sender

19 posts

sender

sender

@senderend

Pentester, Red Teamer @Specterops | OSCP https://t.co/NxqedjZKrn https://t.co/2Srd2LBpUo https://t.co/ocu6vX5cF5

San Francisco, CA Se unió Nisan 2024
96 Siguiendo110 Seguidores
sender
sender@senderend·
Developed a much-needed C2 channel for Mythic with @KingOfTheNOPs during a 24hr hackathon! *.blob.core.windows.net is often one of the only egress methods from more mature client environments.
SpecterOps@SpecterOps

New from @KingOfTheNOPs + @senderend: azureBlob, a Mythic C2 profile that uses Azure Blob Storage as transport.Supported Agents: 🐍 Medusa 🪽 Pegasus (new test agent) ❤️ Your fav agent (with simple integration guide) ghst.ly/3NM0LOR 🧵: 1/2

English
0
8
31
2.9K
sender retuiteado
SpecterOps
SpecterOps@SpecterOps·
WSL2 is a powerful attacker hideout because it runs as a separate Hyper-V VM, and defenders rarely monitor it. Daniel Mayer explains how attackers pivot into WSL2 and what it took to build tooling that works across WSL2 versions. Read more ⤵️ ghst.ly/45fPUma
English
8
172
728
103.1K
sender retuiteado
SpecterOps
SpecterOps@SpecterOps·
Credential Guard was supposed to end credential dumping. It didn't. @bytewreck just dropped a new blog post detailing techniques for extracting credentials on fully patched Windows 11 & Server 2025 with modern protections enabled. Read for more ⤵️ ghst.ly/4qtl2rm
English
9
336
739
136.2K
sender retuiteado
Bad Sector Labs
Bad Sector Labs@badsectorlabs·
MATCH (c1:Computer)-[:MemberOf*1..]->(g:Group) WHERE g.objectsid ENDS WITH '-516' WITH COLLECT(c1[.]name) AS dcs MATCH (c2:Computer) WHERE c2.enabled = true AND (c2.operatingsystem contains '2025') AND (c2[.]name IN dcs) RETURN c2[.]name If this query hits, you're in.
Yuval Gordon@YuG0rd

🚀 We just released my research on BadSuccessor - a new unpatched Active Directory privilege escalation vulnerability It allows compromising any user in AD, it works with the default config, and.. Microsoft currently won't fix it 🤷‍♂️ Read Here - akamai.com/blog/security-…

English
3
72
265
22.6K
sender
sender@senderend·
Had an amazing time at @BSidesSF this weekend! Super fun and well done CTF, solved quite a few and came agonizingly close on some of the harder ones, including one that remained unsolved by anyone! I was thrilled to run into Erik from @badsectorlabs and talk Ludus.
sender tweet mediasender tweet mediasender tweet mediasender tweet media
English
0
0
1
32
sender
sender@senderend·
As a follow up to my research on a GLPI command injection vulnerability, I've updated the @pdnuclei template for this CVE to detect the more advanced RCE vectors I researched. The PR is merged and live in the latest version of Nuclei, check it out below! github.com/projectdiscove…
English
0
0
0
75
sender retuiteado
SpecterOps
SpecterOps@SpecterOps·
In his new post, @jaredcatkinson examines how changing the implementation of tradecraft can have as much of an impact on detection programs as changing the behavior. Read more ⤵️ ghst.ly/4bIbFvA
English
0
21
54
6.3K
sender
sender@senderend·
As a follow up to my PrivEsc Server scripts, here's another writeup with some of my most useful shell aliases and functions. These saved me lots of time and repetitive keystrokes on the #OSCP exam, and made my terminal workflow much more fun! link.medium.com/HNhU5zmXLJb
English
0
0
0
142
sender
sender@senderend·
Here's my in-depth guide to the #OSCP course and exam. Check it out for all the tips and tricks I wish I had when I was studying. link.medium.com/M2f4v2v1fJb
English
0
0
0
121
sender
sender@senderend·
turns out, with enough finesse and research, the LSA will give you what you want if you ask nicely. all without touching LSASS memory! excellent wiki here as well. github.com/EvanMcBroom/ls…
English
0
0
0
28
sender retuiteado
werdhaihai
werdhaihai@werdhaihai·
Today I'm releasing AtlasReaper, a .NET tool designed for red teamers to interact with Confluence and Jira via C2 agents. Discover secrets and launch targeted attacks. Check out the blogpost for more details: @werdhaihai/7a90ba33bf62" target="_blank" rel="nofollow noopener">medium.com/@werdhaihai/7a… Github Repo: github.com/werdhaihai/Atl…
English
2
92
215
21.6K

Descubrir

@KingOfTheNOPs @breakfix @bytewreck @BSidesSF @badsectorlabs @pdnuclei @SpecterOps @jaredcatkinson