😈 [ an0n_r0, an0n ]
Sliver setup is effortless. Just tried it, currently the default config (without customization) works well against simple Defender. I think it's worth further playing. I don't think we should say goodbye to CS, but as an alternative, (not just because of this) it is promising.
🐥 [ tweet ][ quote ]
Sliver setup is effortless. Just tried it, currently the default config (without customization) works well against simple Defender. I think it's worth further playing. I don't think we should say goodbye to CS, but as an alternative, (not just because of this) it is promising.
🐥 [ tweet ][ quote ]
👍2
😈 [ BCSecurity1, BC Security ]
A wave of Malicious Doc exploits
has been released over the last year.
Our newest blog from @_Hubbl3
discusses one of the most recent attacks,#Follina, which was only just patched by @Microsoft this week.
https://t.co/HX3TxFZhJ6
🔗 https://www.bc-security.org/post/maldocs-are-evolving/
🐥 [ tweet ]
A wave of Malicious Doc exploits
has been released over the last year.
Our newest blog from @_Hubbl3
discusses one of the most recent attacks,#Follina, which was only just patched by @Microsoft this week.
https://t.co/HX3TxFZhJ6
🔗 https://www.bc-security.org/post/maldocs-are-evolving/
🐥 [ tweet ]
👍1
😈 [ ReconOne_, ReconOne ]
Do you want to focus on "Interesting" subdomains only? Try this 👆
#recontips #bugbountytips #recon #AttackSurface #subdomains #reconone
🐥 [ tweet ]
Do you want to focus on "Interesting" subdomains only? Try this 👆
#recontips #bugbountytips #recon #AttackSurface #subdomains #reconone
🐥 [ tweet ]
😈 [ praetorianlabs, Praetorian ]
Check out our latest blog post where we discuss how we discovered a novel privilege escalation attack path and worked with AWS to clarify inaccuracies regarding IAM permissions
https://t.co/de5gIMPgfK
🔗 https://www.praetorian.com/blog/stsgetsessiontoken-role-chaining-in-aws/
🐥 [ tweet ]
Check out our latest blog post where we discuss how we discovered a novel privilege escalation attack path and worked with AWS to clarify inaccuracies regarding IAM permissions
https://t.co/de5gIMPgfK
🔗 https://www.praetorian.com/blog/stsgetsessiontoken-role-chaining-in-aws/
🐥 [ tweet ]
👍2
😈 [ N4k3dTurtl3, NA ]
"Don't try to prevent the breach, that is impossible. Instead, only try to realize the truth. There is no breach" -- Every bloody CISO
🐥 [ tweet ]
"Don't try to prevent the breach, that is impossible. Instead, only try to realize the truth. There is no breach" -- Every bloody CISO
🐥 [ tweet ]
👍1🔥1
😈 [ NinjaParanoid, Paranoid Ninja (Brute Ratel C4) ]
Apparently these dumbfucks @GeKarantzas @kpatsak joined my BRc4 channel and started falsifying bug-reports/detections after impersonating one of my clients under the handle redteamdaddy. I feel seriously sorry for anyone who hires this guy. What kind of Uni-Professor does that?
🐥 [ tweet ]
Apparently these dumbfucks @GeKarantzas @kpatsak joined my BRc4 channel and started falsifying bug-reports/detections after impersonating one of my clients under the handle redteamdaddy. I feel seriously sorry for anyone who hires this guy. What kind of Uni-Professor does that?
🐥 [ tweet ]
😈 [ VirtualAllocEx, Daniel Feichter ]
Sliver is a nice C2, but I personally can't understand why many people do compare or mess it with Cobalt Strike. Besides Brutel Ratel (BRc4), Cobalt Strike is in my opionion still the C2 leader with the strongest community in the background.
#redteam #itsecurity #pentest
🐥 [ tweet ][ quote ]
Sliver is a nice C2, but I personally can't understand why many people do compare or mess it with Cobalt Strike. Besides Brutel Ratel (BRc4), Cobalt Strike is in my opionion still the C2 leader with the strongest community in the background.
#redteam #itsecurity #pentest
🐥 [ tweet ][ quote ]
😈 [ an0n_r0, an0n ]
some kind of staging: easily injecting a Sliver beacon shellcode (pulled from an http url) into a running process using the ProcessInjection tool by @chiragsavla94 :) https://t.co/L29GbRHkdJ
🔗 https://github.com/3xpl01tc0d3r/ProcessInjection
🐥 [ tweet ][ quote ]
some kind of staging: easily injecting a Sliver beacon shellcode (pulled from an http url) into a running process using the ProcessInjection tool by @chiragsavla94 :) https://t.co/L29GbRHkdJ
🔗 https://github.com/3xpl01tc0d3r/ProcessInjection
🐥 [ tweet ][ quote ]
🔥1
😈 [ _RastaMouse, Rasta Mouse ]
[BLOG]
Short post on how to use Firefox to access internal web apps over SOCKS using NTLM authentication.
https://t.co/8jpKGfWiZW
🔗 https://offensivedefence.co.uk/posts/ntlm-auth-firefox/
🐥 [ tweet ]
[BLOG]
Short post on how to use Firefox to access internal web apps over SOCKS using NTLM authentication.
https://t.co/8jpKGfWiZW
🔗 https://offensivedefence.co.uk/posts/ntlm-auth-firefox/
🐥 [ tweet ]
👍1🔥1
😈 [ ippsec, ippsec ]
I really hated Linux auditing until I found this. Couple it with Laurel and it becomes really easy to ingest these types of logs. Best of all, logging on linux is so rare most adversaries won't see it coming and get caught instantly. Demo here: https://t.co/G29XsbulRm
🔗 https://www.youtube.com/watch?v=lc1i9h1GyMA
🐥 [ tweet ][ quote ]
I really hated Linux auditing until I found this. Couple it with Laurel and it becomes really easy to ingest these types of logs. Best of all, logging on linux is so rare most adversaries won't see it coming and get caught instantly. Demo here: https://t.co/G29XsbulRm
🔗 https://www.youtube.com/watch?v=lc1i9h1GyMA
🐥 [ tweet ][ quote ]
👍2
😈 [ N4k3dTurtl3, NA ]
The possibility of prison time for illegal hacking seems less serious when faced with writing a report for a 9 week assessment.
🐥 [ tweet ]
The possibility of prison time for illegal hacking seems less serious when faced with writing a report for a 9 week assessment.
🐥 [ tweet ]
😈 [ m3g9tr0n, Spiros Fraganastasis ]
I really can't understand why there is so much ego in infosec. Relax, life is short to be pissed off all the time. If you think you are too special just consider there are people out there researching on nuclear physics, applied mathematics, beating diseases without bragging.
🐥 [ tweet ]
I really can't understand why there is so much ego in infosec. Relax, life is short to be pissed off all the time. If you think you are too special just consider there are people out there researching on nuclear physics, applied mathematics, beating diseases without bragging.
🐥 [ tweet ]
👍1
😈 [ metasploit, Metasploit Project ]
This week's wrap-up has a vCenter Secret Extractor 🤫🤫🤫, named pipe pivoting docs updates 📄 , and service library improvements 📚 -- get it here: https://t.co/tbl5VfQKeU
🔗 https://www.rapid7.com/blog/post/2022/06/17/metasploit-weekly-wrap-up-162/
🐥 [ tweet ]
This week's wrap-up has a vCenter Secret Extractor 🤫🤫🤫, named pipe pivoting docs updates 📄 , and service library improvements 📚 -- get it here: https://t.co/tbl5VfQKeU
🔗 https://www.rapid7.com/blog/post/2022/06/17/metasploit-weekly-wrap-up-162/
🐥 [ tweet ]
👍1
👹 [ snovvcrash, sn🥶vvcr💥sh ]
#CME now supports --codec option for execution methods to make the output readable if the target’s OS language is not native English 🥳 🎉 Thanks to @mpgn_x64 for merging! https://t.co/cbtvFS1p7z
🔗 https://github.com/byt3bl33d3r/CrackMapExec/pull/570
🐥 [ tweet ]
#CME now supports --codec option for execution methods to make the output readable if the target’s OS language is not native English 🥳 🎉 Thanks to @mpgn_x64 for merging! https://t.co/cbtvFS1p7z
🔗 https://github.com/byt3bl33d3r/CrackMapExec/pull/570
🐥 [ tweet ]
😈 [ C5pider, 5pider ]
Ekko
Sleep Obfuscation by using CreateTimerQueueTimer to queue the ROP Chain that performs the sleep obfuscation.
https://t.co/DiZt4NDDVn
🔗 https://github.com/Cracked5pider/Ekko
🐥 [ tweet ]
Ekko
Sleep Obfuscation by using CreateTimerQueueTimer to queue the ROP Chain that performs the sleep obfuscation.
https://t.co/DiZt4NDDVn
🔗 https://github.com/Cracked5pider/Ekko
🐥 [ tweet ]
👍1
😈 [ ORCA10K, ORCA ]
pew pew https://t.co/iRNCUwiCuU
🔗 https://gitlab.com/ORCA000/asmlogger
🐥 [ tweet ][ quote ]
pew pew https://t.co/iRNCUwiCuU
🔗 https://gitlab.com/ORCA000/asmlogger
🐥 [ tweet ][ quote ]
👍1