Mimiron @amirr0r_

just wanna learn | OSCP | CRTO amirr0r.github.io Joined March 2020

Tweets

57
Followers

31
Following

744
Likes

800

Rémi GASCOU (Podalirius) @podalirius_

3 years ago

Ever wanted to trigger a #NTLM authentication to a machine using every possible RPC call ? You can do this using #Coercer 🥳🎉 This tool automatically detects available pipes and protocols and call every possible functions to trigger an #authentication. github.com/p0dalirius/Coe…

13 208 564 0 132

Download Video

BlackWasp @BlWasp_

3 years ago

After the adventures of my previous cheatsheets I decided to redo one about AD, this time oriented Python. This was originally a private page that I made public, if you find some copy/paste that I forgot to credit or modify, please DM me: hideandsec.sh/books/cheatshe…

2 38 85 0 25

DebugPrivilege @DebugPrivilege

3 years ago

What has been the shortest path to Domain Admin for you? 👀

212 104 512 0 220

Rémi GASCOU (Podalirius) @podalirius_

3 years ago

[#thread 🧵] #Protip: When you're playing a #CTF, take the time to copy all the challenges and their files locally. It will save you time later, and you can work on the challenges even if the CTF is down!🚩 I've released a CTFD #parser to do exactly this! github.com/p0dalirius/ctf…

2 36 105 0 12

tomchop @tomchop_

4 years ago

I've seen a lot of 🐂💩 around Telegram being the best encrypted chat app around - it's very much not; use Signal instead. It's e2e encrypted by default, and if you want to make it *extra secure*, you can follow the guide by these smart folks below 👇🏻

CERT-EU @CERTEU

4 years ago

4 239 405 0 91

1 4 10 0 1

mr.d0x @mrd0x

4 years ago

Steal Credentials & Bypass 2FA Using noVNC mrd0x.com/bypass-2fa-usi…

51 655 2K 0 499

Download Image

Root-Me @rootme_org

4 years ago

We're proud to announce that we will hold our first session of cybersecurity talks on our discord server the 20th February at 8 pm, featuring: ➡️ Pentest Web 101 by @TheLaluka ➡️ Optimized API Scraping by @podalirius_ The event will last approximately one hour. See you there!

4 30 75 0 4

Charlie Bromberg « Shutdown » @_nwodtuhs

4 years ago

For those who missed this, among other huge and awesome features, BloodHound will integrate 3 new edges: AddSelf, WriteSPN, AddKeyCredentialLink Here’s my take on how you can abuse those from Linux systems

Andy Robbins @_wald0

4 years ago

1 18 92 0 6

Download Image

1 21 92 0 30

Charlie Bromberg « Shutdown » @_nwodtuhs

4 years ago

Here is one of my latest paths to Domain Admin 😈 it took ~2h30 (I was relying on network traffic that was not so present at the beginning) This path was a bit long and involved NTLM, Kerberos, network protocols, credential dump, etc 👁️👅👁️ [12 steps detailed below 🧵]

21 381 1K 0 591

mgeeky | Mariusz Banach @mariuszbit

4 years ago

Microsoft blocks VBA macros originating from Internet based on MOTW flag. I'm now sharing a tool presenting risk for MOTW bypasses, which will play crucial role in evading MS default setting and smuggle macros back in. Threat Actors already do that. github.com/mgeeky/PackMyP…

5 187 518 0 111

Download Image

HackTricks @hacktricks_live

4 years ago

You can now transform the PEASS output to HTML and PDF with github.com/carlospolop/PE…

0 9 22 0 0

0xdf @0xdf_

4 years ago

Blog from @ippsec and me on the @hackthebox_eu blog - Finding that balance between not giving up too early and being pointlessly stuck is important. But the answer isn't "never seek help". Trying harder isn't always the answer when you're trying to learn. hackthebox.com/blog/It-is-Oka…

10 105 382 0 50

TrustedSec @TrustedSec

4 years ago

Senior Security Consultant @Jean_Maes_1994 gives us the first comprehensive resource about all things #relaying. This guide covers a range of techniques from most common to the lesser-known. hubs.la/Q013rK9g0

4 167 331 0 67

Kaido Järvemets @kaidja

4 years ago

Create a fake computer account and change the UserAccountControl value to 8192. Now the AD thinks it is a domain controller.

25 392 1K 0 286

Download Image

Read The Fancy Manual (SIGSEGv) @sigsegv_event

4 years ago

Hello, nous avons mis les vidéos du dernier RTFMeet en ligne 😄 youtube.com/watch?v=zaUwKm… youtube.com/watch?v=0ayQl2… youtube.com/watch?v=DS0ARx… Merci aux speakers @_Worty @TheLaluka @topotam77 ainsi qu'à @OSSIRFrance et psychlem notre monteur vidéo 🙏

0 24 53 0 4

Nicolas Krassas @Dinosn

4 years ago

Exploiting CVE-2021-44228 (log4j) using PDFs as delivery channel - PoC github.com/eelyvy/log4jsh…

3 98 289 0 47

Ian Beer @i41nbeer

4 years ago

Today we're publishing a detailed technical writeup of FORCEDENTRY, the zero-click iMessage exploit linked by Citizen Lab to the exploitation of journalists, activists and dissidents around the world. googleprojectzero.blogspot.com/2021/12/a-deep…

57 2K 4K 0 650

Mimiron @amirr0r_

4 years ago

About a month ago (10th November 2021), I passed the OSCP certification from @offsectraining ! You can find my review right here as long as my Cheat Sheet, @NotionHQ templates and Tmux Organizer Enumeration Scripts : amirr0r.github.io/posts/oscp-rev…

0 0 0 0 1

Nikhil Mittal @nikhil_mitt

4 years ago

Never tried this before! 200 RTs and I will do an 'Introduction to Azure Penetration Testing' class for FREE sometime during the Holiday season. #Azure #Pentesting #redteam