Keanu Nys @RedByte1337

Offensive Security Lead @ Spotit. Creator of GraphSpy linkedin.com/in/keanunys/ Belgium Joined August 2014

Tweets

91
Followers

896
Following

74
Likes

141

Wietze @Wietze

3 weeks ago

A special shoutout to the many 🇪🇺European cyber researchers presenting their work at #DEFCON, you were awesome. 🇳🇱@_dirkjan @John_Fokker 🇮🇹@Van1sh_BSidesIT 🇫🇷@christophetd @fr0gger_ @kalimer0x00 🇧🇪@RedByte1337 🇨🇿@marektoth 🇬🇧@_mattmuir @johnnyspandex @buffaloverflow +many others

3 5 33 6K 6

Download Image

I just noticed that the domain enumeration technique with the Autodiscover endpoint is suddenly not working anymore. This is what tools like @DrAzureAD's AADInternals (Get-AADIntTenantDomains) used to allow unauthenticated enumeration of all domains linked to an Entra ID tenant.

6 17 86 10K 46

Download Image

Nikhil Mittal @nikhil_mitt

3 months ago

Grab a seat for one of @AlteredSecurity's three popular Red Team classes at @BlackHatEvents Azure Attacks Advanced (In-Person) - Break an Azure environment with focus on evasion and opsec. AD Attacks Advanced (Virtual) - Learn to break an enterprise environment with all…

0 5 9 7K 4

Download Image

Keanu Nys @RedByte1337

3 months ago

I am very excited to share that I’ve been accepted to speak on one of the main stage tracks at @defcon this August in Las Vegas! 🎉 Can't wait to share this research on one of the biggest stages in the hacking community! 🔥 Let me know if you’ll be at #DEFCON33! #DEFCON

3 5 43 4K 1

Download Image

Last Week in Security (LWiS) @lastweekinfosec

4 months ago

ProxyBlobing (@_atsika), SonicWall n-days (@SinSinology), Drag and Pwnd (@d4d89704243), Loki C2 2.0 (@0xBoku), and more! blog.badsectorlabs.com/last-week-in-s…

0 8 23 3K 1

Jan Bakker @janbakker_

4 months ago

💡Learn how to restrict device code flow in Entra ID! janbakker.tech/how-to-restric…

0 4 22 1K 11

Keanu Nys @RedByte1337

4 months ago

📧 GraphSpy 1.5.0 is out now and brings a brand new Outlook Graph module! ✅Read emails in any folder ✅Send HTML-formatted emails directly in GraphSpy ✅Access shared mailboxes ✅Search for sensitive information like passwords 🔗Check out GraphSpy here: github.com/RedByte1337/Gr…

1 24 62 5K 39

Download Image

Keanu Nys @RedByte1337

5 months ago

Microsoft seems to have recently deprecated the legacy account.activedirectory.windowsazure[.]com endpoint, which GraphSpy was using to list and add MFA methods for a user. GraphSpy 1.4.3 now utilizes the mysignins[.]microsoft[.]com API now (which is also a FOCI resource!)

0 4 18 1K 8

Download Image

Merill Fernando @merill

8 months ago

I just published this week's Entra newsletter! Featuring @12Knocksinna, @alitajran, @Christian_Frohn, @Ciraltos, @DanielatOCN, @mariussmellum, @NTFAQGuy, @Shehanperera85, @RedByte1337, @TheImmaturedad, @fabian_bader, @Thomas_Live, @cbrhh Read at ➡️ entra.news/p/entra-news-8…

3 12 29 3K 6

Download Image

Keanu Nys @RedByte1337

8 months ago

GraphSpy just hit 600 stars on GitHub after releasing version 1.4!✨ This version introduces the new Entra ID module, better loading animations, and JSON syntax highlighting. Check it out here: github.com/RedByte1337/Gr…

3 24 67 8K 44

Download Image

Kuba Gretzky @mrgretzky

10 months ago

Defenders use cross-origin requests through CSS url() or injected JS to leak your phishing URL in the HTTP Referer header. Today, I've been reminded about the excellent post by Keanu Nys @RedByte1337, which contains a lot of great evasion ideas! insights.spotit.be/2024/06/03/cli…

1 35 118 11K 85

Keanu Nys @RedByte1337

11 months ago

Last week to register in the Azure Red Team Expert bootcamp from @AlteredSecurity! Join me during the 4 live sessions in October to level up your Azure Red Teaming skills. alteredsecurity.com/carte-bootcamp