@abdo_mhanni @lowercase_drm @0x64616e Nah man, don't try to make my projects mainstream. After the fifth time I'm sure they'll get it right and they won't have to credit me again...
English
SkelSec
6.8K posts
@lowercase_drm @0x64616e I don’t see why impacket isn’t moving to @SkelSec msldap. They mentioned in response to someone’s PR that they are moving away from ldap3 and improving their own.
Kinda weird to reinvent the wheel when msldap already does it all very well
English
The conclusion of my last post (offsec.almond.consulting/ldap-authentic…) is « Since a lot of impacket’s examples are based on ldap3, it seems easy to adapt them to work against hardened domain controllers ». Good job @0x64616e!
English
SkelSec retweetledi
Duuuude VulDB is the worst, they made public all 3 of my original disclosures that include the fully working root shell exploits ....
English
The answer is yes*. Most pentests are for web apps and compliance driven anyway.
If you think companies won't jump at the opportunity of cheaper pentests to satisfy their compliance requirements you're deluding yourself (regardless of the AI component). "AI driven" Internal network pentests I'd imagine will be a harder pill to swallow, but it's doable at a technical level with the current generation of LLMs . Red Teaming is a different story.
Medusa@medusa_0xf
Will pentesting be replaced by AI? 🤔
English
@daveaitel We’ve all had infinitely growing backlogs with no incentive to address them.
Whatever we were doing wasn’t comprehensive, many things swept under the rug.
All of this is inevitable, almost nothing to do with AI. But 14 year olds being able to report bs makes it more annoying.
English
Fwiw the problem was never that AI slop was going to overwhelm security teams: the problem was that having their hidden technical debt all called in at once was going to overwhelm them. Chrome having as many bugs as it still does is the perfect case example.
English
@HackingLZ We have something interesting in this topic but stuck with explaining it to investors in EU so... :(
English
I’m really interested in what happens as places take a lot of investment money to build commodity OffSec LLM backed products, even as the barrier to entry keeps dropping. You eventually end up with what actually matters novel research, deep domain expertise, and humans.
English
SkelSec retweetledi
SkelSec retweetledi
WSUS fake updates for LPE or RCE when HTTP is being used? This one took many days and troubleshooting with claude but now we have a C2-Capable tool for the full stack including poisoning plus fake update delivery - the only thing we need is a low privileged C2 session! 🔥
English
You don’t get a discount if Claude wrote the code?
Claude@claudeai
Code Review optimizes for depth and may be more expensive than other solutions, like our open source GitHub Action. Reviews generally average $15–25, billed on token usage, and they scale based on PR complexity.
English
$15-25 PER PR?? I already thought the $1 per scan of /security-review was not scalable, this must be a weird strategy to anchor the initial price super high
Claude@claudeai
Code Review optimizes for depth and may be more expensive than other solutions, like our open source GitHub Action. Reviews generally average $15–25, billed on token usage, and they scale based on PR complexity.
English
SkelSec retweetledi
🔥🐉 New GOAD Lab: DRACARYS
I’ve just released a new free lab environment on GOAD: DRACARYS.
The challenge includes 3 VMs and the objective is simple:
Start with no authentication and work your way up to Domain Admin.
Have fun exploiting it! 🔥🐉
mayfly277.github.io/posts/Dracarys…
English
SkelSec retweetledi
Spread the word! @phrack CFP with demoscene cracktro is live. Turn up the volume and enjoy the awesome stylings of @PiotrBania with some hopefully inspiring text from phrack staff :)
phrack.org
English
SkelSec retweetledi
@passthehashbrwn @_JohnHammond I'm realizing some of the ppl I know weren't even alive when this came out and now I'm sad :(
English
@passthehashbrwn @_JohnHammond Omg!!!!!! This is awesome!!!
Have you seen this as well! IT security will never be the same!!!
web.archive.org/web/2021011816…
English
