grim3 @_GRIM3_

Chicago, IL Joined September 2014

Tweets

356
Followers

103
Following

523
Likes

11K

grim3 @_GRIM3_

2 years ago

✌️bsky.app/profile/espres…

0 0 0 93 0

吉川ばんび @bambi_yoshikawa

4 years ago

切ったら可愛かったキウイ見て( 'Θ' )

68 14K 75K 0 622

Download Image

For CVE-2021-40444 it is looking like ASR rules are effective mitigation from current PoCs. (And theoretically should be effective against this concept when "Block executable files from running unless they meet a prevalence, age, or trusted list criterion" ASR also enabled.)

2 1 6 0 1

Justin Elze @HackingLZ

4 years ago

Guardrails on payloads is important because most of the time payloads end up on the targets computer but other times they get forwarded to an MSP and everyone wants to execute them...

7 4 72 0 2

Will Schroeder @harmj0y

4 years ago

The offensive AD CS tools from @tifkin_'s and my "Certified Pre-Owned" talk, Certify and ForgeCert, are now live at github.com/GhostPack/Cert… / github.com/GhostPack/Forg… ! Thanks to everyone who attended the talk stream!

7 271 486 0 66

Cybersecurity and Infrastructure Security Agency @CISAgov

4 years ago

We're proud to participate in the @DianaInitiative conference, a wonderful program that helps under-represented groups get involved in cybersecurity: dianainitiative.org/capture-the-fl… A diverse workforce brings new and unique ideas, skillsets, and will enhance our nation’s cyber defense.

0 11 38 0 0

Download Image

John Hammond @_JohnHammond

4 years ago

.@calebjstewart and I spent tonight working on a pure PowerShell implementation of CVE-2021-1675 #PrintNightmare, and I am pleased with what we've put together. Customizable but default embedded DLL to add a new user to local admin group. github.com/calebstewart/C…

8 176 584 0 54

Richard Johnson @richinseattle

4 years ago

Dan’s last words to me were “Bring up the next gen”-eration of hackers.

5 15 276 0 5

Download Image

Jonny Johnson @JonnyJohnson_

5 years ago

Happy Monday everyone! Today @matterpreter and I are releasing a joint blog where we dive deep into the methodology we used to uncover the technology that atsvc utilizes within scheduled tasks. Hope you enjoy! posts.specterops.io/abstracting-sc…

0 62 151 0 22

Alex Ionescu @aionescu

5 years ago

@DAlperovitch Or use Lotus Notes with Domino

4 3 42 0 0

Chetan Nayak (Brute Ratel C4 Author) @NinjaParanoid

5 years ago

#PROTIP: Welcome to Windows-fuckup 1-0-1. Tired of executing .exe's in #redteam? Why not rename bitflipped executables to .com and execute them. Rename msbuild.exe to msbuild.com and use it to compile .csproj files in memory. Thank me later!

7 136 408 0 81

Download Image

Eric Capuano - Bsky: @eric.zip @eric_capuano

5 years ago

Running Exchange? Might want to look for traffic from these IPs ASAP. ChinaChopper webshell getting distributed courtesy of CVE-2021-24085 165.232.154.116 157.230.221.198 104.248.49.97

5 150 360 0 48

Rep. Katie Porter @RepKatiePorter

5 years ago

For over a year, a major cyber attack against @solarwinds enabled foreign hackers to quietly spy on @DeptofDefense, @USTreasury, and @DHSgov. Today, I demanded answers from the company’s CEO—like why their servers were accessible with the password “Solarwinds123.” Yes, really.

218 1K 5K 0 93

Download Video

Robinhood @RobinhoodApp

10 years ago

Let the people trade.

9K 17K 31K 0 496

Johnny Shaw @jxy__s

5 years ago

Awesome article on Herpaderping by @pentestlabltd using a metasploit playload to get a remote shell! "Executing the generated payload via the ProcessHerpaderping binary will establish a connection on a system with Windows Defender enabled." pentestlaboratories.com/2021/01/18/pro…

1 15 39 0 7

Cybersecurity and Infrastructure Security Agency @CISAgov

5 years ago

We released a new fact sheet to help critical infrastructure owners and personnel identify suspicious behavior and apply basic security measures to enhance personal safety. View the fact sheet: cisa.gov/publication/pe… #CriticalInfrastructure #PersonalSafety #PhysicalSecurity

7 127 260 0 10

LuemmelSec @theluemmel

5 years ago

Talked with @ShitSecure today about Nim and PEZor. Covenant -> Nim -> PEZor = ciao Defender Awesome work by @byt3bl33d3r & @ShitSecure and @phraaaaaaa Check out: github.com/phra/PEzor github.com/byt3bl33d3r/Of… s3cur3th1ssh1t.github.io/Playing-with-O… #redteaming #Pentesting

2 89 196 0 27

Download Gif

Marcello @byt3bl33d3r

5 years ago

Just made the OffensiveNim repository public. This is a couple of weeks worth of notes and research into using Nim for general offensive operations. If you don't want to write your implants in C/C++, Nim is the way to go IMHO. Feedback welcom github.com/byt3bl33d3r/Of…

13 197 485 0 83

VANITY FAIR @VanityFair

5 years ago

.@AOC on the New York Times’s bombshell investigation of Trump’s taxes: vntyfr.com/VbXWvad

403 5K 27K 0 171

Download Image

Francesco Soncina @phraaaaaaa

5 years ago

PEzor v2 — New Output Formats and Cobalt Strike Integration Cobalt Strike's execute-assembly lets operators run .NET assemblies without touching the disk. But wouldn’t be nice if we could execute arbitrary executables too with the same ease? iwantmore.pizza/posts/PEzor2.h…