😈 [ _RastaMouse, Rasta Mouse ]

[BLOG]
Crappy post on creating custom implicit and explicit C# class conversions.

https://t.co/8DAIkC8QEa

🔗 https://offensivedefence.co.uk/posts/implicit-explicit-conversions/

🐥 [ tweet ]

😈 [ _Wra7h, Christian W ]

Wrote a script to create a new .csproj for Seatbelt that will build with just the commands/command group you specify. 1/2
https://t.co/DtlM1GNECj

🔗 https://github.com/Wra7h/PowerShell-Scripts/tree/main/Invoke-Retractor

🐥 [ tweet ]

😈 [ zux0x3a, Lawrence 勞倫斯 | لورانس ]

I have released Linux/Unix-based binary with the same features
check it out: https://t.co/vVZdsTXNKW

🔗 https://ired.dev/discussion/17/a-pascal-reverse-shell-with-encrypted-traffic-using-the-xor-algorithm-linux#latest

🐥 [ tweet ][ quote ]

😈 [ Hackers_bot, ＨＡＣＫＥＲＳＢＯＴ ]

'Love', 'Sex', 'Secret' and 'God'.

🐥 [ tweet ]

😈 [ zux0x3a, Lawrence 勞倫斯 | لورانس ]

Hey, 2023, a reverse shell with the XOR encryption for the communication between server/client, but now with C#. (converted from Pascal release)
https://t.co/JNVNlzYZ8z

🔗 https://github.com/0xsp-SRD/0xsp.com/tree/main/rev_shell_xor_enc

🐥 [ tweet ]

😈 [ mpgn_x64, mpgn ]

In addition to a bug fix, i've also pushed an update on the RDP protocol so you can authenticate a user using kerberos 🔥

Thanks to @SkelSec for this amazing aardwolf lib 🫡

Pushed on @porchetta_ind 🪂

🐥 [ tweet ]

😈 [ _RastaMouse, Rasta Mouse ]

[BLOG]
Backdoor .NET applications via startup hooks.

https://t.co/eh8EibTzHv

🔗 https://rastamouse.me/net-startup-hooks/

🐥 [ tweet ]

😈 [ mpgn_x64, mpgn ]

let's tease a little bit

🐥 [ tweet ]

😈 [ ORCx41, ORCA ]

Released a new technique to perform clean indirect syscalls, in which the syscall is executed from within ntdll address space, You can check it here: https://t.co/d7HiRgq1KA

🔗 https://repo.maldevacademy.com/

🐥 [ tweet ]

😈 [ an0n_r0, an0n ]

WDAC bypass using InstallUtil today. Nothing new, original research by @tiraniddo from 2017. Recreated the technique using ysoserial[.]NET for InstallState file generation (the original tooling is broken for .NET 4.8+). The formatter+gadget chain for arbitrary .NET exec is below.

🐥 [ tweet ][ quote ]

😈 [ naksyn, Diego Capriotti ]

Here's a pure Python implementation of MemoryModule technique to load a dll from memory. If using python is an option in your engagement, you can execute your dlls without injection or shellcode.
check it out!
https://t.co/N7yDE061Hs
#redteaming #DYORredteamtip #evasion

🔗 https://github.com/naksyn/PythonMemoryModule/

🐥 [ tweet ]

😈 [ zer1t0, Eloy ]

I've been playing and implementing HellsGate technique for learning, but found cumbersome to use 2 procedures (HellsGate and HellDescent) for using syscalls, so implemented zsyscall to use syscall in one step. https://t.co/K2sIRzPQwW

🔗 https://gitlab.com/Zer1t0/zsyscall

🐥 [ tweet ]

😈 [ pdiscoveryio, ProjectDiscovery.io ]

Did you know that with the v9.3.3 release of nuclei-templates that you can now detect the top 200 WordPress Plugins with @pdnuclei?

A huge THANK YOU to @_ricardomaia from our community for this powerful addition to Nuclei Templates! Learn more: https://t.co/DmnF6znCmK

🔗 https://github.com/projectdiscovery/nuclei-templates/pull/6202

🐥 [ tweet ]

😈 [ Nigglxax, weak ]

Today I released Alcaztaz - an x64 binary obfuscator featuring:
- Obfuscation of immediate moves
- Control flow flattening
- Mutation / Obfuscation of certain instructions like MOV, ADD, LEA
- Anti disassembly
- Entry point obfuscation

Read more at: https://t.co/UWMkq1Mt9J

🔗 https://github.com/weak1337/Alcatraz

🐥 [ tweet ]

👹 [ snovvcrash, sn🥶vvcr💥sh ]

Submitted another @hackthebox_eu Endgame write-up to Hackplayers (@CyberVaca_, @OscarAkaElvis) - Odyssey this time. Protected with a concatenation of all the flags in the appropriate order. Check it out!

https://t.co/mftkKN7bUx

🔗 https://github.com/Hackplayers/hackthebox-writeups/pull/281

🐥 [ tweet ]

😈 [ daem0nc0re, daem0nc0re ]

Released my CSharp implementation of Phantom DLL Hollowing.
Thanks for your research @_ForrestOrr

https://t.co/kp3OGkauvj

🔗 https://github.com/daem0nc0re/TangledWinExec/tree/main/PhantomDllHollower

🐥 [ tweet ]

😈 [ D1rkMtr, D1rkMtr ]

Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime
https://t.co/5qaUEFm78N

🔗 https://github.com/D1rkMtr/UnhookingPatch

🐥 [ tweet ]

😈 [ an0n_r0, an0n ]

bumped into this openssl `unsupported hash type MD4` error again, this time tried to use Certipy in an offsec lab but not with Kali, used something else.

so here I pushed a micro HOWTO about what to add exactly to openssl cnf in order to solve this:

https://t.co/m0G5MJqC4w

🔗 https://gist.github.com/tothi/392dbb008ae0b60d25cfa4447bc21121

🐥 [ tweet ][ quote ]

*Щёлк*

😈 [ TrustedSec, TrustedSec ]

Don't suffer a LAPS(e) in judgement! Your tools need protection too. Security Consultant @mega_spl0it outlines how to build #Splunk SPL queries to detect attacks against #MicrosoftLAPS in our new #blog. https://t.co/nhcuC6eZx4

🔗 https://hubs.la/Q01xvpTt0

🐥 [ tweet ]

😈 [ decoder_it, ap ]

We did it again with #LocalPotato!
A not-so-common NTLM reflection attack allowing for arbitrary read/write. Basically EoP from user to SYSTEM.
Tracked as #CVE-2023-21746 - Windows NTLM EoP
Soon more details --> https://t.co/Skyn0xdxNN
cc @splinter_code

🔗 http://www.localpotato.com

🐥 [ tweet ]