Justin Hendricks @Script_Happens

Security Engineer. My opinions are my own. Joined March 2011

Tweets

142
Followers

301
Following

2K
Likes

875

Microsoft Security Response Center @msftsecresponse

3 years ago

📢 BlueHat 2023: Applications to Attend are NOW OPEN! 📢 If you are interested in attending @MSFTBlueHat in Redmond, WA, USA, Feb 8-9, 2023, please submit your application here: forms.office.com/Pages/Response… (Applications close Jan 6, 2023)

1 10 22 0 1

spotheplanet @spotheplanet

4 years ago

Noticed that the number of visits to these notes started growing even while they were WIP (yeah, I work in prod 😅), so here they are: ired.team/offensive-secu… Thank you for sharing @harmj0y @tifkin_ @topotam77 @ExAndroidDev , it's all beautiful!

4 48 110 0 11

Steve Syfuhs @SteveSyfuhs

4 years ago

It's been a while since our last thread and I need to kill time while a ginormous time travel trace file finishes copying, so let's talk a bit about LSA, the Windows Local Security Authority.

22 301 941 0 307

Download Image

Microsoft Threat Intelligence @MsftSecIntel

5 years ago

Automatic on-premises Exchange Server mitigation is now in Microsoft Defender Antivirus. We have taken this additional step to further support our customers who have not yet implemented the complete security update. Learn more: msft.it/6017VMA3d

3 163 289 0 14

Justin Hendricks @Script_Happens

5 years ago

The nmap script that tests for CVE-2021-26855 had false negatives with 301 and 302 redirects (typically federated auth). This was fixed yesterday. Latest version: github.com/microsoft/CSS-…

0 1 3 0 1

John Lambert @JohnLaTwC

5 years ago

Run Exchange but are on an out-of-support Cumulative Update level and can't get updates for the March vulnerabilities? The Exchange team has delivered: techcommunity.microsoft.com/t5/exchange-te…

1 26 49 0 4

Justin Hendricks @Script_Happens

5 years ago

Also, there is a script to compare against files on the Exchange server it's run on: github.com/microsoft/CSS-…

John Lambert @JohnLaTwC

5 years ago

Also, there is a script to compare against files on the Exchange server it's run on: github.com/microsoft/CSS-…

3 161 325 0 49

Download Image

0 1 1 0 0

Microsoft Security Response Center @msftsecresponse

5 years ago

Providing alternative mitigation techniques to help Microsoft Exchange customers needing more time to patch deployments & are willing to make risk & service function trade-offs. These mitigations are not remediation & aren't full protection against attack. msrc-blog.microsoft.com/2021/03/05/mic…

1 77 134 0 11

Justin Hendricks @Script_Happens

5 years ago

Great team with broad scope! Come find bugs in one of the biggest suite of cloud services.

Travis Rhodes @travisrhodes

5 years ago

Great team with broad scope! Come find bugs in one of the biggest suite of cloud services.

0 9 16 0 4

0 0 1 0 1

Justin Hendricks @Script_Happens

5 years ago

The most expensive game of Tetris ever played 😆 I'm pretty sure this is why MSFT stock is down today...

0 0 3 0 0

Nick Carr @ItsReallyNick

5 years ago

Critical new defenses for OAuth consent phishing: • ✅ Publisher verification [pic 1] • 📋 Customizable app consent policies [pic 2] • 🚷 Globally disallowing user consent to new multi-tenant apps from unverified publishers (on Nov 8) 👉🏼📰 Details: techcommunity.microsoft.com/t5/azure-activ…

4 86 231 0 33

Download Image

b0yd @rwincey

5 years ago

Found #Telerik vulnerable to CVE-2019-18935 on a customer's network and can't seem to get the file upload to work? Host the payload yourself using @SecureAuth impacket. @noperator @mwulftange @bao7uo @straight_blast @pwntester @olekmirosh #bugbountytips #pentest #exploit #redteam

4 42 149 0 30

Download Image

Calum Boal @CalumBoal

5 years ago

Ever wanted to do reverse DNS lookups on an entire /16 range for free? Now you can! 😉 sonar.omnisint.io/reverse/95.138…

14 124 397 0 100

Lee Chagolla-Christensen @tifkin_

5 years ago

A post on generating SSO cookies on Azure AD machines (without having to know the password) posts.specterops.io/requesting-azu…

13 198 446 0 64

Justin Hendricks @Script_Happens

5 years ago

Yes, go patch Skype and Sharepoint server. Better yet, migrate to Microsoft 365 and Microsoft will patch for you!

Tobie Fysh @tobiefysh

5 years ago

Yes, go patch Skype and Sharepoint server. Better yet, migrate to Microsoft 365 and Microsoft will patch for you!

0 14 9 0 0

2 1 2 0 0

Check Point Research @_CPResearch_

5 years ago

We discovered a 17-year-old vulnerability in all of Windows DNS Servers. SIGRed (CVE-2020-1350) is a wormable, critical vulnerability that can be used to achieve full Domain Administrator privileges. research.checkpoint.com/2020/resolving…

8 714 1K 0 75

Johann Rehberger @wunderwuzzi23

5 years ago

An older vulnerability write up about an XSS on the #AWS console which I responsibly disclosed to Amazon Hope its interesting for some who are getting started with #pentesting embracethered.com/blog/posts/202… Also AMZN now awards #bugbounties via Hackerone. Check it out! No aws though

1 23 64 0 7

Semgrep @semgrep

5 years ago

Hardcoded secrets, unverified tokens, and other common JWT mistakes: @ermil0v shares what he learned from bug-hunting 2,000 npm modules: r2c.dev/blog/2020/hard…