using Red Team tactics. I can also be a trainer, community builder & liaison.
I want more than a job I need a company & purpose I can believe in. Please share!
💜🤗💜
I want more than a job I need a company & purpose I can believe in. Please share!
💜🤗💜
January 22, 2026 at 5:28 PM
I was recently laid off, so I’m officially open to new opportunities. If you need a Hacker, or a teachable moment using Red Team tactics. I can also be a trainer, community builder & liaison.
I want more than a job I need a company & purpose I can believe in. Please share!
💜🤗💜
I want more than a job I need a company & purpose I can believe in. Please share!
💜🤗💜
For any of you who doubt when I say “it gets stupid cold in January” please observe. Also note these are in Fahrenheit so the reasonable amongst you drop those numbers even lower to compensate for sensible units
January 21, 2026 at 7:04 AM
For any of you who doubt when I say “it gets stupid cold in January” please observe. Also note these are in Fahrenheit so the reasonable amongst you drop those numbers even lower to compensate for sensible units
Just left my Lego home to check the news. Best of luck with the snow Bible Belt folks
January 21, 2026 at 6:07 AM
Just left my Lego home to check the news. Best of luck with the snow Bible Belt folks
The fact that running WSL commands as root still runs it in the same user context as the user that ran WSL in the first place makes my inner red teamer sad. No free easy privesc for me.
January 20, 2026 at 5:37 PM
The fact that running WSL commands as root still runs it in the same user context as the user that ran WSL in the first place makes my inner red teamer sad. No free easy privesc for me.
MACCDC completed. Seems like students had fun!
January 18, 2026 at 1:20 AM
MACCDC completed. Seems like students had fun!
Alright after a week of binge drinking in Vegas last week I took a week off. After my CCDC meeting tonight I’m cracking open a cold one to deal with this week
January 17, 2026 at 1:14 AM
Alright after a week of binge drinking in Vegas last week I took a week off. After my CCDC meeting tonight I’m cracking open a cold one to deal with this week
Apparently the D&D Lego set is retiring this year and so after the week I’ve had I finally picked it up before I can’t anymore.
January 16, 2026 at 8:25 PM
Apparently the D&D Lego set is retiring this year and so after the week I’ve had I finally picked it up before I can’t anymore.
Reposted by WinterKnight
Just released a new @specterops.io blog! I discovered that during client push in SCCM env's it's possible to remotely start WebClient and coerce HTTP from site servers for a relay to LDAP resulting in hierarchy takeover when WebClient is installed! 🫠
specterops.io/blog/2026/01...
specterops.io/blog/2026/01...
Wait, Why is my WebClient Started?: SCCM Hierarchy Takeover via NTLM Relay to LDAP - SpecterOps
During automatic client push installation, an SCCM site server automatically attempts to map WebDav shares on clients, starting WebClient when installed.
specterops.io
January 14, 2026 at 6:43 PM
Just released a new @specterops.io blog! I discovered that during client push in SCCM env's it's possible to remotely start WebClient and coerce HTTP from site servers for a relay to LDAP resulting in hierarchy takeover when WebClient is installed! 🫠
specterops.io/blog/2026/01...
specterops.io/blog/2026/01...
Well I guess I’m doing Mid-Atlantic CCDC this weekend
January 14, 2026 at 3:45 PM
Well I guess I’m doing Mid-Atlantic CCDC this weekend
Hellll naw. It’s gorgeous up there. We don’t need any more mines.
plz halp
Congress is moving to strip protections from 225,000 acres near the BWCA.
MN Rep. Stauber introduced H.J. Res. 140, a giveaway to Chilean mining company Antofagasta that puts toxic mining next to our cleanest water.
We have 60 days. Contact Congress & vote NO: www.friends-bwca.org/get-involved...
MN Rep. Stauber introduced H.J. Res. 140, a giveaway to Chilean mining company Antofagasta that puts toxic mining next to our cleanest water.
We have 60 days. Contact Congress & vote NO: www.friends-bwca.org/get-involved...
January 13, 2026 at 8:44 PM
Hellll naw. It’s gorgeous up there. We don’t need any more mines.
Reposted by WinterKnight
SCCM attack paths are messy until you can see them. 👀
ConfigManBearPig from Chris Thompson extends BloodHound with SCCM nodes + edges using OpenGraph, plus queries to surface hierarchy takeovers and escalation paths.
Check it out: ghst.ly/45FCP5G
ConfigManBearPig from Chris Thompson extends BloodHound with SCCM nodes + edges using OpenGraph, plus queries to surface hierarchy takeovers and escalation paths.
Check it out: ghst.ly/45FCP5G
Introducing ConfigManBearPig, a BloodHound OpenGraph Collector for SCCM - SpecterOps
ConfigManBearPig is a standalone PowerShell collector that adds new SCCM attack path nodes and edges to BloodHound using OpenGraph.
ghst.ly
January 13, 2026 at 6:08 PM
SCCM attack paths are messy until you can see them. 👀
ConfigManBearPig from Chris Thompson extends BloodHound with SCCM nodes + edges using OpenGraph, plus queries to surface hierarchy takeovers and escalation paths.
Check it out: ghst.ly/45FCP5G
ConfigManBearPig from Chris Thompson extends BloodHound with SCCM nodes + edges using OpenGraph, plus queries to surface hierarchy takeovers and escalation paths.
Check it out: ghst.ly/45FCP5G
For those of you here who are responsible for defending SCCM, my coworker released ConfigManBearPig, which allows you to map SCCM attack paths with the rest of your BloodHound Graph!
specterops.io/blog/2026/01...
specterops.io/blog/2026/01...
Introducing ConfigManBearPig, a BloodHound OpenGraph Collector for SCCM - SpecterOps
ConfigManBearPig is a standalone PowerShell collector that adds new SCCM attack path nodes and edges to BloodHound using OpenGraph.
specterops.io
January 13, 2026 at 6:31 PM
For those of you here who are responsible for defending SCCM, my coworker released ConfigManBearPig, which allows you to map SCCM attack paths with the rest of your BloodHound Graph!
specterops.io/blog/2026/01...
specterops.io/blog/2026/01...
Thanks to @swiftonsecurity.com my programming session tonight will be powered by a mashup of all the variants of one winged angel I can find on Apple Music.
January 13, 2026 at 2:39 AM
Thanks to @swiftonsecurity.com my programming session tonight will be powered by a mashup of all the variants of one winged angel I can find on Apple Music.
2 student loans to go!
January 12, 2026 at 5:10 PM
2 student loans to go!
Async programming in Python is confusing but I think I’m starting to get it.
January 12, 2026 at 2:30 AM
Async programming in Python is confusing but I think I’m starting to get it.
Been out in Vegas for a work thing the last week, and it’s fucking crazy how much shits been set on fire in such a short amount of time.
January 9, 2026 at 8:44 PM
Been out in Vegas for a work thing the last week, and it’s fucking crazy how much shits been set on fire in such a short amount of time.
One of my favorite new year videos!
January 2, 2026 at 12:34 AM
One of my favorite new year videos!
Reposted by WinterKnight
The Disappointment PC Build is here: www.youtube.com/watch?v=NHO9...
The Destruction of Home Computers | Disappointment PC Build 2025
YouTube video by Gamers Nexus
www.youtube.com
January 1, 2026 at 11:50 PM
The Disappointment PC Build is here: www.youtube.com/watch?v=NHO9...