Offensive Xwitter
19.4K subscribers
908 photos
48 videos
21 files
2.09K links
~$ socat TWITTER-LISTEN:443,fork,reuseaddr TELEGRAM:1.3.3.7:31337

Disclaimer: https://xn--r1a.website/OffensiveTwitter/546
Download Telegram
๐Ÿ˜ˆ [ ricnar456, Ricardo Narvaja ]

As promised, the research on CVE-2023-28252 is already published with its PoC and the detailed explanation of the reversing that we did with my friend @solidclt.

๐Ÿ”— https://www.coresecurity.com/core-labs/articles/understanding-cve-2022-37969-windows-clfs-lpe
๐Ÿ”— https://github.com/fortra/CVE-2023-28252

๐Ÿฅ [ tweet ]
๐Ÿ”ฅ6
This media is not supported in your browser
VIEW IN TELEGRAM
ะ”ะพะปะธัั‚ะฐะป ั‚ะฒะธั‚ั‚ะตั€ ะดะพ ั€ะตะนั‚ ะปะธะผะธั‚ะฐ, ะฟะพัั‚ะพะผัƒ ะฒะผะตัั‚ะพ ะฟะพัั‚ะพะฒ ะฟั€ะพ ะฟะตะฝะตั‚ั€ะตัั‚ั‹ ะฒะพั‚
๐Ÿ˜ข8๐Ÿ‘3๐Ÿ”ฅ2
๐Ÿ˜ˆ [ VirtualAllocEx, Daniel Feichter ]

Although the Hell's Gate POC is a few years old, I was interested in understanding it in more detail.
So I wrote the new blog post "Exploring Hell's Gate" - an in-depth look at Hell's Gate.

๐Ÿ”— https://redops.at/en/blog/exploring-hells-gate

๐Ÿฅ [ tweet ]
๐Ÿ‘1
๐Ÿ˜ˆ [ _RastaMouse, Rasta Mouse ]

[BLOG]
Short post showing how C# Source Generators could be used to build customisable implants.

๐Ÿ”— https://rastamouse.me/csharp-source-generators/

๐Ÿฅ [ tweet ]
๐Ÿ‘1
๐Ÿ˜ˆ [ D1rkMtr, D1rkMtr ]

A keystroke logger targeting the Remote Desktop Protocol (RDP) related processes, It utilizes a low-level keyboard input hook, allowing it to record keystrokes in certain contexts (like in mstsc.exe and CredentialUIBroker.exe)

๐Ÿ”— https://github.com/TheD1rkMtr/TakeMyRDP

๐Ÿฅ [ tweet ]
๐Ÿ‘4
๐Ÿ˜ˆ [ HackAndDo, Pixis ]

Here we go, new articles are ready on a brand new and exciting topic, smart contracts security! โ›“๏ธ

โฉTo get things off to a good start, here's the first article, Blockchain 101.
Happy reading!

๐Ÿ”— https://en.hackndo.com/blockchain/

๐Ÿฅ [ tweet ]

ะฝะต ัะธะปัŒะฝะพ ัƒะฒะปะตะบะฐัŽััŒ ะฑะปะพะบั‡ะตะนะฝะฐะผะธ, ะฝะพ ะฟะพั‡ะธั‚ะฐั‚ัŒ ะผะพะถะฝะพ ั€ะฐะท ะพั‚ ัƒะฒะžะถะฐะตะผะพะณะพ ะฐะฒั‚ะพั€ะฐ
๐Ÿ”ฅ4๐Ÿ‘2
๐Ÿ˜ˆ [ sensepost, Orange Cyberdefense's SensePost Team ]

Read how you can JOIN @steampipeio on @pdiscoveryio to get structured output in your reconnaissance / footprinting / bugbounty data in this experimental steampipe plugin by @leonjza!

Code here:

๐Ÿ”— https://sensepost.com/blog/2023/select-from-projectdiscovery-join-steampipe/
๐Ÿ”— https://github.com/sensepost/steampipe-plugin-projectdiscovery

๐Ÿฅ [ tweet ]
๐Ÿ”ฅ2๐Ÿ‘1
๐Ÿ˜ˆ [ Octoberfest73, Octoberfest7 ]

Happy early 4th- TeamsPhisher is out now! Send messages + attachments to external Teams users for the purpose of phishing for access.

This short project was a fun departure from all of the BOF and Post-ex stuff I typically focus on.

#redteam #Malware

๐Ÿ”— https://github.com/Octoberfest7/TeamsPhisher

๐Ÿฅ [ tweet ]
๐Ÿ”ฅ3๐Ÿ˜1
๐Ÿ˜ˆ [ SEKTOR7net, SEKTOR7 Institute ]

A guide to building your engagement infrastructure, by Andrรฉ Tschapeller (@hipstertrojan)

#redteam

๐Ÿ”— https://www.securesystems.de/blog/building-a-red-team-infrastructure-in-2023/

๐Ÿฅ [ tweet ]
๐Ÿ”ฅ1
๐Ÿ˜ˆ [ rayanlecat, Rayan Bouyaiche ]

Hello everyone ! This weekend I participated to @_leHACK_ where i could do the CrackMapExec workshop of @mpgn_x64 . I did a little writeup if you're interested

๐Ÿ”— https://rayanlecat.ghost.io/write-up-workshop-cme-lehack-2023/

๐Ÿฅ [ tweet ]
๐Ÿ”ฅ6
๐Ÿ˜ˆ [ eversinc33, eversinc33 ]

I was tired of manually creating wordlists or having to rely on python for pre2k sprays, so did some small adjustments to @dafthack's DomainPasswordSpray to run pre2k password spraying on all computer objects of a domain.

๐Ÿ”— https://github.com/eversinc33/Invoke-Pre2kSpray

๐Ÿฅ [ tweet ]
๐Ÿ‘3
๐Ÿ˜ˆ [ EricaZelic, typedef struct _MALCOM { ]

Finally has some time to put the LDAP queries tweet in a blog post. Added some brief descriptions, how to enumerate nested group membership and members of Protected Users group.

๐Ÿ”— https://www.politoinc.com/post/ldap-queries-for-offensive-and-defensive-operations

๐Ÿฅ [ tweet ]
๐Ÿ”ฅ1
๐Ÿ˜ˆ [ cnotin, Clรฉment Notin ]

๐Ÿ“„ "How to read Windows serialized certificates"

Sharing a code sample to read binary files in "%APPDATA%\Microsoft\SystemCertificates\My\Certificates", which are serialized certificates, using CryptQueryObject() (and more!)

๐Ÿ”— https://medium.com/tenable-techblog/code-for-reading-windows-serialized-certificates-8634d3487ec7

๐Ÿฅ [ tweet ]
๐Ÿ”ฅ1
๐Ÿ˜ˆ [ 0x6d69636b, Michael Schneider ]

My colleague @m8r1us has written an article about hardware keyloggers:

๐Ÿ”— https://www.scip.ch/en/?labs.20230706

๐Ÿฅ [ tweet ]
๐Ÿ”ฅ1
๐Ÿ˜ˆ [ vxunderground, vx-underground ]

The classic Russian "Hacker" magazine had some of the coolest artwork in the 90s

๐Ÿฅ [ tweet ]

true
๐Ÿ”ฅ10๐Ÿ‘1
๐Ÿ˜ˆ [ ShitSecure, S3cur3Th1sSh1t ]

After holding the talks at @x33fcon
and @WEareTROOPERS
done, I also finally managed to write down my latest research about userland hook evasion:

๐Ÿ”— https://s3cur3th1ssh1t.github.io/Cat_Mouse_or_Chess/

๐Ÿฅ [ tweet ]
๐Ÿ”ฅ3