Dirk-jan ✓

@_dirkjan · joined 13 Dec 2017

Hacker at @OutsiderSec. Researches AD and Azure (AD) security. Likes to play around with Python and write tools that make work easier.

30 262Followers

209Following

2 556Posts total

560.9KViews on collected posts

Postingan terbaru

Dirk-jan ✓@_dirkjan14 Sep

Friday afternoon (vibe)coding project that was on my to-do for a while: obtaining Entra ID tokens from an endpoint by asking the WAM. This alternative to using the PRT cookie follows the legitimate SSO flow used by apps like Teams to obtain tokens. Code: https://t.co/qAEk8lXGYG 17.1K views · 229 likes · 75 reposts · 6 replies Open on X →

Dirk-jan ✓@_dirkjan8 Sep

Awesome work by @c3c: cracking netntlmv1 challenge/response in the browser in minutes without having to download and store TBs of tables! 14.3K views · 145 likes · 22 reposts · 2 replies Open on X →

Dirk-jan ✓@_dirkjan4 Sep

RedTreat day 2 😎 https://t.co/vtHkOgoBMG

4.3K views · 54 likes · 3 reposts · 5 replies Open on X →

Dirk-jan ✓@_dirkjan1 Sep

Spent way too much time figuring out why RDP with a FIDO2 key didn't work. Turns out unlike the WHFB path, using web sign-in for RDP uses a TPM bound (temp, I think) key for TLS. TPM 2.0 up to certain spec versions don't properly implement the required algos for TLS 1.3 signing, 11.1K views · 155 likes · 7 reposts · 3 replies Open on X →

Dirk-jan ✓@_dirkjan17 Sep 2025

@_dirkjan When I read that you felt this was the biggest vuln you’ll ever find, I thought “nah there’s always something bigger around the corner” but then I read the post and yea you might be right. Absolutely wild, and good job! 11K views · 100 likes · 1 reposts · 1 replies Open on X →

Dirk-jan ✓@_dirkjan17 Sep 2025

@_dirkjan We need a new « you get global admin » meme just for you Congrats @_dirkjan 🎉 19.5K views · 70 likes · 0 reposts · 2 replies Open on X →

Dirk-jan ✓@_dirkjan17 Sep 2025

@_dirkjan Crazy https://t.co/UdriPQKdcR

2.6K views · 37 likes · 0 reposts · 1 replies Open on X →

Dirk-jan ✓@_dirkjan17 Sep 2025

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: https://t.co/jD6EaGtsn3 480.9K views · 3.2K likes · 899 reposts · 138 replies Open on X →

Dibandingkan akun berukuran sama

4 postingan dari 90 hari terakhir, dibandingkan dengan rentang 10K–100K pengikut. tampil ke lebih banyak orang dibanding akun seukurannya.

Median tayangan12 720akun ini924median untuk 10K–100K

Jangkauan, %42.03%akun ini3.62%median untuk 10K–100K

Interaksi, %1.46%akun ini1.52%median untuk 10K–100K

Metrik	Akun ini	Median untuk 10K–100K	Rasio
Median tayangan per postingan	12 720	924	13.8×
Jangkauan (tayangan ÷ pengikut)	42.03%	3.62%	11.6×
Tingkat interaksi	1.46%	1.52%	0.96×

Akun lain pada rentang ini → Bandingkan dengan akun lain → Bagaimana tolok ukur ini disusun →

Growth & engagement

How the posts we collected actually performed: views and reaction rate post by post, what the audience did with them, and where the follower count goes.

Views per post

480.9K17 Sep

2.6K

19.5K

11K

11.1K1 Sep

4.3K4 Sep

14.3K8 Sep

17.1K14 Sep

Last 8 collected posts, oldest on the left. The scale is logarithmic: one post can outrun the rest a hundred times over.

Engagement rate per post

0.90%17 Sep

1.47%

0.37%

0.92%

1.49%1 Sep

1.43%4 Sep

1.18%8 Sep

1.83%14 Sep

Reactions — likes, reposts, replies and quotes — divided by views. Median for 10K–100K accounts is 1.52%.

What the audience does

Likes56.9%3 962 in total

Reposts14.5%1 007 in total

Replies2.3%158 in total

Quotes1.7%115 in total

Bookmarks24.7%1 720 in total

Share of every reaction we collected for this account. Replies mean argument, reposts mean endorsement, bookmarks mean the post was worth keeping.

The follower curve appears once this account has two daily snapshots — we take one a day, and this one is on its first.

Postingan terbaru

Dibandingkan akun berukuran sama

Growth & engagement

Views per post

Engagement rate per post

What the audience does

Akun serupa