Constantin @HackmichNet

Windows security novice ... Always try to learn something new ... Happy hacking hackmich.net Joined June 2011

Tweets

4K
Followers

465
Following

2K
Likes

698

Dr. Nestori Syynimaa @DrAzureAD

3 days ago

One of the best sessions I've seen for years! A deep-dive to Entra architecture, high availability, etc. 🤯 Must see for all Entra enthusiasts!

Merill Fernando @merill

5 days ago

One of the best sessions I've seen for years! A deep-dive to Entra architecture, high availability, etc. 🤯 Must see for all Entra enthusiasts!

3 40 221 22K 229

Download Video

2 29 167 12K 143

Jason Lang @curi0usJack

5 days ago

A huge list of interesting Azure Sentinel hunting queries to give you some inspiration for your next purple team. github.com/Azure/Azure-Se…

2 38 167 15K 179

Panos Gkatziroulis 🦄 @netbiosX

a week ago

A Nightmare on EDR Street: WDAC's Revenge beierle.win/2025-08-28-A-N…

0 33 154 8K 90

Dirk-jan @_dirkjan

a week ago

It seems there now is a BOF implementation of ADSyncDecrypt to dump Entra ID connect creds 👀 github.com/Paradoxis/ADSy…

1 84 258 14K 151

r1cksec @r1cksec

2 weeks ago

Dump Kerberos tickets like Rubeus's dump command🕵️‍♂️ github.com/Fudgedotdotdot… #infosec #cybersecurity #pentest #redteam

0 1 1 99 0

Documentation is key in #DetectionEngineering! Automate it with Jinja & Git for streamlined processes. Plus, generate changelogs to keep teams informed and improve collaboration. Discover more in @_st0pp3r_ latest blogpost 👉 blog.nviso.eu/2025/08/26/det…

0 13 47 3K 14

Download Image

spencer @techspence

2 weeks ago

Super interesting project... I have many ideas github.com/mihemihe/myADM…

0 41 207 11K 193

sapir federovsky @sapirxfed

2 weeks ago

WOW!!! temp43487580.github.io/intune/bypass-… @TEMP43487580 such a good post!!! it is so well written, interesting research and great results! Thank you! 🤩

1 13 76 4K 43

CICADA8Research @CICADA8Research

3 weeks ago

Hi Friends! We continue our series of articles about RPC and impacket. In the second part, we looked at tools that can be used to analyze RPC servers, and also examined RPC security issues : ) cicada-8.medium.com/impacket-devel…

0 34 83 10K 52

SpecterOps @SpecterOps

2 weeks ago

Trying to fly under EDR's radar? @_logangoins explains how to use HTTP-to-LDAP relay attacks to execute tooling completely off-host through the C2 payload context. Perfect for when you need LDAP access but want to avoid being caught stealing creds. ghst.ly/41mjMv7

2 74 225 12K 139

Haidar @haider_kabibo

2 weeks ago

I found that using RegQueryMultipleValuesW to read sensitive registry values bypasses nearly all the EDRs I tested. Alongside NtOpenKeyEx with OpenOptions 0x04, you can read Windows secrets without touching the disk and without SYSTEM. More here: sud0ru.ghost.io/silent-harvest…

6 53 215 16K 159

Download Image

RedTeam Pentesting @RedTeamPT

3 weeks ago

👀Turns out MS-EVEN can do a lot more than NULL auth: In addition to leaking environment variables, it is possible to coerce authentication from arbitrary logged on users* 🤯 *If you are willing to trigger Windows Defender.

1 45 165 18K 99

Steven @0xthirteen

2 weeks ago

I wanted to find out if you could start the WebClient service remotely, so I ended up digging into it specterops.io/blog/2025/08/1…

1 57 114 10K 50

Haidar @haider_kabibo

3 weeks ago

IPC 6 is live; RPC 5; RPC Security 3. In this part, I discussed how to secure RPC endpoints and the RPC runtime system policy. The final part of the first wave of IPC will be next, where I will talk about tooling in RPC research. sud0ru.ghost.io/windows-inter-…

0 28 83 7K 49

Wil @wil_fri3d

3 weeks ago

gpoParser, which I presented at #leHACK2025 and #DEFCON, is available here: github.com/synacktiv/gpoP… It is a specialized utility designed to enumerate Group Policy Objects (GPOs) and identify potential security misconfigurations.

4 169 492 28K 391

Nasreddine Bencherchali @nas_bench

3 weeks ago

[New Blog 📚] The Fragile Balance: Assumptions, Tuning, and Telemetry Limits In Detection Engineering If you ever struggle with false positives and the idea of tuning detections. This is for you. Read More - nasbench.medium.com/the-fragile-ba…

3 29 64 8K 42

Download Image

fin3ss3g0d @fin3ss3g0d

3 weeks ago

CypherHound github.com/fin3ss3g0d/cyp… now supports ALL traversable AD edges in BloodHound CE! There have been a lot of traversable edges added by @SpecterOps over the last year, my project is providing prebuilt queries for you to use with the latest edges! Don't miss out!

0 22 71 4K 43

Download Image

Steven Lim @0x534c

3 weeks ago

🧵 Red teams are shifting to stealthier AD enumeration via Active Directory Web Services (ADWS) over port 9389. Tools like SOAPHound, SoaPy & ShadowHound wrap LDAP queries in SOAP, bypassing traditional detections. ipurple.team/2025/08/12/act… A KQL to detect this type of AD…

4 116 496 26K 422

Download Image

Karl @kfosaaen

3 weeks ago

We are very excited to announce our new tool - ATEAM Thomas Elling and I have been working on this project for the last year and this tool is the result of the research that we presented at the DEF CON Cloud Village this year. netspi.com/blog/technical…

1 30 69 8K 28

Sean Metcalf @PyroTek3

3 weeks ago

Last week I covered computer accounts, so this week let's talk about user accounts. There are several different types of user accounts - at least how they are used. There are standard user accounts, service accounts, and admin accounts. There are numerous user account settings…