urandom @devewerandom

cyber stuff Joined December 2020

Tweets

24
Followers

123
Following

988
Likes

17

Ian Carroll @iangcarroll

3 years ago

Well, ChatGPT knows AWS IAM policies... holy shit.

60 418 4K 0 545

Download Image

mgeeky | Mariusz Banach @mariuszbit

4 years ago

Recently I started digging into Office365 Anti-Spam & spent a lot of time decoding and comprehending SMTP headers. Results are already satisfying: 10+ SFS/ENG rules "reverse-engineered"! You're on a phishing now? Give my decode-spam-headers.py a ride! bit.ly/3nzBZka

7 183 577 0 142

Download Image

Jonas Vestberg @bugch3ck

4 years ago

Implemented PetitPotam/EfsPotato into the awesome SweetPotato project by @_EthicalChaos_. It bypasses the latest MS patch by using EfsRpcEncryptFileSrv. Escalate to SYSTEM from SeImpersonatePrivilege on a fully patched Windows system.

4 182 452 0 59

Download Image

inversecos @inversecos

4 years ago

Dumping Lsass without Mimikatz - old technique but have been seeing TAs also use this in environments: Step1: tasklist /fi "Imagename eq lsass.exe" Step 2: C:\Windows\System32\rundll32.exe C:\windows\System32\comsvcs.dll, MiniDump <PID> \Windows\Temp\<name>.dmp full

6 220 789 0 171

Download Image

Yarden Shafir @yarden_shafir

4 years ago

Running out of EDR bypass techniques (that's funny, of course you're not)? Don't worry, Microsoft is here to help you with a new one: windows-internals.com/thread-and-pro…

5 172 415 0 64

Download Image

Adam Chester 🏴‍☠️{AFK} @_xpn_

4 years ago

New blog post looking at Azure Application Proxy, how it works, how we can create our own connector and of course how we can use it for C2... one for you Service Bus fans ;) trustedsec.com/blog/azure-app…

3 131 251 0 33

James Forshaw @tiraniddo

4 years ago

New blog on the background and methodology of some research I did into escaping Windows Server containers, why the bugs were eventually fixed, and why you still shouldn't use them :-) googleprojectzero.blogspot.com/2021/04/who-co…

3 173 322 0 42

SkelSec @SkelSec

4 years ago

New #pypykatz verison (0.4.8) is out on pip and github. new features: remote LSASS file dump+ parse (SMB) remote registry dump+parse (SMB) dcsync (SMB/RPC) 'secretsdump' added reduced parsing time (by over 20%) option to specify target packages to parse github.com/skelsec/pypyka…

1 134 322 0 31

S3cur3Th1sSh1t @ShitSecure

5 years ago

Callback shellcode execution ported to csharp 🧐 Initial cpp code: github.com/ChaitanyaHarit… Csharp version: gist.github.com/S3cur3Th1sSh1t…

2 56 139 0 25

Download Image

Rasta Mouse @_RastaMouse

5 years ago

Most 1337 Artifact Kit bypass ever. I don't think I'll ever understand AV...

9 45 252 0 29

Download Image

S3cur3Th1sSh1t @ShitSecure

5 years ago

Defender in memory scan - Hasta la vista, baby! 🥳 DInvoke Syscalls to avoid hooking + Sleeps for the DLL imports. Both trigger a scan, so doing only one won´t help. Only needs an amsi.dll patch bypass before. gist.github.com/S3cur3Th1sSh1t… Let´s see how long this will last 😬

7 110 290 0 38

Download Image

Grzegorz Tworek @0gtweet

5 years ago

And what if I tell you sfc.exe loads SSShim.dll (and couple of other DLLs too) from the SCANNED Windows, and not from the scanning one? 😈 Additionally, sfc.exe enforces you to run it as local admin. Will you scan my OS image, please? 🙏

8 113 423 0 44

Download Image

CCob🏴󠁧󠁢󠁷󠁬󠁳󠁿 @_EthicalChaos_

5 years ago

Beginning fall in love with Boo. A dynamically generated .NET assembly ready for persistence via COM hijacking.

1 17 104 0 13

Download Image

Damanpreet Singh🇮🇳🐐 @MrDamanSingh

5 years ago

In love with SSRF through reverse proxy misconfiguration. Got almost 25 SSRFs in 3 4 days. Methodology: 1. Identify any reverse proxy, like(nginx, cloudfront etc) (18 subdomains/targets were using nginx) 2. Change Host: <targer> to burp-collab 3. If it loads burp-collab response

34 190 617 0 217

David Schütz @xdavidhu

5 years ago

I just published a new @GoogleVRP writeup about stealing @YouTube Watch History, Unlisted Videos, Watch later, Liked Videos, and more! 👀 Check it out: bugs.xdavidhu.me/google/2021/01…

15 149 487 0 99

CCob🏴󠁧󠁢󠁷󠁬󠁳󠁿 @_EthicalChaos_

5 years ago

Dumping lsass completely in memory without touching disk. Need an exfil BOF added to BOF.NET now to get that 55MB dump straight into #CobaltStrike.

6 88 306 0 40

Download Image

Rahul Maini @iamnoooob

5 years ago

I and @rootxharsh found and exploited a 0Day RCE in Apple's Travel Portal and were rewarded with $50K. Here's the write-up for that: github.com/httpvoid/write…