M0rpheus @__m0rpheus

Red Teamer by day, Researcher by night. Faber est suae quisque fortunae. Joined October 2021

Tweets

23
Followers

7
Following

199
Likes

26

chompie @chompie1337

3 years ago

My new blog post! Dissecting and Exploiting TCP/IP RCE Vulnerability “EvilESP”. Reverse engineering CVE-2022-34718 + write a remote Denial of Service exploit. Covers IPsec and IPv6 fragmentation in the Windows kernel, bin-diffing, and making weird packets securityintelligence.com/posts/dissecti…

12 302 1K 147K 256

delivr.to @delivr_to

3 years ago

HTML Smuggling is so last year, PDF links are the new hotness 💁🏼‍♂️ We’ve recreated this sample here, complete with Adobe-branded PDF, hosted encrypted ZIP, and hidden CMD and DAT files to achieve execution! delivr.to/payloads?id=3d…

proxylife @pr0xylife

3 years ago

2 56 156 85K 34

Download Image

5 76 349 86K 125

Download Video

S3cur3Th1sSh1t @ShitSecure

3 years ago

practicalsecurityanalytics.com/new-amsi-bypas… Just added to the Amsi-Bypass-Powershell repo: github.com/S3cur3Th1sSh1t…

2 111 277 35K 69

Will Schroeder @harmj0y

3 years ago

@tifkin_ and I give you "Certificates and Pwnage and Patches, Oh My!" posts.specterops.io/certificates-a… . We clarify some misconceptions we had about AD CS, explain the KB5014754 patch and its implications, and detail some of the awesome AD CS work from people like @ly4k_ . Enjoy!

7 180 318 0 54

Adam Chester 🏴‍☠️{AFK} @_xpn_

3 years ago

Finally had chance to catch @Raiona_ZA DefCon talk on SCCM Credentials.. certainly worth checking out 🤯! youtube.com/watch?v=Ly9goA…

1 18 61 0 16

matteo malvica ⭕ @matteomalvica

3 years ago

Here's a blog post I wrote about bypassing Intel CET Shadow Stack. Enjoy! 👾

OffSec @offsectraining

3 years ago

Here's a blog post I wrote about bypassing Intel CET Shadow Stack. Enjoy! 👾

2 26 75 0 22

0 29 86 0 20

spotheplanet @spotheplanet

3 years ago

Playing with over-permissioned certificates, that allow low privileged user to escalate to domain admins. ired.team/offensive-secu… Wonderful original research by @harmj0y and @tifkin_

1 65 186 0 41

inversecos @inversecos

4 years ago

1\ Windows Event Log Evasion via Native APIs 👀🧠 Some native Windows API calls can be used to install services WITHOUT generating correlating entries in the event log. This was seen in Stuxnet. This blog covers the technique + detection. bit.ly/3D7KI4n TL;DR 👇👇

11 381 1K 0 317

Download Image

Will @BushidoToken

4 years ago

New Blog! One Way Or Another: Initial Access Vectors “Adversaries are like water” they will seep in through the tiniest cracks to infiltrate your network. Some can get very creative when phishing or pwning unpatched systems doesn't work blog.bushidotoken.net/2022/03/one-wa… #cti #threatintel

1 51 136 0 27

Download Image

James Forshaw @tiraniddo

4 years ago

Written a quick blog post about abusing Kerberos to locally bypass UAC. Unclear if this technique has been documented before, but at the very least I describe why it works :) tiraniddo.dev/2022/03/bypass…

6 209 512 0 113

SpecterOps @SpecterOps

4 years ago

As the state of security continues to evolve, we decided it was time to renew our approach to phishing during red team operations. Today, we're outlining our plans to make initial access ops more valuable to our customers. Read more here: posts.specterops.io/revisiting-phi…

5 98 200 0 45

mr.d0x @mrd0x

4 years ago

Steal Credentials & Bypass 2FA Using noVNC mrd0x.com/bypass-2fa-usi…

51 655 2K 0 499

Download Image

Florian Hansemann @CyberWarship

4 years ago

Taking the pain out of C2 Infrastructure (Part 1) 'trying to ease the pain deploying/configuring reverse proxies which should be in front of your C2 platform.' #infosec #pentest #redteam byt3bl33d3r.substack.com/p/taking-the-p…

1 30 83 0 22

TrustedSec @TrustedSec

4 years ago

Follow @Bandrel as he publicly debuts SeeYouCM-Thief. Learn how to #exploit common misconfigurations in #Cisco phone systems using this new open-source tool hubs.la/Q012mk5d0

1 49 96 0 26

Matt Eidelberg @Tyl0us

4 years ago

Introducing Ivy a unique, stealthy method of executing shellcode using VBA and COM objects without dropping office macro documents to disk. Ivy also allows for the unhooking EDRs from the VBA environment. Check it out: github.com/optiv/Ivy 👀 #netsec #redteam #EDR #evasion

10 320 675 0 144

klez @KlezVirus

4 years ago

[Last Release for 2021] Inspired by @byt3bl33d3r SprayingToolkit, I'm releasing Vortex. An all-in-one tool to attack Microsoft OWA/ADFS/LYNC/O365 and vendor specific VPN Web Logins. Well, it actually does much more, check the readme for more. github.com/klezVirus/vort…

6 179 387 0 84

T3nb3w @T3nb3w

4 years ago

I made a blog about research I did recently on learning COM objects internal. mohamed-fakroud.gitbook.io/t3nb3w/playing… I learned a lot of interesting things along the way and I'd like take it further. Special Thanks to: @MrUn1k0d3r @waldoirc @trickster012 @chiragsavla94 @KLINIX5 @tiraniddo.

6 177 484 0 113

Ian Beer @i41nbeer

4 years ago

Today we're publishing a detailed technical writeup of FORCEDENTRY, the zero-click iMessage exploit linked by Citizen Lab to the exploitation of journalists, activists and dissidents around the world. googleprojectzero.blogspot.com/2021/12/a-deep…

57 2K 4K 0 650

spaceraccoon | Eugene Lim @spaceraccoonsec

4 years ago

My writeup for Microsoft Office RCE CVE-2021-38646. A pretty simple write-what-where that affects many other applications due to the vulnerable dependency. Hope it is helpful for fellow beginners :) medium.com/csg-govtech/al…