Russ @rustla

Pentester who often hangs out with the blue team. (he/him) https://t.co/1FK1qTVE4f | https://t.co/am6hJzTsmf ///hacker.coffee.hops Joined December 2007

Tweets

3K
Followers

250
Following

645
Likes

6K

Garrett @unsigned_sh0rt

a day ago

knew win10 had the dsquery.dll laying around but never knew what to do with it "rundll32.exe dsquery.dll OpenQueryWindow" will pop open a console for you and you can do some light LDAP recon you can also open with with win + ctrl + f probably useful for VDI/Citrix type tests

6 60 286 19K 201

Download Image

Russ @rustla

3 days ago

A bunch of apps I’ve been poking around with lately interact with Dataverse using $batch queries. Not seen much chatter about it, but really handy to subvert intended logic when the queries and writes are just … there. Any authz issues are super obvious too 👁️👁️

0 1 1 72 0

IT Guy @T3chFalcon

a month ago

What is OAuth Consent Phishing? It’s a social engineering trick where the user grants access to a malicious app. What is Token Replay? It’s when you reuse stolen OAuth tokens to access cloud services without logging in again even after the user changes their password.

1 3 15 2K 5

Download Image

EZ @IAMERICAbooted

2 months ago

For people supporting SharePoint and application integrations, I want to make sure you understand something about API permissions for SharePoint and Graph: When you give an application sites.fullcontrol.all application permissions, you are transferring ownership of your entire…

3 5 66 19K 27

SpecterOps @SpecterOps

3 months ago

Introducing the BloodHound Query Library! 📚 @martinsohndk & @joeydreijer explore the new collection of Cypher queries designed to help BloodHound users to unlock the full potential of the BloodHound platform by creating an open query ecosystem. ghst.ly/4jTgRQQ