Lars Attacks @_LarsAttacks

Dad, Hacker, Security Consultant, Gamer, Musician, and Martial Artist. I ♥ InfoSec. OKC, Oklahoma Joined June 2009

Tweets

402
Followers

291
Following

2K
Likes

1K

Tib3rius @0xTib3rius

3 years ago

OR 1=1 should not be the go-to example for SQL injection. I understand why it is, but using it without mentioning the risks is teaching bad practice. OWASP, Portswigger, Wikipedia, Rapid7, Snyk etc. are all doing it. I'm gonna die on this hill. 🤬

39 116 698 290K 181

poncho @PonchoSec

3 years ago

"mAcS dOn'T gEt MaLwArE 🤪" Yes they do. Checkout my blog about creating macOS ransomware with successful execution 🔥. huntress.com/blog/creating-…

3 102 418 58K 115

BSIDESOK @BsidesOK

3 years ago

BsidesOK call for speakers! papercall.io/bsidesok2023.

0 8 8 969 0

Download Image

ReconOne @ReconOne_bk

3 years ago

How to find SQL Injection at scale, targeting URLs 👇🔥 Credits: @0x3n0 #recontips #bugbountytips #bugbounty #AttackSurface #sqli #sqlmap

22 157 417 0 166

Download Image

mpgn @mpgn_x64

3 years ago

MSOL_xxxxx and DC01$ are always your best friend when you want to do "du sale" in the domain 🫡

Synacktiv @Synacktiv

3 years ago

MSOL_xxxxx and DC01$ are always your best friend when you want to do "du sale" in the domain 🫡

3 67 157 0 31

2 8 39 0 7

Matt Eidelberg @Tyl0us

3 years ago

In case Twitter does die you can follow me, all EDR Bypasses, Red team Magic here: infosec.exchange/@Tyl0us

1 35 167 0 65

vx-underground @vxunderground

3 years ago

The VX-API is now on version 2.0.354 Our malware development framework now contains elementary networking functionality for ICMP echo requests and IP address string manipulation. We've also enhanced the malicious capabilities section 😎 Have a nice day github.com/vxunderground/…

1 42 174 0 32

icyguider @icyguider

3 years ago

After years of using the default examples, I've finally started writing my own custom scripts using Impacket. Wanted to share a few examples that helped me during the learning process. Hope you enjoy! github.com/icyguider/More…

7 165 444 0 153

mpgn @mpgn_x64

3 years ago

We worked together with @_zblurx to pull this new feature on CME ! CrackMapExec can now authenticate using kerberos with login/pass/nthash/aeskey without the need of a KRB5CCNAME ticket env 🚀 But wait there is more! by adding this feature we can now mimic kerbrute features 🔥🫡

7 133 434 0 47

Download Image

Karan @0xDISREL

3 years ago

The code and blogpost for getting Ring 0 using VBA Macro Office Doc is finally up! - disrel.com/posts/Ring0VBA… Sorry for the delay, been dealing with life!

Karan @0xDISREL

3 years ago

The code and blogpost for getting Ring 0 using VBA Macro Office Doc is finally up! - disrel.com/posts/Ring0VBA… Sorry for the delay, been dealing with life!

10 203 655 0 89

Download Gif

9 275 714 0 208

mpgn @mpgn_x64

3 years ago

Dumping LSASS is such a 2020 move, let me introduce a new CrackMapExec module called Masky developed by @_ZakSec 🎉 If you have admin privilege, the module will impersonate all users connected -> ask a certificate (ADCS) -> retrieve the NT hash using PKINIT 🚀 Crazy module 🪂

25 494 2K 0 339

Download Image

Cube0x0 @cube0x0

3 years ago

This MS patch also effects krbrelay. It looks like we had our fun with rpc->ldap

Antonio Cocomazzi @splinter_code

3 years ago

This MS patch also effects krbrelay. It looks like we had our fun with rpc->ldap

5 80 248 0 26

Download Image

3 45 136 0 15

Mohamed El Azaar @med0x2e

3 years ago

In case anyone wants to run .NET or load .NET assemblies remotely from VBA (No .NET deserialization this time); github.com/med0x2e/vba2clr

2 104 279 0 56

Matt Eidelberg @Tyl0us

3 years ago

New Tool - Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods. Check it out: github.com/optiv/Freeze #netsec #redteam #EDR #evasion

7 326 835 0 213

CCob🏴󠁧󠁢󠁷󠁬󠁳󠁿 @_EthicalChaos_

3 years ago

As promised folks. New blog post and PIVert tool release for ADCS and living off the land.

9 68 176 0 29

juicyk @j0nk1m

3 years ago

@RedTeamVillage_ @pwnEIP @selenagomez

0 3 5 0 0

Matt Eidelberg @Tyl0us

3 years ago

Come by the @Optiv booth at #BHUSA to get these awesome red team stickers! #redteam #netsec #sourcezero

1 9 23 0 0

Download Image

Dekel Paz @dekel_paz

3 years ago

Super excited to finally release #BlueHound - a new open-source tool that adds dashboards, reporting, sharing and automation capabilities to #Bloodhound Check out the blog post at zeronetworks.com/blog/bluehound… and get your copy from github.com/zeronetworks/B…

10 223 657 0 168

Download Gif

Matt Eidelberg @Tyl0us

3 years ago

Really great article on the recent changes to PP &PPLs

Clément Labro @itm4n

3 years ago

Really great article on the recent changes to PP &PPLs

13 261 664 0 114

Download Image

0 3 22 0 2

Gal Diskin [email protected] @gal_diskin

3 years ago

New security research: #PassBleed: How to get @okta *master passwords* in *clear text* for *all employees* and several other important findings Why care? Because compromise in your IdP is *game over* for your security A meta thread - Plz RT for reach #identitysecurity