gerbsec

wrote a blog post on cs obfuscation! feel free to read it! gerbsec.com/cs-obfuscation…

@stratosberry @co11ateral @three_cube @_aircorridor @DI0256 nxc

@co11ateral @three_cube @_aircorridor @DI0256 Amazing research, hope someone can port it to python or make it run from a linux host.

Timeroasting can be used to extract user hashes and it's stealtier than DCSync or NTDS shadow copies. Defenders should start monitoring this activity. Learn how: hackers-arise.com/powershell-for… @three_cube @_aircorridor @DI0256 #DFIR #BlueTeam #redteam

@_RastaMouse oh wow this is amazong

Some pretty cool OPSEC-specific challenge labs coming to RTO soon (hopefully 🤞🏻)

@IOKernel my computer brain instantly disagreed and was ready to say "no u can learn any programming languages if u know one" then i finished the tweet

@PirateSoftware @defcon ok i really wanted to meet u but also i was winning a ctf and couldnt jeapordize that, so i was glued to my laptop :(

Caught this dude at @defcon. Big fan.

Alhamdulillah! Took 2nd place in the @AdversaryVillag CTF! Congrats to @rayanlecat ! Wish I didn't have to leave early morning on the third day if the competition or I'm sure I would have gave you a run for your money! Honestly placing top 3 at DC has been a dream of mine.

@PirateSoftware @defcon will do!

@gerbsec @defcon Yes! Say hey if you see me!

First year new village at @defcon. You love to see it.

Over a year ago, I left my position at WithSecure to start a new journey, create something new, and do my own thing. Today, I'm excited to publicly announce what I've been working on all this time. Introducing 0xC2, a cross-platform C2 framework targeting Windows, Linux, and MacOS environments: 0xc2.io The first release was back in late 2023, initially only offered to a small circle of red teamers and soon, the registration will be open for new clients who provide threat simulation services. All agents are written as PIC in C to provide better opsec and to allow operators to be more flexible when designing payloads. To make the agents modular and fully customizable, operators can create a user-defined virtual table that can be hooked by the agent. This can be used to change the default behavior of an agent or extend capabilities, from adding internal commands to implementing P2P protocols. More details will be available soon.

@sn0wthepup @thoughtfault lol osed??????????? that has nothing to do with rt..

@thoughtfault To be fair, you can't really expect that from an ordinary red team course. Gotta be OSED certified *at least*

> spend 10k on red teaming courses > can't bypass windows defender

as soon as i made the decision to not pursue the cert right now, i became way more motivated to do other things that i enjoyed. im sure ill be back and ill def tackle it in the future. right now is not the right time for me! 2/2

all i could think about for the past months is the osed, its been plaguing my very existence. i want to get it but its not fun at all to me and felt like i was forcing myself. it got so bad that i couldnt do anything else in my life cause i felt guilty that i didnt do osed. 1/2

wrote a blog post on ppid spoofing for shellcode injection purposes! hopefully this helps someone write some cool malware! gerbsec.com/adopted-maps

@IOKernel monster! i still got 2 left. iA ill wrap up osed in the next month and then ill oswe which i guess should be the easiest.

@jrozner thats amazing man, i did the osep and about 80% into osed and that shit got me fucked in the head!!! how'd you keep the motivation through it? any advice?

I don’t know if I ever said anything but I finished OSCE3 back in march when I passed OSEP. Finally for the paper certificate a month back or so

@Yam0x45 dog i dont even wanna say what type of content is on mine... its so so bad

@gerbsec It is so unbelievably toxic and filled with brain-rot

dog for you feed is hot trash, time to follow more people and use my following page more ig

A new module just got merged into NetExec, which extracts the security Questions for local users 🚀 Made by @Adamkadaban If you want to know the details, you can read his blog post here: hackback.zip/2024/05/08/Rem…

Some words of wisdom: "من لا رأي له، رأسه كمقبض الباب يستطيع أن يديره كل من يشاء " "When a person does not have any opinions, his head becomes like a door knob. Whoever desires to turn it can easily do so"

feeling like shit, complete lack of motivation... im practically forcing myself to do what needs to be done...