😈 [ OscarAkaElvis, Óscar Alfonso Díaz ]

New Evil-WinRM release (v3.4). Released for the @uad360 cyber security event. C'mon @msftsecurity how about a new Defender signature? Let's dance 😁

https://t.co/PEwvSTxt8p

Thanks @CyberVaca_ @_Laox @arale61

#evilwinrm #winrm #hacking #pentesting

🔗 https://github.com/Hackplayers/evil-winrm

🐥 [ tweet ]

😈 [ 0xdf_, 0xdf ]

Meta is a fun box from @hackthebox_eu centered around image processing. There's exiftool and ImageMagick exploits, and then abusing environment variables with sudo neofetch.

https://t.co/dnavhTIrwF

🔗 https://0xdf.gitlab.io/2022/06/11/htb-meta.html

🐥 [ tweet ]

😈 [ ShitSecure, S3cur3Th1sSh1t ]

Made a short Video regarding to usage && feature description for my Packer. Mostly for my Sponsors but maybe others will also find some interesting things in it as inspiration:
https://t.co/MsJ1sP0ZPt

🔗 https://www.youtube.com/watch?v=UHaIgdzqHDA

🐥 [ tweet ]

😈 [ ReconOne_, ReconOne ]

Want to quickly find publicly exposed MySql backup files? Try this 👇
Credits: @_bughunter

#recontips #AttackSurface #bugbountytips #mysql #reconone

🐥 [ tweet ]

👹 [ snovvcrash, sn🥶vvcr💥sh ]

[#Tooling ⚔️] 🧵 (1/6) A thread of integrating #shellcode #fluctuation technique into DInjector: https://t.co/4VLQkuXO4q

Main credits to @mariuszbit, @_RastaMouse and @ShitSecure for their great tools and blogs which I heavily relied on here.

#redteam #maldev

🔗 https://github.com/snovvcrash/DInjector/blob/0ed4182035f9dcd15cf987519e5f1320f669e962/DInjector/Modules/CurrentThread.cs#L233-L458

🐥 [ tweet ]

😈 [ DirectoryRanger, DirectoryRanger ]

SharpWSUS. CSharp tool for lateral movement through WSUS
https://t.co/0hDHe6ePZs

🔗 https://github.com/nettitude/SharpWSUS

🐥 [ tweet ]

😈 [ ORCA10K, ORCA ]

it's been a while since the last time I played with some c code, so I had to publish something:
https://t.co/LtYkuL2mtq

🔗 https://gitlab.com/ORCA666/kcthijacklib

🐥 [ tweet ]

😈 [ 0gtweet, Grzegorz Tworek ]

The only difference between DnsGetCacheDataTable() and DnsGetCacheDataTableEx() is the first one returns only 15000 entries, while the second one allows you to raise such limit to MAXDWORD by specifying 1 as a parameter.
I need to disappoint you if you expect any documentation 🙄

🐥 [ tweet ]

😈 [ DirectoryRanger, DirectoryRanger ]

From RPE to RCE - Workstation Takeover via RBCD and MR-RPC, by @gladiatx0r
https://t.co/k6JZznbLke

🔗 https://gist.github.com/gladiatx0r/1ffe59031d42c08603a3bde0ff678feb

🐥 [ tweet ]

😈 [ last0x00, last ]

I wrote a non technical post on my blog regarding cybersecurity, nihilistic behavior, and how to stay positive. Sometimes we need a reminder that, after all, things are not that bad.
https://t.co/OGl17xTwco

🔗 https://blog.notso.pro/2022-06-12-avoiding-cyber-nihilism/

🐥 [ tweet ]

😈 [ NandanLohitaksh, Lohitaksh Nandan ]

Best ever Tools 🔧 for Bug Bounty Hunters...

→Amass
→Sublister
→Gauplus
→HTTPX
→Gf tool
→Kxss
→Sqlmap
→Commix
→Tplmap
→HYDRA
→John the ripper
→Burpsuite
→Arjun
→Paramspider
→NoSQLmap
→NMAP
→Nikto
→FFUF
→403-Bypass
→Gobuster

#bugbounty #cybersecurity

🐥 [ tweet ]

😈 [ nas_bench, Nasreddine Bencherchali ]

In addition to the documented "-e/--exec" flag in #lolbas about the "wsl.exe" binary (https://t.co/OrgJ7c7o9N). We can also use the "--system" flag to run Linux (as root) /Windows commands.

wsl --system [Command]

🔗 https://lolbas-project.github.io/lolbas/OtherMSBinaries/Wsl/

🐥 [ tweet ]

😈 [ Flangvik, Melvin langvik ]

👀👀 @_RastaMouse https://t.co/QIeLHNngVz

🔗 https://training.zeropointsecurity.co.uk/courses/red-team-ops-II

🐥 [ tweet ]

😈 [ reverseame, reverseame ]

The curious case of mavinject.exe https://t.co/UcUjZ2wsFR

🔗 https://fourcore.io/blogs/mavinject-curious-process-injection

🐥 [ tweet ]

😈 [ elkement, elkement ]

One more post about Microsoft's recent security updates - re changes to Kerberos and the new certificate extension containing the requester's SID: https://t.co/TbACZaFARl

🔗 https://elkement.blog/2022/06/13/defused-that-san-flag/

🐥 [ tweet ]

😈 [ 0gtweet, Grzegorz Tworek ]

Looks like the only purpose of the undocumented "/debug" parameter for qwinsta.exe is to mess with the output in a way making it useless for bad actors 🙃

🐥 [ tweet ]

😈 [ ORCA10K, ORCA ]

just published "RelocAlloc", a poc to allocate memory for your shellcode, using .reloc section(s), avoiding VirtualAlloc and others
https://t.co/9UNT0aDnJJ

🔗 https://gitlab.com/ORCA666/relocalloc

🐥 [ tweet ]

😈 [ x86matthew, x86matthew ]

ProcEnvInjection - Remote code injection by abusing process environment strings in CreateProcess.

Another method of injecting code into a remote process without using WriteProcessMemory. 🙂

https://t.co/PxaiiFVjV8

🔗 https://www.x86matthew.com/view_post?id=proc_env_injection

🐥 [ tweet ]

😈 [ DebugPrivilege, • ]

The right answer:
I've seen lots of incomplete answers, but only a few people got it right. Also, no. We technically don't even need SeDebugPrivilege :)

🐥 [ tweet ][ quote ]

😈 [ PortSwiggerRes, PortSwigger Research ]

Bypassing CSP with dangling iframes by @garethheyes

https://t.co/G3yPQQfYR2

🔗 https://portswigger.net/research/bypassing-csp-with-dangling-iframes

🐥 [ tweet ]

😈 [ hasherezade, hasherezade ]

Updated #mal_unpack (v0.9.5) is ready! check it out: https://t.co/OCcdgd5AiO // (#PEsieve-based)

🔗 https://github.com/hasherezade/mal_unpack/releases

🐥 [ tweet ]