penteststuff @penteststuff

Pentest, hacking and locksport stuff. Aiming for a high Signal/Noise ratio. Joined March 2013

Tweets

705
Followers

153
Following

166
Likes

2K

Phrack Zine @phrack

3 weeks ago

At long last - Phrack 72 has been released online for your reading pleasure! Check it out: phrack.org

7 328 741 110K 242

Download Image

eversinc33 🤍🔪⋆｡˚ ⋆ @eversinc33

a year ago

Cool trick I learned from @0gtweet today: you can look up windows error codes, even in the -DEC form instead of hex, via certutil 🤯 Dont know if this was common knowledge but I used to convert it to hex and google it everytime

13 129 574 62K 354

Download Image

PagedOut @pagedout_zine

a year ago

Issue #4 is out – enjoy! pagedout.institute/?page=issues.p… Please RT and tell your friends :)

5 285 542 189K 141

Download Image

Greg Linares (Laughing Mantis) @Laughing_Mantis

a year ago

I have been telling people and companies for years that APTs have been targeting employee's home networks and routers - I have seen attacks on various home devices multiple times. I am glad that we have officially documented this behavior for APT31 therecord.media/chinese-hackin…

9 79 301 104K 139

Iceman @herrmann1001

a year ago

The Hitag2 research and findings has existed since 2011. The GPU versions came out 2018-ish, the improved one 2021. Proxmark3 has been able to perform it since 2011. It’s nothing new. It is me who finally got around to perform all different steps , fixing and finding…

4 5 42 8K 6

Oddvar Moe @Oddvarmoe

2 years ago

A list of some great sites lolbas-project.github.io loldrivers.io gtfobins.github.io lots-project.com filesec.io malapi.io hijacklibs.net wadcoms.github.io persistence-info.github.io unprotect.it

11 221 643 68K 472

Vess @VessOnSecurity

2 years ago

So, Microsoft's scanner started detecting malware in password-protected ZIP archvies and people are losing their shit because they have no goddamn clue how anti-virus programs work. arstechnica.com/information-te… Strap in, kids, because I'm in a lecturing mood. Thread:

11 257 1K 184K 499

LuemmelSec @theluemmel

2 years ago

If you want to wrap impacket stuff to an exe file via pyinstaller, make sure to: - Work on a Windows box - Install via: pip install impacket - Use --path to point to the impacket dir: pyinstaller ntlmrelayx.py --onefile --path C:\Python311\Lib\site-packages\impacket

5 51 154 22K 56

Download Image

SwiftOnSecurity @SwiftOnSecurity

2 years ago

Very extremely impressed with ChatGPT knowing how to assist performing traditionally GUI based Windows troubleshooting in command line too. Good way to learn automation in a world where most guides are GUI and search results "run sfc /scannow"

14 36 412 84K 96

Download Image

Synacktiv @Synacktiv

2 years ago

Beside LSASS, are you sure to loot every available secrets on your compromised Windows host? In our latest blogpost, @l4x4 summarizes the techniques and tools to ensure you do not miss any: synacktiv.com/publications/w…

2 81 228 27K 70

Simon Aarons @ItsSimonTime

3 years ago

Introducing acropalypse: a serious privacy vulnerability in the Google Pixel's inbuilt screenshot editing tool, Markup, enabling partial recovery of the original, unedited image data of a cropped and/or redacted screenshot. Huge thanks to @David3141593 for his help throughout!

135 3K 9K 2.1M 2K

Download Image

Cas van Cooten @chvancooten

3 years ago

You all know about `ssh -D [port]` opening up a SOCKS proxy, but did you know that `ssh -R [port]` opens up a reverse socks proxy on the target? I sure didn't 🤯

22 68 497 101K 246

Download Image

0xor0ne @0xor0ne

3 years ago

Cool blog post explaining how to weaponize a YubiKey (credits @Wh1t3Rh1n0) blackhillsinfosec.com/how-to-weaponi… #yubikey #infosec #CyberSecurity #hacking #redteam

1 51 195 0 48

Download Image

Dirk-jan @_dirkjan

3 years ago

Fox-IT just open sourced their enterprise forensics tooling dissect. This is a big project that some of the smartest people I know have worked on. It supports many filesystems and file formats, all as Python libraries. Docs: docs.dissect.tools / code: github.com/fox-it/dissect

21 597 2K 0 732

Download Image

🅰🅳🅼 @securityfreax

3 years ago

Run your shellcode directly from bash: dd of=/proc/$$/mem bs=1 seek=$(($(cut -d" " -f9</proc/$$/syscall))) if=<(base64 -d<<<utz+IUO+aRkSKL+t3uH+McCwqQ8F) conv=notrunc Credits to "unknown"

11 275 1K 0 378

Hervé Schauer @Herve_Schauer

3 years ago

A #BARBHACK22 démo en direct😀 Pour se connecter sur une session RDP verrouillée (sans le mot de passe), il suffit de se déconnecter et se reconnecter au réseau. De débrancher le câble Ethernet et le rebrancher. ⁉️ C’est une fonctionnalité Microsoft.😳 @_barbhack_

7 76 281 0 37

Download Image

Florian Roth ⚡️ @cyb3rops

3 years ago

TIL whenever you see an SSL certificate error and the browser doesn't let you continue - even on your own risk, you can just type 'thisisunsafe' to bypass the protection cybercafe.dev/thisisunsafe-b…

31 323 1K 0 337

Download Image

Alexandre TRIFFAULT @FrenchKey_fr

3 years ago

Merci @asso_hzv et tous les participants, c'était super sympa !

leHACK @_leHACK_

3 years ago

Merci @asso_hzv et tous les participants, c'était super sympa !

0 7 29 0 4

Download Image

0 2 8 0 1

Ring3API 🇺🇦 @ntlmrelay

3 years ago

📌How Does Windows Execute Shortcuts (.LNK)? - by @LabsSentinel ➡️sentinelone.com/labs/who-needs… #BlueTeam #ThreatHunting #DFIR

0 57 170 0 50

Download Image

Greg Linares (Laughing Mantis) @Laughing_Mantis

3 years ago

PSA If you are post initial access & wanna bypass a ton of AV detections on a box with office - just use the highly underrated office.interop or VSTOs to run your would be malicious code. It seems many don't load heuristics when Office doesn't have a doc loaded Happy hunting