Aexyn @stHackPointer

Yet another Red Teamer Joined April 2017

Tweets

487
Followers

154
Following

287
Likes

1K

IT Guy @T3chFalcon

3 months ago

New attack vector: FileFix. A phishing trick that executes PowerShell straight from your browser no Run dialog, no pop-ups. Just a fake file path + clipboard + File Explorer. Red teamers, this one’s wild. 📽️ PoC + write-up: medium.com/@t3chfalcon/fi…

IT Guy @T3chFalcon

3 months ago

0 2 15 99K 9

22 257 1K 97K 1K

Download Video

Jean @Jean_Maes_1994

3 months ago

No one is likely surprised by this, but it does feed into the narrative of humanity actually dumbing down instead of becoming more intelligent. I have no empirical evidence at hand to support my gut feeling, but ever since the internet in general, I feel like we are dumber.

Alex Vacca @itsalexvacca

3 months ago

3K 39K 172K 23.2M 100K

Download Image

2 2 13 2K 2

Rad @rad9800

4 months ago

If you want to know about how helpdesk attacks really look like, @AnthonySecurity published the playbook. Practical read, of what really works - this stuff really works from my personal experience on RTs. You don't need crazy 0 days. Pick up the phone. praetorian.com/blog/helpdesk-…

2 35 149 9K 118

Wietze @Wietze

6 months ago

By making minor changes to command-line arguments, it is possible to bypass EDR/AV detections. My research, comprising ~70 Windows executables, found that all of them were vulnerable to this, to varying degrees. Here’s what I found and why it matters 👉 wietze.github.io/blog/bypassing…

10 219 795 56K 550

Download Image

Synacktiv @Synacktiv

6 months ago

In our latest article, @croco_byte and @SScaum demonstrate a trick allowing to make Windows SMB clients fall back to WebDav HTTP authentication, enhancing the NTLM and Kerberos relaying capabilities of multicast poisoning attacks! synacktiv.com/publications/t…

3 95 180 16K 76

n00py @n00py1

7 months ago

@ConsciousHacker

1 8 59 3K 1

Download Image

Alex Neff @al3x_n3ff

9 months ago

NetExec has a new Module: Timeroast🔥 In AD environments, the DC hashes NTP responses with the computer account NT hash. That means that you can request and brute force all computer accounts in a domain from an UNAUTHENTICATED perspective! Implemented by @Disgame_ 1/3🧵

11 280 936 96K 571

Download Image

Yehuda Smirnov @yudasm_

10 months ago

Excited to share a tool I've been working on - ShadowHound. ShadowHound is a PowerShell alternative to SharpHound for Active Directory enumeration, using native PowerShell or ADModule (ADWS). As a bonus I also talk about some MDI detections and how to avoid them

9 183 650 51K 452

Download Image

Ruikai @retr0reg

10 months ago

Interesting Gmail Prv-Esc Exploit you can exploit most organization that use @GoogleWorkspace, and won't be fixed indicated by Google. I found this unintentional when working on SMTP/ DMARC, and accidentally forged my head-of-school's gmail account, bypassed access-control, and…

14 87 501 69K 540

Download Image

Florian Hansemann @CyberWarship

10 months ago

''BOFHound: AD CS Integration'' #infosec #pentest #redteam #blueteam posts.specterops.io/bofhound-ad-cs…

0 16 36 4K 31

nyxgeek @nyxgeek

10 months ago

Did you know that 7z can browse .VHD and .VMDK files? You can open them right up, and even directly browse ntfs filesystems. On a pentest and find a bunch of disk images? Copy the SAM/SECURITY/SYSTEM hives directly from the images, no mounting, copying, or fussing around.

67 429 3K 186K 1K

Download Image

7h3h4ckv157 @7h3h4ckv157

a year ago

- How a single "?" can bypass Httpd’s built-in access control and auth. - How unsafe RewriteRules can escape the Web / and access the entire filesys. - How to leverage a piece of code from 1996 to transform an XSS into RCE. Must Read --> (credit link): blog.orange.tw/2024/08/confus…

0 22 38 2K 14

Octoberfest7 @Octoberfest73

a year ago

Fun little IOC in impacket-smbserver's Negotiate Protocol Response 🙃

7 57 247 39K 98

Download Image

CrowdStrike @CrowdStrike

a year ago

📢 Exciting news: today we announced CrowdStrike Falcon® Complete Next-Gen MDR to stop breaches with unprecedented speed and precision across the entire enterprise attack surface. 🔗 Full details on our blog: crwdstr.ke/6019iR6uv #Cybersecurity #MDR #AI #ThreatIntelligence

34 25 63 132K 10

Download Image

Kaspersky @kaspersky

a year ago

You wouldn't see this with any of our products (just sayin.) 🤷

829 1K 10K 1.7M 599

Download Image

Devuan GNU/Linux @DevuanOrg

a year ago

systemd-tmpfiles, deleting /home "systemd-tmpfiles --purge" will delete /home in systemd 256 tested with systemd-tmpfiles --dry-run --purge on @debian

25 110 462 75K 93

Download Image

/ˈziːf-kɒn/ @x33fcon

a year ago

#Azure AD guests are much bigger problems then most of us think and #LCNC is adding to the problem - @inbarraz presents at #x33fcon #security

0 4 6 2K 0

Download Image

Stéphane Bortzmeyer @bortzmeyer

a year ago

Ecosia Browser, ou quand le greenwashing numérique fume la moquette tout en plantant des arbres louisderrac.com/2024/04/ecosia… #lavageVert

1 24 55 6K 16

Ax Sharma @Ax_Sharma

a year ago

A GitHub flaw lets attackers upload executables that appear to be hosted on a company's official repo, such as Microsoft's—without the repo owner knowing anything about it. The following URLs, for example, make it seem like these ZIPs are present on Microsoft's source code repo:…

52 1K 5K 791K 2K

Download Image

Akamai Security Intelligence Group @akamai_research

a year ago

Can a DHCP administrator become a domain administrator? Well, as it turns out, sometimes it sure can. 🥴 In our latest blog post, see how Akamai researchers discovered a new PrivEsc technique affecting Active Directory. Full write-up: akamai.com/blog/security-…