MrP @_mrp314

Dune Joined November 2019

Tweets

87
Followers

162
Following

712
Likes

1K

BlackArrow @BlackArrowSec

2 days ago

AvePoint has fixed a vulnerability in DocAve, Perimeter and Compliance Guardian discovered by our researchers @m1ntko and @Calvaruga. This vulnerability can be used to achieve Remote Code Execution (RCE) in affected systems. ➡️ Advisory: avepoint.com/company/docave…

0 8 9 839 0

Download Image

ATTL4S @DaniLJ94

3 weeks ago

Hoy a las 20:00 (hora España) estaré hablando sobre Windows, suplantación de usuarios y movimientos laterales en el canal de @AlbertoJGarci11 YouTube: HablemosCyber

0 4 9 769 4

Download Image

ATTL4S @DaniLJ94

7 months ago

@BHinfoSecurity My site attl4s.github.io and my YouTube channel (ATTL4S). I have multiple presentations about Active Directory, Windows and C2 - among other topics. Thanks for this.

1 2 10 464 2

Kurosh Dabbagh @_Kudaes_

9 months ago

I've just released Eclipse, a PoC of what I call Activation Context Hijack. This technique redirects any application to load an arbitray DLL, allowing to inject code into any trusted process. More info available on Github. github.com/Kudaes/Eclipse

5 86 216 15K 113

Eloy @[email protected] @zer1t0

a year ago

I was playing with code injection to read processes keyrings on Linux. I've wrote a new tool, keydump, and showing how we can use it to extract cleartext credentials from sssd. Not an easy exploitable scenario, but I hope you like the article!! hackliza.gal/en/posts/keydu…

0 7 16 939 6

X-C3LL @TheXC3LL

a year ago

You can find my slides for "Offensive VBA" talk here github.com/X-C3LL/congres…

2 133 421 32K 234

Download Image

Kurosh Dabbagh @_Kudaes_

a year ago

Unwinder 0.1.2 now offers a different call stack spoofing mechanism besides SilentMoonWalk: stack replacement. It is fully functional and ready to use, but keep in mind that it is still under development and some bugs may appear.

1 14 58 6K 22

Download Image

SpecterOps @SpecterOps

a year ago

LSA Whisperer focuses on interacting with Authentication Packages using their individual message protocols. Read @mcbroom_evan's NEW blog post detailing the journey developing the project to learn more. ⬇️ ghst.ly/3Q64iGa

1 36 78 7K 25

Kurosh Dabbagh @_Kudaes_

2 years ago

Although it's nothing new, @ineesdv and I are pleased to publish our own ROP-based implementation of the code fluctuation technique. We've tried to keep it simple and functional, avoiding to use common features like Timers, HWBP or APCs. github.com/Kudaes/Shelter

3 75 190 16K 79

BlackArrow @BlackArrowSec

2 years ago

Our colleagues @_Kudaes_ & @ineesdv will be at #HackOn2024 presenting an alternative approach to ROP-based sleep obfuscation technique to evade memory scanners. ➡️ Read more: hackon.es/charlas/In%C3%…

0 17 33 3K 7

Download Image

BlackArrow @BlackArrowSec

2 years ago

Our colleague @IagoAbad has weaponized the leaked token handles technique for MSSQL. Now open token handles in MSSQL's process (sqlservr.exe) can be abused to change security context and escalate privileges both locally and in the domain. github.com/blackarrowsec/…

0 61 131 10K 52

Kurosh Dabbagh @_Kudaes_

2 years ago

Call stack spoofing has reached Rust🙌. I have rewritten Unwinder and it is now a complete and stable weaponization of SilentMoonWalk technique. I have also added support for indirect syscalls and will be adding new features very soon. github.com/Kudaes/Unwinder

3 58 189 15K 44

BlackArrow @BlackArrowSec

2 years ago

The @NavajaNegra_AB conference is just around the corner! @_Kudaes_ will be on-site to talk about malware development and EDR evasion. ➡️ Read more: navajanegra.com/2023/speaker/k…

1 12 26 3K 1

Download Image

ATTL4S @DaniLJ94

2 years ago

First video of "Understanding a Payload's Life" uploaded. As soon as I have some spare time I'll be recording more. Enjoy! youtube.com/watch?v=AIAr2-…

5 62 130 14K 48

BlackArrow @BlackArrowSec

2 years ago

Watchguard has fixed 4 vulnerabilities in Watchguard EPDR discovered by our researchers @antuache and @Calvaruga. These vulnerabilities can be used to turn-off the defensive capabilities of the product and achieve privilege escalation. ➡️ Advisories: watchguard.com/es/wgrd-psirt/…

0 14 23 3K 0

Download Image

MDSec @MDSecLabs

2 years ago

"A not so pleasant password manager" - a look at how we attacked Pleasant Password Server during a recent red team project by @au5_mate and @TheXC3LL mdsec.co.uk/2023/09/the-no…

2 51 101 16K 18

Download Image

X-C3LL @TheXC3LL

2 years ago

To difficult using reverse proxies for phishing (Muraena, Evilnginx, etc.) you can use JS + server side validation to modify flow and raise an alert. Although it's 5 years old, I believe still relevant the usage of anti-debugging tricks in JS for this x-c3ll.github.io/posts/javascri…

0 17 43 5K 20

Kimberley Mitnick @kminx

2 years ago

My love. Till we see each other again, I know you are here with me. I hear your voice. Our son will know you and I am convinced he will be a mini you. I am grateful we have so many friends all over the world who will teach our son how to hack and more importantly who the real…

710 1K 11K 1.5M 319

Download Image

MDSec @MDSecLabs

2 years ago

Following a recent successful red team engagement, @TheXC3LL deep dives in to a 0day we discovered... CVE-2023-26258 – Remote Code Execution in ArcServe UDP Backup mdsec.co.uk/2023/06/cve-20…

4 95 238 40K 45

Download Image

EuskalHack @EuskalHack

2 years ago

¡Es turno de Daniel López! En su charla “Understanding a Payload's Life”, explorará #Meterpreter y otros C&C populares. Descubre cómo se genera y ejecuta el shellcode en sistemas comprometidos. ¡No te lo pierdas! #Payloads @DaniLJ94