SkelSec

@KlezVirus @mkolsek U 🪨 Awesome!

[TALK] My latest Black Hat Europe talk is now publicly available. If you can look past the painfully obvious anxiety and a speaker who occasionally sounds like his brain has stopped cooperating, you might find something useful. Who knows? youtube.com/watch?v=tOVcSc…

@sekurlsa_pw @vysecurity I do rather frequently

@vysecurity Yeah I was thinking about that, but I don't really encounter that in the wild.

If you are using TimeRoast in real environments, do you ever crack one of the generated hashes? Because the password hashes of computer accounts are normally randomly generated, so you need one with a manually set password if you want to crack it. Does that occur?

@_RastaMouse Help I ate 5 cheeseburgers on accident

It really makes me lul when ppl email asking for a refund because they bought a course 'on accident'. How can you navigate the website, click Buy, enter your payment info, and confirm the order 'on accident'...

@C5pider Is it me you're looking for?

hello?

Video and slides of my webinar on Evading Microsoft Defender for Identity are published. One of my favorite topics. Hope to keep coming back to MDI evasion. Video - youtube.com/watch?v=Ygrvs8… Slides - …5-4665-b161-30113ba1b7e4.usrfiles.com/ugd/16cdd7_8b7… #HackerSummer #RedTeam #Evasion

Entrypoint functions gotta sound crazy.

There's only a handful of spots left for our @defcon edition Red Team SIGINT training. Register before July 5th and get a $250 discount through the code DCTLV26-250-select 👉 @defcon 34 - Aug 10-11 : training.defcon.org/collections/de… #DCTraining250 #DEFCON #RFsecurity #SDR #SIGINT

@ShitSecure @KlezVirus @MCTTP_Con There is a chance, not 100% sure yet 😭

@SkelSec @KlezVirus @MCTTP_Con You are there?

In september @MCTTP_Con - we will reveal our latest research about USB Co-Installer and Driver vulnerability exploitation for Privilege Escalation. 🔥🔥Super happy to work together with @KlezVirus on that research! 🫡

This was a lot of effort, but I'm so happy about how it turned out!!

Onelogon: Taking over Active Directory Accounts via Netlogon🔑 We analyzed Netlogon, bypassed the Zerologon patch, resulting in a full auth bypass. An attacker can leverage this to compromise computer accounts, or even the entire AD. Non-standard config must be present tho 🧵

@al3x_n3ff Baahahahhhaaaahaha. Ha! Nice!

I just wrote a new blog on bypassing CA policies in Entra ID that have a resource exclusion, and why you probably want to enable baseline enforcement if you have such policies. Enjoy! dirkjanm.io/bypassing-cond…

new version of aardwolf (my async python rdp client library) is out on pip and github. thank you for the PRs fixing some connection issues and support for python3.14 Also I added clipboard file download as an extra. (upload was already there but I was lazy) enjoy

OctoPwn is on a roll, big things are coming soon!!!

After “The Art of Evasion” @x33fcon I’m publishing NimSyscallPacker to the public. This is the most advanced public Packer/Loader I’m aware of: github.com/S3cur3Th1sSh1t…

🚨 New advisory by @Kruxinator & Christian Hager: Local privilege escalation in @genetec 's #RabbitMQ deployment (#CVE-2026-25112) Writable dir + missing binary + SeImpersonatePrivilege = SYSTEM via Rotten Potato 🥔 Patch available. Apply now! 🔗 r.sec-consult.com/genetec #privesc

alternatively, coffee snacks