😈 [ ippsec, ippsec ]

I really hated Linux auditing until I found this. Couple it with Laurel and it becomes really easy to ingest these types of logs. Best of all, logging on linux is so rare most adversaries won't see it coming and get caught instantly. Demo here: https://t.co/G29XsbulRm

🔗 https://www.youtube.com/watch?v=lc1i9h1GyMA

🐥 [ tweet ][ quote ]

😈 [ tiraniddo, James Forshaw ]

On that note, there are obvious ways of bypassing the mitigation... I would try it on Windows 11 to see if it still worked if I cared enough to install that abomination 😁

🐥 [ tweet ][ quote ]

😈 [ N4k3dTurtl3, NA ]

The possibility of prison time for illegal hacking seems less serious when faced with writing a report for a 9 week assessment.

🐥 [ tweet ]

😈 [ m3g9tr0n, Spiros Fraganastasis ]

I really can't understand why there is so much ego in infosec. Relax, life is short to be pissed off all the time. If you think you are too special just consider there are people out there researching on nuclear physics, applied mathematics, beating diseases without bragging.

🐥 [ tweet ]

😈 [ metasploit, Metasploit Project ]

This week's wrap-up has a vCenter Secret Extractor 🤫🤫🤫, named pipe pivoting docs updates 📄 , and service library improvements 📚 -- get it here: https://t.co/tbl5VfQKeU

🔗 https://www.rapid7.com/blog/post/2022/06/17/metasploit-weekly-wrap-up-162/

🐥 [ tweet ]

👹 [ snovvcrash, sn🥶vvcr💥sh ]

#CME now supports --codec option for execution methods to make the output readable if the target’s OS language is not native English 🥳 🎉 Thanks to @mpgn_x64 for merging! https://t.co/cbtvFS1p7z

🔗 https://github.com/byt3bl33d3r/CrackMapExec/pull/570

🐥 [ tweet ]

😈 [ C5pider, 5pider ]

Ekko
Sleep Obfuscation by using CreateTimerQueueTimer to queue the ROP Chain that performs the sleep obfuscation.
https://t.co/DiZt4NDDVn

🔗 https://github.com/Cracked5pider/Ekko

🐥 [ tweet ]

😈 [ ORCA10K, ORCA ]

pew pew https://t.co/iRNCUwiCuU

🔗 https://gitlab.com/ORCA000/asmlogger

🐥 [ tweet ][ quote ]

😈 [ filip_dragovic, Filip Dragovic ]

Spooler service disabled, RPC filters installed to prevent PetitPotam and File Server VSS Agent Service not installed but you still want to relay DC authentication to ADCS?
Don't worry MS-DFSNM have your back ;)

https://t.co/idwMnM8nIV

🔗 https://github.com/Wh04m1001/DFSCoerce

🐥 [ tweet ]

😈 [ hasherezade, hasherezade ]

Now you can use #mal_unpack via dedicated Python wrappers: https://t.co/9wy3DVR2Ez

🔗 https://github.com/hasherezade/mal_unpack_py

🐥 [ tweet ][ quote ]

😈 [ 0xdf_, 0xdf ]

Paper from @hackthebox_eu is themed on The Office, and is a lot of fun. There's a WordPress vuln, a https://t.co/YmCr3bYY7J bot, and a Polkit CVE. In Beyond root I'll show why it is not vulnerable to PwnKit, and then make it vulnerable and exploit it.

https://t.co/noix1pLv5O

🔗 http://Rocket.Chat
🔗 https://0xdf.gitlab.io/2022/06/18/htb-paper.html

🐥 [ tweet ]

😈 [ DirectoryRanger, DirectoryRanger ]

Windows Credential Dumping, by @jangeisbauer
https://t.co/5eNERw95K5

🔗 https://emptydc.com/2022/06/08/windows-credential-dumping/

🐥 [ tweet ]

😈 [ SkelSec, SkelSec ]

Pentest framework running entirely* in the browser via @pyodide
OctoPwnWeb has been presented @a41con. This project was in the making for years Support us @porchetta_ind
Talk
https://t.co/l2z0x63cIk
Slides
https://t.co/Nx3Egczptq
Tool
https://t.co/FgZbJHOrsi
*deets in the talk

🔗 https://youtu.be/jStdrDHTmD4
🔗 https://docs.google.com/presentation/d/1XQFYr_OBI1lrpybsLrHWTWcYNZcF_zOmGDHiIBwSMng
🔗 http://octopwn.porchetta.industries/

🐥 [ tweet ]

👹 [ snovvcrash, sn🥶vvcr💥sh ]

[#Tooling ⚔️] Added @jor6PS’s DrawNmap project for visualizing Nmap reports to #DivideAndScan. Dunno whether it’s really needed there, but I was just bored I guess. DrawNmap is cool anyway, take a look: https://t.co/6jW8grFb9F

#nmap #portscan

🔗 https://github.com/jor6PS/DrawNmap

🐥 [ tweet ]

😈 [ NinjaParanoid, Paranoid Ninja (Brute Ratel C4) ]

A brief explanation on open source Sleep Obfuscation Techniques v/s Brute Ratel C4. Video includes x64dbg and Process Hacker to provide POC!!! Because POC > Shitposting!! Cheers!
https://t.co/1Xizj5CjHJ

🔗 https://youtu.be/nB5QHVtN9_g

🐥 [ tweet ]

😈 [ an0n_r0, an0n ]

just wanted to see how difficult it is to run CS BOF inside Sliver (tested NoteThief BOF by @trainr3kt). it is super easy! the coff-loader extension in the Sliver armory provides the compatibility layer (code is unchanged), only had to add an ext json: https://t.co/I8dPsvoV3M.

🔗 https://github.com/tothi/NoteThief/blob/main/extension.json

🐥 [ tweet ]

😈 [ _Kudaes_, Kurosh Dabbagh ]

I've just pushed an small update on Dumpy with some new features:
- x86 support.
- New flag "upload" that allows to send the xored dump through HTTP directly from memory, avoiding to store it on disk.
- New help menu.

https://t.co/dvope0TAD9

🔗 https://github.com/Kudaes/Dumpy

🐥 [ tweet ]

😈 [ BCSecurity1, BC Security ]

Empire 5.0-alpha is entering closed testing starting this week. Community Contributors and Sponsors can access the 5.0-dev branch and test the last builds! Here is a preview of the new integrated Starkiller GUI hosted through the web.
https://t.co/ZvNDIVrb1Z

🔗 https://github.com/sponsors/BC-SECURITY

🐥 [ tweet ]

👹 [ snovvcrash, sn🥶vvcr💥sh ]

[#HackTip 🛠] Some tips and links on how NTDS reversible encryption usage (means you can DCSync cleartext passwords) can be enumerated during an AD security assessment:

🔗 https://t.co/pjUzcqzxYK
🔗 https://t.co/km8ZhkrJrt

#ntds #ad #adsecurity

🔗 https://adsecurity.org/?p=2053
🔗 https://www.blackhillsinfosec.com/how-i-cracked-a-128-bit-password/

🐥 [ tweet ]

😈 [ DebugPrivilege, - ]

#HuntingTipOfTheDay - 'I bypassed Windows Defender' - Uh not really? I highly recommend Red Teamers that claim this kind of stuff to take a close look to the MpLogs and MpDetection files.

🐥 [ tweet ]