😈 [ x86matthew, x86matthew ]

ProcEnvInjection - Remote code injection by abusing process environment strings in CreateProcess.

Another method of injecting code into a remote process without using WriteProcessMemory. 🙂

https://t.co/PxaiiFVjV8

🔗 https://www.x86matthew.com/view_post?id=proc_env_injection

🐥 [ tweet ]

😈 [ DebugPrivilege, • ]

The right answer:
I've seen lots of incomplete answers, but only a few people got it right. Also, no. We technically don't even need SeDebugPrivilege :)

🐥 [ tweet ][ quote ]

😈 [ PortSwiggerRes, PortSwigger Research ]

Bypassing CSP with dangling iframes by @garethheyes

https://t.co/G3yPQQfYR2

🔗 https://portswigger.net/research/bypassing-csp-with-dangling-iframes

🐥 [ tweet ]

😈 [ hasherezade, hasherezade ]

Updated #mal_unpack (v0.9.5) is ready! check it out: https://t.co/OCcdgd5AiO // (#PEsieve-based)

🔗 https://github.com/hasherezade/mal_unpack/releases

🐥 [ tweet ]

😈 [ Tyl0us, Matt Eidelberg ]

Small update to ScareCrow. Shoutout to @mariuszbit for the feature request. Check it out: https://t.co/VIQVnKd2tJ
#netsec #redteam #EDR #evasion

🔗 https://github.com/optiv/ScareCrow

🐥 [ tweet ]

😈 [ tiraniddo, James Forshaw ]

The reason I didn't open my RCG bug last month was because MS didn't fix it correctly. As I found out before the 30 day patch soak time was up they got the remainder of the 90 days to really fix it. I guess we'll find out if they did or not soon enough😁https://t.co/YxbpQTR7La

🔗 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30150

🐥 [ tweet ]

😈 [ mariuszbit, Mariusz Banach ]

🔥Working hard on a public release of my Malware Dev CI/CD toolkit

☢️ProtectMyTooling - Multi-Packer, supporting 23+ obfuscators
☢️RedBackdoorer - PE shellcode injection via 6 techniques
☢️RedWatermarker - IOC injector for implants tracking

Already available to my sponsors 😁✨

🐥 [ tweet ]

😈 [ 0gtweet, Grzegorz Tworek ]

A new tool has arrived! 😎
Somewhat like netstat, but with timestamps for connections!⏱
The C source code, and the compiled exe, as usual - https://t.co/dz7BOPzOpW

🔗 https://github.com/gtworek/PSBits/tree/master/NetstatWithTimestamps

🐥 [ tweet ]

😈 [ mubix, Rob Fuller ]

Internet Explorer EOL is today. We never really got along but that doesn’t mean I don’t respect the service you provided all red teamers as an initial infection vector for 27 years, good bye. #IEEoL

🐥 [ tweet ]

😈 [ DirectoryRanger, DirectoryRanger ]

Post Compromise Active Directory Checklist
https://t.co/e85wblANnW

🔗 https://www.pwndefend.com/2021/09/15/post-compromise-active-directory-checklist/

🐥 [ tweet ]

😈 [ SEKTOR7net, SEKTOR7 Institute ]

Hollowing a shell process to run a shellcode, all with just a 'dd'. Introducing DDExec by arget13

https://t.co/njGfKGSUmx

🔗 https://github.com/arget13/DDexec

🐥 [ tweet ]

😈 [ FuzzySec, b33f | 🇺🇦✊ ]

This is great stuff! https://t.co/9hWHgRDu65

🔗 https://zeronetworks.com/blog/stopping_lateral_movement_via_the_rpc_firewall/

🐥 [ tweet ][ quote ]

😈 [ Tyl0us, Matt Eidelberg ]

Seeing the crazy stuff people on my team do always inspires me. In this case, I am talking about @garrfoster for coming up with this amazing DACL parser for Active Directory. This is 🔥! Check it out: https://t.co/SkkWfrVIYl #netsec #redteam

🔗 https://github.com/garrettfoster13/aced

🐥 [ tweet ]

😈 [ Six2dez1, Six2dez ]

OneListForAll repo has reached 1K stars 🥳 and I updated it just now with a few more wordlists repos, even the manually crafted for low-hanging fruits "onelistforallmicro.txt"

Also for the cryptobros I've added BTC address in the GH sponsors button 😉

https://t.co/20iNJ1vtyS

🔗 https://github.com/six2dez/OneListForAll

🐥 [ tweet ]

😈 [ GeKarantzas, NtSetInformationProcess() ]

https://t.co/w8mz6nft5M
Our latest research covered in a colaboratibe blog post. Views expressed belong to the researchers only amd do not represent the EU or present and future employers of people involved.
@C5pider @MDSecLabs @redcode_labs @SentinelOne

🔗 https://www.sentinelone.com/blog/research-paper-emulating-phineas-phisher-attacks-in-modern-edr-environments/

🐥 [ tweet ]

😈 [ 0gtweet, Grzegorz Tworek ]

Definitely worth spreading and adding to your #LOLBIN lists.
Found it only because I have hit the same finding months later :P

Yet another MS-signed #lolbin to run your binaries with: "runexehelper.exe"

🐥 [ tweet ][ quote ]

😈 [ an0n_r0, an0n ]

Sliver setup is effortless. Just tried it, currently the default config (without customization) works well against simple Defender. I think it's worth further playing. I don't think we should say goodbye to CS, but as an alternative, (not just because of this) it is promising.

🐥 [ tweet ][ quote ]

😈 [ BCSecurity1, BC Security ]

A wave of Malicious Doc exploits
has been released over the last year.
Our newest blog from @_Hubbl3
discusses one of the most recent attacks,#Follina, which was only just patched by @Microsoft this week.

https://t.co/HX3TxFZhJ6

🔗 https://www.bc-security.org/post/maldocs-are-evolving/

🐥 [ tweet ]