michael @michaelweimer_

security professional, researcher, penetration test lead @teamhoplite | co-founder, CTO @shieldcyberio michaelweimer.com Indianapolis, IN Joined December 2019

Tweets

68
Followers

33
Following

369
Likes

579

Yuval Gordon @YuG0rd

4 months ago

🚀 We just released my research on BadSuccessor - a new unpatched Active Directory privilege escalation vulnerability It allows compromising any user in AD, it works with the default config, and.. Microsoft currently won't fix it 🤷‍♂️ Read Here - akamai.com/blog/security-…

22 374 868 158K 453

Download Image

Microsoft Threat Intelligence @MsftSecIntel

6 months ago

The key to securing Active Directory is being proactive about hardening policy, remediating underlying weaknesses and applying the principle of least privilege to the environment before a cyberattack. By reducing the paths from standard non-privileged users to privileged users,…

5 79 311 42K 285

NSA Cyber @NSACyber

12 months ago

Stay ahead of Active Directory targeting. We teamed with @ASDGovAu and others to provide recommended strategies to prevent and detect malicious actors attempting to access the keys to your network. Read our joint guidance: nsa.gov/Press-Room/Pre…

10 115 308 41K 160

Download Image

inversecos @inversecos

12 months ago

Understanding EVERY Token in Entra ID 🔎 Not all tokens are equal. There are many different types with different uses and benefits. In this blog, I break down each token and what they are used for and which tokens are the most "valuable" for an attacker to obtain. Full blog…

17 227 729 85K 542

Download Image

ProPublica @propublica

a year ago

Microsoft has long downplayed its role in the 2020 "SolarWinds" attack -- one of the largest cyberattacks in US history -- but a new ProPublica investigation reveals that the tech giant ignored warnings that could have stemmed the damage... 🧵

8 225 416 176K 127

Download Image

watchTowr @watchtowrcyber

a year ago

CVE-2024-4577, our rapid analysis of a vuln found by @orange_8361 labs.watchtowr.com/no-way-php-str…

1 102 273 37K 87

Andrew Morris (afk) @Andrew___Morris

a year ago

stay sharp on checkpoint CVE-2024-24919 (and likely subsequent checkpoint CVEs). seeing in-the-wild exploitation in @GreyNoiseIO now. viz.greynoise.io/tags/check-poi…

2 42 79 19K 18

Download Image

WTHR.com @WTHRcom

a year ago

An Ascension St. Vincent spokesperson confirmed some of its technology network systems have been interrupted today. wthr.com/article/news/h…

2 4 3 8K 1

Sam Erde @SamErde

a year ago

Ops teams and cyber/infosec teams take note. Patching and vulnerability management are important, but there is SO much more right under our noises. Start investing time in learning how your systems work and how to identify misconfigurations. This is where the action happens!

IAM!ERICA @EricaZelic

a year ago

13 11 130 100K 49

1 7 45 22K 9

IAM!ERICA @EricaZelic

a year ago

The vulnerability scan has 400+ findings. I exploit the domain with nothing on it. When is this madness going to change? LOL

13 11 130 100K 49

chompie @chompie1337

3 years ago

Demonstrating CVE-2022-37958 RCE Vuln. Reachable via any Windows application protocol that authenticates. Yes, that means RDP, SMB and many more. Please patch this one, it's serious! securityintelligence.com/posts/critical…

68 1K 4K 0 586

Download Video

Justin Elze @HackingLZ

3 years ago

Reposting this because some of you might find it useful. It's common proxy/url categorization sites for most vendors. A lot of which let you submit a re cat with no account and the validation is often fully automated. pastebin.com/2yu4Rsj1

5 36 116 0 53

Zak @_ZakSec

3 years ago

If you're interested by an alternative way to dump domain users' NT hashes and TGT without touching LSASS, take a look at the new Masky tool :) Everything is explained in this article: z4ksec.github.io/posts/masky-re… Thanks @harmj0y, @tifkin_ and @ly4k_ for their amazing work on ADCS!

19 347 865 0 224

IBJ News @IBJnews

3 years ago

Teddy Guzek founded Hoplite, a company that specializes in finding technical cybersecurity gaps for its clients then providing ways to mitigate risk, when he returned to Indianapolis from Chicago, where he got his first job out of college. #IBJ20s

1 1 1 0 0

Jonas Bülow Knudsen @Jonas_B_K

3 years ago

New blog post! 📃 It will give a primer on how you can implement security boundaries in your infrastructure to prevent compromise of critical assets based on tiered administration posts.specterops.io/establish-secu…

4 110 267 0 68

Andy Robbins @_wald0

3 years ago

Products are not the solution to every information security problem. But a great product might be the best solution to a particular problem. Whether you make FOSS or commercial products, I want to share with you a great tool for developing better product features: 🧵

2 8 27 0 7

Mor Davidovich @dec0ne

3 years ago

Introducing KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings). All credits go to @tiraniddo @cube0x0 @harmj0y, most of the code was taken from their tools. github.com/Dec0ne/KrbRela…

21 477 1K 0 263

mgeeky | Mariusz Banach @mariuszbit

3 years ago

😶‍🌫️While working on @nikhil_mitt outstanding Azure Red Team course I've developed a handy powershell toolkit combining various Azure Red Team tactics. Sharing it now, maybe someone will find it useful✨ github.com/mgeeky/AzureRT

4 135 356 0 89

michael @michaelweimer_

3 years ago

I have seen this on several of our Client’s networks. The severity of this was greatly overshadowed by #log4j but should not be overlooked. Patch your DC’s (!!!) and adjust your default MachineAccountQuota

Stephan Berger @malmoeb

3 years ago

11 129 563 0 155

Download Image

0 0 0 0 0

Dirk-jan @_dirkjan

4 years ago

New blog: Relaying Kerberos over DNS using krbrelayx and mitm6. New method of gaining RCE on AD hosts in the same VLAN without credentials or needing NTLM, by abusing Kerberos, DNS and Active Directory Certificate Services. Blog: dirkjanm.io/relaying-kerbe…