fyx @_fyxme

fyx.me Joined March 2018

Tweets

36
Followers

27
Following

618
Likes

859

Binni Shah @binitamshah

3 years ago

ImHex : A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM : github.com/WerWolv/ImHex credits @WerWolv

26 339 2K 0 344

Download Image

RedTeamVillage @RedTeamVillage_

3 years ago

Looking forward to the AD Workshop during @defcon "Dip Your Toes in Infrastructure Testing: A Hands on Workshop Focusing on the Things CTF's Don't Teach" Full schedule at: redteamvillage.io/schedule #cybersecurity #redteam #ActiveDirectory

1 16 37 0 3

Download Image

Rémi GASCOU (Podalirius) @podalirius_

3 years ago

Ever wanted to trigger a #NTLM authentication to a machine using every possible RPC call ? You can do this using #Coercer 🥳🎉 This tool automatically detects available pipes and protocols and call every possible functions to trigger an #authentication. github.com/p0dalirius/Coe…

13 208 564 0 132

Download Video

Will Schroeder @harmj0y

3 years ago

Hey, do you like tokens? Have you always wanted to "harvest" tokens for offensive purposes? If so check out my new post posts.specterops.io/koh-the-token-… where I show I can (finally) write a technical post without memes, and then check out the Koh toolset at github.com/GhostPack/Koh

14 259 550 0 124

Mor Davidovich @dec0ne

3 years ago

Introducing KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings). All credits go to @tiraniddo @cube0x0 @harmj0y, most of the code was taken from their tools. github.com/Dec0ne/KrbRela…

21 477 1K 0 263

Cedric Van Bockhaven @c3c

4 years ago

Just published an AD Explorer snapshot ingestor for #BloodHound: github.com/c3c/ADExplorer…

19 273 623 0 145

Rob Fuller @mubix

4 years ago

If you or more importantly a vendor that you are looking at using, uploads potentially malicious files to VirusTotal, many times that file can later be accessed by 3rd parties (AV companies, “researchers”, etc). These can be your company’s financials (macro enabled XLSX)

13 35 187 0 23

ProjectDiscovery @pdiscoveryio

3 years ago

Use the powerful @ipinfoio CLI tool to quickly look at your target domain's IP space. GitHub: - github.com/ipinfo/cli - github.com/projectdiscove… - github.com/projectdiscove… #hackwithautomation #passive #recon #osint #bugbounty

IPinfo – IP Data Provider @ipinfo

3 years ago

0 5 33 0 16

Download Gif

18 116 376 0 185

Download Image

Danus @danusminimus

3 years ago

#Hancitor affiliates brought their own signed vulnerable Avast driver into intrusions which allowed them to terminate processes from the Kernel using a tool labeled by #MITRE as #BURNTCIGAR, here's my version written in powershell virustotal.com/gui/file/4b522… - Avast driver

4 42 125 0 26

Download Video

Jorge Gomes @JGomes_EU

4 years ago

For those looking into the #ContiLeaks, I've prepared a network relationship map, that shows the relationships between users, based on the leaked chat logs. bit.ly/JGEU_CLNETMAP

9 71 218 0 28

Download Video

Mudit Gupta @Mudit__Gupta

4 years ago

An attacker stole $30m from MonoX across their ethereum and polygon deployments a few hours ago. One of the tx: polygonscan.com/tx/0x5a03b9c03… The exploit was caused by a smart contract bug that led to incorrect price updates when doing token swaps. 🧵👇

19 120 491 0 95

Download Image

Omar @acceleratooooor

4 years ago

I've created an overview of the Smart Contract Auditing Process for pentesters, devs, bug bounty, or anyone vested in blockchain security. Shoutout @Mudit__Gupta who really helped solidify this process from his walkthroughs. #bugbountytips #infosec #web3 #CyberSecurity

13 193 524 0 309

Download Image

Ensar Şamil @sblmsrsn

4 years ago

I figured out that "C:\Windows\System32\certoc.exe -LoadDLL <DLLName>" can be used for loading DLLs. It looks like an alternative #lolbin to regsvr32.

5 138 368 0 71

Download Gif

ΜΔDΞRΔS @hackermaderas

6 years ago

#OSINT #Hacking #OffSec #InfoSec resource lists of online sites allowing you to search the Internet for open/public web directories, FTP servers & various file types vs keywords/targets Some of these can search entire sites (Reddit, Twitter, Tumblr, YouTube, etc) vs. keywords

0 32 92 0 38

Download Image

Florian Hansemann @CyberWarship

4 years ago

Windows Kernel Exploitation Tutorial Part 1: Setup rootkits.xyz/blog/2017/06/k… Part 2: Stack Overflow rootkits.xyz/blog/2017/08/k… Part 3: Memory Overwrite rootkits.xyz/blog/2017/09/k… Part 4: Pool Overflow rootkits.xyz/blog/2017/11/k… Part 5: NULL Pointer Dereference rootkits.xyz/blog/2018/01/k…

3 614 2K 0 501

Download Image

Mayfly @M4yFly

4 years ago

AD Pentest mindmap upgrade : Full version: github.com/Orange-Cyberde… xmind version (slow, the map is big) : xmind.net/m/5dypm8/ Fell free to tell me what is missing !