WHmacmac @cbytez

ptester/ red teamer wannabe, OSCP, OSWE whmacmac.github.io/about Joined June 2017

Tweets

441
Followers

63
Following

471
Likes

867

Devansh (⚡, 🥷) @0xAsm0d3us

2 weeks ago

Weekend reading: Huli's blog is a gem, and you should start reading it if you want to excel in frontend/client-side security blog.huli.tw/en/categories/

1 32 153 12K 160

Download Image

Nicolas Krassas @Dinosn

4 months ago

Monkey365 – PowerShell Security Scanner for Microsoft 365, Azure, and Entra ID darknet.org.uk/2025/06/monkey…

0 35 122 7K 79

Devansh (⚡, 🥷) @0xAsm0d3us

7 months ago

If you are reading this ^ You should also check out this: devanshbatham.hashnode.dev/trojan-war-aga…

0 3 16 2K 22

Black Hills Information Security @BHinfoSecurity

7 months ago

Do you want to learn a red team technique that leverages the Remote Desktop Protocol (RDP) as an alternative initial access vector? Mike F. joined us and explored a technique known as Rouge RDP. He discussed concept of Rogue RDP, which involves leveraging a malicious RDP server…

0 36 161 10K 93

Download Image

Black Hills Information Security @BHinfoSecurity

8 months ago

Ever wanted to run Nuclei scans at scale without relying on Nuclei Cloud? Now you can! Ralph May joined us for a free one-hour BHIS webcast and taught us about the power of Nuclei scans and their incredible value for security teams. But that was just the beginning. Ralph…

1 17 41 5K 14

Download Image

Alex Neff @al3x_n3ff

10 months ago

NetExec has a new Module: Timeroast🔥 In AD environments, the DC hashes NTP responses with the computer account NT hash. That means that you can request and brute force all computer accounts in a domain from an UNAUTHENTICATED perspective! Implemented by @Disgame_ 1/3🧵

11 280 933 96K 572

Download Image

HTTPVoid @httpvoid0x2f

11 months ago

Check out our latest blog post! We dive into GitHub Enterprise’s SAML implementation and explore an authentication bypass in encrypted assertion mode. CVE-2024-4985 / CVE-2024-9487: GitHub Enterprise SAML Authentication Bypass. projectdiscovery.io/blog/github-en…

0 50 180 16K 59

Marcello @byt3bl33d3r

11 months ago

🚨TOOL DROP 🚨 Vulnhuntr is live with 14 LLM discovered 0days under its belt ! If you’re at @nohatcon well be presenting about it in 10 min! github.com/protectai/vuln…

2 107 342 25K 249

SpecterOps @SpecterOps

11 months ago

Learn how you can now map hybrid Attack Paths from on-prem Active Directory to Azure Entra ID using BloodHound Community Edition & BloodHound Enterprise. Check out @_wald0 & @JustinKohler10's full conversation w/ @_JohnHammond at ghst.ly/4eJ235g

0 20 44 5K 36

Download Video

7h3h4ckv157 @7h3h4ckv157

11 months ago

Active Directory Hacking - Public Resources Link 1: book.hacktricks.xyz/windows-harden… Link 2: github.com/S1ckB0y1337/Ac… Link 3: hackthebox.com/blog/introduct… Link 4: hackthebox.com/blog/introduct… Bookmark & Share! Comment more resources :) Don't follow me - I'm not a content creator 🤞🏻

3 214 853 39K 832

Download Image

Daniel @VirtualAllocEx

11 months ago

It has been a while since I set up a DNS Listener in Cobalt Strike. So I have documented it step by step in this blog post. Available in English and German, just switch from EN to DE on the website. If there is anything wrong or not explained correctly, please let me know.…

0 43 160 10K 105

Download Image

7h3h4ckv157 @7h3h4ckv157

12 months ago

Windows Hacking tips 📍 Credit (Source): github.com/swisskyrepo/Pa…

3 201 813 48K 996

Download Image

Daniel @VirtualAllocEx

12 months ago

I wanted to learn more about using content delivery networks (CDNs) in Azure in conjunction with an Nginx reverse proxy in the context of using Cobalt Strike as a C2 framework. As a result, I've written the following blog post. redops.at/en/blog/cobalt… #redteam

4 82 259 16K 168

S3cur3Th1sSh1t @ShitSecure

12 months ago

Need some persistence but don't want to make it super obvious? Calling Get-MpPreference from Powershell will try to load wbemprox.dll via COM.🤪So even a sheduled task calling powershell with this function will trigger your C2 connection.

2 83 341 24K 259

Download Image

Remko Weijnen @RemkoWeijnen

a year ago

Proof of Concept to leverage Windows App to create an LSASS dump github.com/rweijnen/creat…

0 58 181 14K 104

Stephen Sims @Steph3nSims

a year ago

For those of you who were unable to attend the stream, you can watch the video with @alisaesage at the link below. We had over 7,500 attendees live, a new record for the @offby1security channel! Thanks! youtube.com/watch?v=9U-FK_…

1 34 116 16K 39

The DFIR Report @TheDFIRReport

a year ago

BlackSuit Ransomware 🌟Analysis & reporting completed by @MetallicHack, @yatinwad, & @malforsec. 🎵Audio: Available on Spotify, Apple, YouTube and more! 📚Report: thedfirreport.com/2024/08/26/bla…

1 54 133 14K 43

Orange Cyberdefense Switzerland @orangecyberch

a year ago

💻🛡️ In this series of blog posts, Clément Labro (itm4n) one of our ethical hacker, explores yet another avenue for bypassing LSA Protection in Userland. To discover the first article of this series: ow.ly/MaFA50SUqRO #orangecyberdefense #ethicalhacking #switzerland

2 50 122 11K 39

Download Image

dmnk.bsky.social @domenuk

a year ago

Blog post about improving existing fuzz harnesses to find bugs in regex libraries by @addisoncrump_vr secret.club/2024/06/30/rin…

0 15 41 3K 14

Aurélien Chalot @Defte_

a year ago

Looking for a way to retrieve the LSA backups, I found this blog from @0x64616e which contains quite a few interesting notes I didn't know about (esentutl for example) or the raw NTFS parse I have never tested. pentest.party/notes/windows/… So...