Matthew Flanagan
@mattimustang.com
Director and Principal Cyber Security Consultant @cybliminal.com
The Palo Alto Networks firewall Master Key is p1a2l3o4a5l6t7o8 and it is well past time you changed it!
August 18, 2026 at 11:39 AM
The Palo Alto Networks firewall Master Key is p1a2l3o4a5l6t7o8 and it is well past time you changed it!
In PAN-OS 12.2.2 Palo Alto Networks added a new feature called PAN-OS Shield to protect GlobalProtect.
It’s a virtual firewall with a subset of threat sigs for GlobalProtect exploits.
They are literally putting a firewall in front of a firewall!
docs.paloaltonetworks.com/ngfw/adminis...
It’s a virtual firewall with a subset of threat sigs for GlobalProtect exploits.
They are literally putting a firewall in front of a firewall!
docs.paloaltonetworks.com/ngfw/adminis...
PAN-OS Shield
Enable PAN-OS Shield to protect control traffic destined for the firewall management
plane against vulnerability exploits.
docs.paloaltonetworks.com
August 12, 2026 at 10:37 PM
In PAN-OS 12.2.2 Palo Alto Networks added a new feature called PAN-OS Shield to protect GlobalProtect.
It’s a virtual firewall with a subset of threat sigs for GlobalProtect exploits.
They are literally putting a firewall in front of a firewall!
docs.paloaltonetworks.com/ngfw/adminis...
It’s a virtual firewall with a subset of threat sigs for GlobalProtect exploits.
They are literally putting a firewall in front of a firewall!
docs.paloaltonetworks.com/ngfw/adminis...
I had a great time presenting to the @bsidesmelbourne.bsky.social crowd on the weekend. Thanks to the crew and volunteers for running such a welcoming, vibrant conference, with a great selection of talks!
Big ❤️ to Edwina Richards for the photos!
#BSidesMelb2026 #WontSomebodyPleaseEatTheFruit
Big ❤️ to Edwina Richards for the photos!
#BSidesMelb2026 #WontSomebodyPleaseEatTheFruit
May 19, 2026 at 7:56 AM
I had a great time presenting to the @bsidesmelbourne.bsky.social crowd on the weekend. Thanks to the crew and volunteers for running such a welcoming, vibrant conference, with a great selection of talks!
Big ❤️ to Edwina Richards for the photos!
#BSidesMelb2026 #WontSomebodyPleaseEatTheFruit
Big ❤️ to Edwina Richards for the photos!
#BSidesMelb2026 #WontSomebodyPleaseEatTheFruit
I'm excited to announce I'll be taking the stage at @bsidesmelbourne.bsky.social 16-17 May 2026 at SEEK HQ in Cremorne.
I'll be presenting Panning for Gold: A Hacker's Guide to Next Generation Firewalls on how attackers can exploit FW features and weaknesses to increase the impact of a compromise.
I'll be presenting Panning for Gold: A Hacker's Guide to Next Generation Firewalls on how attackers can exploit FW features and weaknesses to increase the impact of a compromise.
April 17, 2026 at 7:30 AM
I'm excited to announce I'll be taking the stage at @bsidesmelbourne.bsky.social 16-17 May 2026 at SEEK HQ in Cremorne.
I'll be presenting Panning for Gold: A Hacker's Guide to Next Generation Firewalls on how attackers can exploit FW features and weaknesses to increase the impact of a compromise.
I'll be presenting Panning for Gold: A Hacker's Guide to Next Generation Firewalls on how attackers can exploit FW features and weaknesses to increase the impact of a compromise.
Reposted by Matthew Flanagan
What do you do when you find yourself the new owner of Kubernetes config during a pentest? Find out the answer, and more with Finn Foulds-Cook during his talk on Saturday - "Help I got a k8s config?"
March 17, 2026 at 2:52 AM
What do you do when you find yourself the new owner of Kubernetes config during a pentest? Find out the answer, and more with Finn Foulds-Cook during his talk on Saturday - "Help I got a k8s config?"
Reposted by Matthew Flanagan
Our friends @cybliminal.com l have been ongoing supporters and with just over a week left, we wanted to throw another thank you their way. Big hugs to Matthew Flanagan and the Cybliminal crew for supporting our con!
March 11, 2026 at 8:00 AM
Our friends @cybliminal.com l have been ongoing supporters and with just over a week left, we wanted to throw another thank you their way. Big hugs to Matthew Flanagan and the Cybliminal crew for supporting our con!
Reposted by Matthew Flanagan
Hey hey Women of CrikeyCon! Get your tickets for the networking event here:
events.humanitix.com/women-of-cri...
events.humanitix.com/women-of-cri...
Women of CrikeyCon 11 networking event
Get tickets on Humanitix - Women of CrikeyCon 11 networking event. Venue provided after registering for a ticket!. Thursday 19th March 2026. Find event information.
events.humanitix.com
March 10, 2026 at 4:11 AM
Hey hey Women of CrikeyCon! Get your tickets for the networking event here:
events.humanitix.com/women-of-cri...
events.humanitix.com/women-of-cri...
Reposted by Matthew Flanagan
Come join Alex Tilley on stage as we're brought through lived experiences in "Real world management in the world of Bad Days". We're stoked to hear this one as no one wants to deal with, but everyone should be prepped to get through, a massively bad day.
March 11, 2026 at 3:25 AM
Come join Alex Tilley on stage as we're brought through lived experiences in "Real world management in the world of Bad Days". We're stoked to hear this one as no one wants to deal with, but everyone should be prepped to get through, a massively bad day.
Reposted by Matthew Flanagan
First up on 21st March we have @ellearmageddon.bsky.social taking the stage. Elle's joining us with their talk "nothing we do matters (so it can’t hurt to try!)". Join us to see them at the RNA showgrounds, and get some much needed hope in these times!
March 10, 2026 at 6:37 AM
First up on 21st March we have @ellearmageddon.bsky.social taking the stage. Elle's joining us with their talk "nothing we do matters (so it can’t hurt to try!)". Join us to see them at the RNA showgrounds, and get some much needed hope in these times!
We’ll be there again this year supporting these wonderful people ❤️🔥 I’m looking forward to seeing Elle Armageddon’s keynote.
If you spot us say Hi…we might just have some @cybergoodies.run t-shirts to give away.
If you spot us say Hi…we might just have some @cybergoodies.run t-shirts to give away.
We're two weeks and counting so we wanted to give another shout out to @cybliminal.com. Thank you so much for their sponsorship, providing us support to host CrikeyCon 11!
March 9, 2026 at 11:15 AM
We’ll be there again this year supporting these wonderful people ❤️🔥 I’m looking forward to seeing Elle Armageddon’s keynote.
If you spot us say Hi…we might just have some @cybergoodies.run t-shirts to give away.
If you spot us say Hi…we might just have some @cybergoodies.run t-shirts to give away.
Reposted by Matthew Flanagan
Our schedule is up, and we're excited to announce our speaker @snyff.pentesterlab.com is joining us on stage with I DON'T LIKE THIS CODE!!! Get ready to walk through a series of real-world inspired code snippets with one minute to figure it out. Only question, will there be jeopardy music?
March 9, 2026 at 12:31 AM
Our schedule is up, and we're excited to announce our speaker @snyff.pentesterlab.com is joining us on stage with I DON'T LIKE THIS CODE!!! Get ready to walk through a series of real-world inspired code snippets with one minute to figure it out. Only question, will there be jeopardy music?
Reposted by Matthew Flanagan
Thanks Crikey crew! It’s a great bunch of speaker you’ve got lined up this year. Can’t wait to see the! 😍
We're two weeks and counting so we wanted to give another shout out to @cybliminal.com. Thank you so much for their sponsorship, providing us support to host CrikeyCon 11!
March 9, 2026 at 8:04 AM
Thanks Crikey crew! It’s a great bunch of speaker you’ve got lined up this year. Can’t wait to see the! 😍
Reposted by Matthew Flanagan
Wow!
We’re over 2/3 of the way through the tickets now, we’ll keep on selling til capacity or the day before, but merchandise pre-sales will end on Sunday as we have to finalise the order!
There will be some for sale on the day too but no guarantees on sizes....
Head to www.crikeycon.com
We’re over 2/3 of the way through the tickets now, we’ll keep on selling til capacity or the day before, but merchandise pre-sales will end on Sunday as we have to finalise the order!
There will be some for sale on the day too but no guarantees on sizes....
Head to www.crikeycon.com
www.crikeycon.com
March 6, 2026 at 3:57 AM
Wow!
We’re over 2/3 of the way through the tickets now, we’ll keep on selling til capacity or the day before, but merchandise pre-sales will end on Sunday as we have to finalise the order!
There will be some for sale on the day too but no guarantees on sizes....
Head to www.crikeycon.com
We’re over 2/3 of the way through the tickets now, we’ll keep on selling til capacity or the day before, but merchandise pre-sales will end on Sunday as we have to finalise the order!
There will be some for sale on the day too but no guarantees on sizes....
Head to www.crikeycon.com
Reposted by Matthew Flanagan
CFP and CFE has officially closed. We had a huge turnout, thank you so much for your time and effort to submit your ideas. Droppy & the Sleuth are busily reviewing and looking to get a response to everyone that submitted latest by the 21st.
Reach out if you have any questions!
Droppy & the Sleuth
Reach out if you have any questions!
Droppy & the Sleuth
February 2, 2026 at 1:14 AM
CFP and CFE has officially closed. We had a huge turnout, thank you so much for your time and effort to submit your ideas. Droppy & the Sleuth are busily reviewing and looking to get a response to everyone that submitted latest by the 21st.
Reach out if you have any questions!
Droppy & the Sleuth
Reach out if you have any questions!
Droppy & the Sleuth
Reposted by Matthew Flanagan
New BSides Canberra IX look unlocked.
Blue tones, laser lines, and energy straight out of the grid.
Website updated, more to come.
Blue tones, laser lines, and energy straight out of the grid.
Website updated, more to come.
January 30, 2026 at 5:04 AM
New BSides Canberra IX look unlocked.
Blue tones, laser lines, and energy straight out of the grid.
Website updated, more to come.
Blue tones, laser lines, and energy straight out of the grid.
Website updated, more to come.
Reposted by Matthew Flanagan
Sunday when CFP and CFE closes, get your ideas in now!
CFP: docs.google.com/forms/d/e/1F...
CFE: docs.google.com/forms/d/e/1F...
CFP: docs.google.com/forms/d/e/1F...
CFE: docs.google.com/forms/d/e/1F...
CrikeyCon 11 (2026) Call for Presentations
*** CFE CLOSES February 1 2026 ***
Saturday March 21 2026
Royal International Convention Centre, Bowen Hills, Brisbane, QLD
CrikeyCon is a community-led conference targeting those with an interest i...
docs.google.com
January 28, 2026 at 7:29 AM
Sunday when CFP and CFE closes, get your ideas in now!
CFP: docs.google.com/forms/d/e/1F...
CFE: docs.google.com/forms/d/e/1F...
CFP: docs.google.com/forms/d/e/1F...
CFE: docs.google.com/forms/d/e/1F...
Reposted by Matthew Flanagan
We have had some awesome submissions already, but if you've got that talk up your sleeve or a great idea for a workshop or longer presentation then we're all ears.
Put your paw up to be part of the show!!
Put your paw up to be part of the show!!
Sunday when CFP and CFE closes, get your ideas in now!
CFP: docs.google.com/forms/d/e/1F...
CFE: docs.google.com/forms/d/e/1F...
CFP: docs.google.com/forms/d/e/1F...
CFE: docs.google.com/forms/d/e/1F...
CrikeyCon 11 (2026) Call for Presentations
*** CFE CLOSES February 1 2026 ***
Saturday March 21 2026
Royal International Convention Centre, Bowen Hills, Brisbane, QLD
CrikeyCon is a community-led conference targeting those with an interest i...
docs.google.com
January 29, 2026 at 1:18 AM
We have had some awesome submissions already, but if you've got that talk up your sleeve or a great idea for a workshop or longer presentation then we're all ears.
Put your paw up to be part of the show!!
Put your paw up to be part of the show!!
Reposted by Matthew Flanagan
Happy New Year!
CrikeyCon 11 is three months away. Come join us in Brisbane on 21st of March for informal, welcoming, real knowledge sharing — from hard-won lessons, to clever demos and challenges, or testing fresh ideas. Grab your ticket: events.humanitix.com/crikeycon-11
CrikeyCon 11 is three months away. Come join us in Brisbane on 21st of March for informal, welcoming, real knowledge sharing — from hard-won lessons, to clever demos and challenges, or testing fresh ideas. Grab your ticket: events.humanitix.com/crikeycon-11
CrikeyCon 11
Brisbane hacker conference, run by the community for the community.
events.humanitix.com
January 7, 2026 at 11:17 PM
Happy New Year!
CrikeyCon 11 is three months away. Come join us in Brisbane on 21st of March for informal, welcoming, real knowledge sharing — from hard-won lessons, to clever demos and challenges, or testing fresh ideas. Grab your ticket: events.humanitix.com/crikeycon-11
CrikeyCon 11 is three months away. Come join us in Brisbane on 21st of March for informal, welcoming, real knowledge sharing — from hard-won lessons, to clever demos and challenges, or testing fresh ideas. Grab your ticket: events.humanitix.com/crikeycon-11
Reposted by Matthew Flanagan
Huge thanks to @infosectcbr.bsky.social who have returned as Gold Sponsors! Their contribution to the communities around us make us so proud to get their support and sponsorship. Many hugs, Droppy & The Sleuth
December 7, 2025 at 6:30 AM
Huge thanks to @infosectcbr.bsky.social who have returned as Gold Sponsors! Their contribution to the communities around us make us so proud to get their support and sponsorship. Many hugs, Droppy & The Sleuth
Reposted by Matthew Flanagan
@_dirkjan and my joint talk at #TROOPERS25 is now available on YouTube.
"Finding Entra ID CA Bypasses - the structured way" @wearetroopers.bsky.social
youtu.be/yYQBeDFEkps
"Finding Entra ID CA Bypasses - the structured way" @wearetroopers.bsky.social
youtu.be/yYQBeDFEkps
TROOPERS25: Finding Entra ID CA Bypasses - The Structured Way
YouTube video by TROOPERS IT Security Conference
youtu.be
November 27, 2025 at 5:35 AM
@_dirkjan and my joint talk at #TROOPERS25 is now available on YouTube.
"Finding Entra ID CA Bypasses - the structured way" @wearetroopers.bsky.social
youtu.be/yYQBeDFEkps
"Finding Entra ID CA Bypasses - the structured way" @wearetroopers.bsky.social
youtu.be/yYQBeDFEkps
If you missed my talk at BSides Canberra you can catch up on it now on YouTube
New BSides Canberra 2025 talk by Matthew Flanagan is now live:
“Panning for Gold - A Hacker’s Guide to Next Generation Firewalls.”
Watch here: youtu.be/2PF4aSY1gVo
“Panning for Gold - A Hacker’s Guide to Next Generation Firewalls.”
Watch here: youtu.be/2PF4aSY1gVo
Panning for Gold - A Hacker's Guide to Next Generation Firewalls - Matthew Flanagan, BSides Cbr 2025
YouTube video by BSides Canberra
youtu.be
November 25, 2025 at 1:59 AM
If you missed my talk at BSides Canberra you can catch up on it now on YouTube
Reposted by Matthew Flanagan
Big shout out to @cybliminal.com our first silver sponsor this year! Massive hugs for the returning support; can't wait to see you out at the showgrounds.
November 15, 2025 at 10:21 PM
Big shout out to @cybliminal.com our first silver sponsor this year! Massive hugs for the returning support; can't wait to see you out at the showgrounds.
Reposted by Matthew Flanagan
Lots of DMs asking for BSides Canberra 2025 talks — they’ll be on YouTube in a month+ 🎥 Speakers are reviewing their sessions first, so stay tuned!
👉 youtube.com/@bsidescanbe...
👉 youtube.com/@bsidescanbe...
BSides Canberra
youtube.com
October 3, 2025 at 8:55 PM
Lots of DMs asking for BSides Canberra 2025 talks — they’ll be on YouTube in a month+ 🎥 Speakers are reviewing their sessions first, so stay tuned!
👉 youtube.com/@bsidescanbe...
👉 youtube.com/@bsidescanbe...
Reposted by Matthew Flanagan
Celebrating 10 years of amazing artwork for BSides Canberra! 🎨 Huge thanks to Sydney-based Aussie Glenno for bringing our logos to life. Real artists > AI every time.
www.instagram.com/glennoart?ig...
www.instagram.com/glennoart?ig...
October 3, 2025 at 10:16 PM
Celebrating 10 years of amazing artwork for BSides Canberra! 🎨 Huge thanks to Sydney-based Aussie Glenno for bringing our logos to life. Real artists > AI every time.
www.instagram.com/glennoart?ig...
www.instagram.com/glennoart?ig...
Thanks again to @bsidescbr.bsky.social for inviting me to present my research on living off the land on Palo Alto Networks firewalls as well as sharing new tools I’ve developed to creatively misuse 😜 firewall features for credential harvesting and port scanning.
Some great questions too!
Some great questions too!
September 29, 2025 at 7:22 AM
Thanks again to @bsidescbr.bsky.social for inviting me to present my research on living off the land on Palo Alto Networks firewalls as well as sharing new tools I’ve developed to creatively misuse 😜 firewall features for credential harvesting and port scanning.
Some great questions too!
Some great questions too!