Framapiaf

10 messages9 participants0 message aujourd’hui

Tim (Wadhwa-)Brown :donor:We shall call our host something.on.someoneelses.tld. What could go wrong?<a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a>

Tim (Wadhwa-)Brown :donor:Hmmm, a service running as DA calling c:\nosuchfile.exe to start where Users has create rights...What could go wrong? Genuinely wondered if the box had already been popped...<a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a>

Redhotcyber🔥 CORSO ETHICAL HACKER EXTREME EDITION: IL PERCORSO DEFINITIVO PER L’HACKING ETICO! 🔥✅ Pacchetto ELITE CLUB incluso: 🔹 5 anni di accesso a 50+ scenari di hacking 🔹 Lezioni avanzate su tecniche e strategie d’attacco 🔹 Piano quinquennale per il mantenimento della certificazione professionale📅 PARTECIPA GRATUITAMENTE AL WEBINAR L'8 APRILE 2025 ORE 18:00 ⚠️ Posti limitati – e come sempre, garanzia soddisfatti o rimborsati! 👉LINK REGISTRAZIONE : <a href="https://cybersecurityup.webinargeek.com/presentazione-del-corso-ethical-hacker-extreme-edition-aprile-2025?cst=rhc" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cybersecurityup.webinargeek.com/presentazione-del-corso-ethical-hacker-extreme-edition-aprile-2025?cst=rhc</a> 📞 3755931011 ✉️ e.picconi@fatainformatica.it<a href="https://mastodon.bida.im/tags/redhotcyber" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redhotcyber</a> <a href="https://mastodon.bida.im/tags/rhc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#rhc</a> <a href="https://mastodon.bida.im/tags/webinar" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#webinar</a> <a href="https://mastodon.bida.im/tags/EthicalHackerExtremeEdition" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#EthicalHackerExtremeEdition</a> <a href="https://mastodon.bida.im/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://mastodon.bida.im/tags/formazioneprofessionale" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#formazioneprofessionale</a> <a href="https://mastodon.bida.im/tags/infocert" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infocert</a> <a href="https://mastodon.bida.im/tags/sicurezzainformatica" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sicurezzainformatica</a> <a href="https://mastodon.bida.im/tags/ethicalhacker" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ethicalhacker</a> <a href="https://mastodon.bida.im/tags/hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacking</a> <a href="https://mastodon.bida.im/tags/cyberrange" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cyberrange</a> <a href="https://mastodon.bida.im/tags/hackmeup" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hackmeup</a> <a href="https://mastodon.bida.im/tags/hackthebox" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hackthebox</a> <a href="https://mastodon.bida.im/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a> <a href="https://mastodon.bida.im/tags/capturetheflag" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#capturetheflag</a> <a href="https://mastodon.bida.im/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://mastodon.bida.im/tags/dataprotection" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dataprotection</a> <a href="https://mastodon.bida.im/tags/cybersecurityawareness" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurityawareness</a> <a href="https://mastodon.bida.im/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacy</a> <a href="https://mastodon.bida.im/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://mastodon.bida.im/tags/officer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#officer</a>

Lenin alevski 🕵️💻New Open-Source Tool Spotlight 🚨🚨🚨Mimikatz is a well-known open-source tool for extracting credentials from Windows systems. It can retrieve plaintext passwords, hash credentials, and even Kerberos tickets from memory. Used by both researchers and attackers, it highlights the importance of secure credential management in Active Directory environments. <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/WindowsSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WindowsSecurity</a>🔗 Project link on <a href="https://infosec.exchange/tags/GitHub" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GitHub</a> 👉 <a href="https://github.com/gentilkiwi/mimikatz" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/gentilkiwi/mimikatz</a><a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/Software" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Software</a> <a href="https://infosec.exchange/tags/Technology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Technology</a> <a href="https://infosec.exchange/tags/News" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#News</a> <a href="https://infosec.exchange/tags/CTF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CTF</a> <a href="https://infosec.exchange/tags/Cybersecuritycareer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecuritycareer</a> <a href="https://infosec.exchange/tags/hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacking</a> <a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a> <a href="https://infosec.exchange/tags/blueteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#blueteam</a> <a href="https://infosec.exchange/tags/purpleteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#purpleteam</a> <a href="https://infosec.exchange/tags/tips" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tips</a> <a href="https://infosec.exchange/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> <a href="https://infosec.exchange/tags/cloudsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cloudsecurity</a>— ✨ 🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️

Erik JonkerDOGE destroying cybersecurity in the USA. This also has impact on all those digital services from the US we rely on <a href="https://www.theregister.com/2025/03/12/cisa_staff_layoffs/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.theregister.com/2025/03/12/cisa_staff_layoffs/</a> <a href="https://mastodon.social/tags/doge" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#doge</a> <a href="https://mastodon.social/tags/musk" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#musk</a> <a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://mastodon.social/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a> <a href="https://mastodon.social/tags/cisa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cisa</a>

0ddj0bbHey <a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a> and <a href="https://infosec.exchange/tags/pentest" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pentest</a> ers, what security controlsnon endpoints and servers make your life miserable on an engagement? App allow listing? DEP? Powershell execution policies? Hostbased firewall?<a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacking</a> <a href="https://infosec.exchange/tags/cyber" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cyber</a> <a href="https://infosec.exchange/tags/dfir" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dfir</a>

r1cksecA Windows standalone executable tool that allows you to change the password of user/computer accounts in Active Directory (AD) via MS-SAMR protocol🕵️‍♂️ <a href="https://github.com/decoder-it/ChgPass" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/decoder-it/ChgPass</a><a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a> <a href="https://infosec.exchange/tags/pentest" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pentest</a>

Lenin alevski 🕵️💻New Open-Source Tool Spotlight 🚨🚨🚨Bettercap is a powerful, modular tool for network attacks and monitoring. It supports ARP spoofing, DNS spoofing, packet sniffing, and more. Written in Go, it's flexible and efficient for intercepting and manipulating network traffic on various protocols. <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/networking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#networking</a>🔗 Project link on <a href="https://infosec.exchange/tags/github" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#github</a> 👉 <a href="https://github.com/bettercap/bettercap" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/bettercap/bettercap</a><a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/Software" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Software</a> <a href="https://infosec.exchange/tags/Technology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Technology</a> <a href="https://infosec.exchange/tags/News" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#News</a> <a href="https://infosec.exchange/tags/CTF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CTF</a> <a href="https://infosec.exchange/tags/Cybersecuritycareer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecuritycareer</a> <a href="https://infosec.exchange/tags/hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacking</a> <a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a> <a href="https://infosec.exchange/tags/blueteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#blueteam</a> <a href="https://infosec.exchange/tags/purpleteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#purpleteam</a> <a href="https://infosec.exchange/tags/tips" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tips</a> <a href="https://infosec.exchange/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> <a href="https://infosec.exchange/tags/cloudsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cloudsecurity</a>— ✨ 🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️

Tim (Wadhwa-)Brown :donor:Side thought: What if you injected a non-existent domain user into the various Linux AD integration's caches? In at least one case, the cache is a SQLite database. Also, would the same be possible on Windows. Interesting persistence approach if it worked.<a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a>, <a href="https://infosec.exchange/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linux</a>

r1cksecAn article about the security implications of abandoned third-party JavaScript libraries🕵️‍♂️ <a href="https://blog.fraktal.fi/examining-external-dependencies-in-web-applications-0846894cecdd" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://blog.fraktal.fi/examining-external-dependencies-in-web-applications-0846894cecdd</a><a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/web" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#web</a> <a href="https://infosec.exchange/tags/javascript" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#javascript</a> <a href="https://infosec.exchange/tags/pentest" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pentest</a> <a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a>

r1cksecChrome browser extension-based Command & Control🕵️‍♂️ <a href="https://github.com/Darkrain2009/RedExt" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/Darkrain2009/RedExt</a><a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a> <a href="https://infosec.exchange/tags/pentest" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pentest</a> <a href="https://infosec.exchange/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> <a href="https://infosec.exchange/tags/browser" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#browser</a>

Tim (Wadhwa-)Brown :donor:For EU folks, <a href="https://infosec.exchange/@mitreattack" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@mitreattack</a> community is coming around again in May. Register here: <a href="https://attack-community.org/event/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://attack-community.org/event/</a>.Also. v17 release is slated for 22nd April.<a href="https://infosec.exchange/tags/atr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#atr</a>&ck, <a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a>, <a href="https://infosec.exchange/tags/blueteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#blueteam</a>

Matthias SchulzeIch merke immer wieder, wie schwer es Normalsterblichen fällt, Cyber-Angriffe zu verstehen. Arbeitet jemand als red teamer und hat mal Lust, eine Podcast-Folge mit mir zu machen, um mal Schritt für Schritt zu erklären, wie man dabei vorgeht, wie Cyber-Operationen ablaufen. Also z.B. entlang MITRE ATT&CK oder Killchain? <a href="https://ioc.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a> <a href="https://ioc.exchange/tags/cyber" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cyber</a>

Max Maass :donor:Last week, I finally finished my writeup of a vulnerability based on a misuse of <a href="https://infosec.exchange/tags/Cryptography" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cryptography</a> that we found a while back in a penetration test. It's my favorite vulnerability so far, as it relies on abusing basic properties of unauthenticated encryption and shows, in a real-world scenario, how such seemingly theoretical issues can compromise an entire system. In the end, it's a teachable moment about both cryptography and secure software architecture.I had the draft lying around for more than a year, but reading the articles by <a href="https://furry.engineer/@soatok" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@soatok</a> finally reminded me that I should really wrap this up and post it. So, here it is: <a href="https://blog.maass.xyz/encryption-isnt-enough-compromising-a-payment-processor-using-math" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://blog.maass.xyz/encryption-isnt-enough-compromising-a-payment-processor-using-math</a><a href="https://infosec.exchange/tags/RedTeam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RedTeam</a> <a href="https://infosec.exchange/tags/BlueTeam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BlueTeam</a> <a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/SoftwareArchitecture" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SoftwareArchitecture</a>

Redhotcyber🔥 Preiscrizioni CORSO ETHICAL HACKER E PENETRATION TESTER! 🌟 Certificazioni riconosciute a livello internazionale in conformità alle normative italiane 🎁 Accesso 12 mesi alla piattaforma HackMeUp 💰 Prezzo scontato per preiscrizioni entro venerdì 7 marzo ⏳ 34 settimane di formazione intensiva + 5 anni di accesso alla piattaforma di hacking HackMeUp + Accesso per 5 anni all'Elite Club con corsi Python, Malware Analysis e Reverse Engineering 💳 Possibilità di rateizzare in 12 rate📅 Inizio corso 16 aprile 2025📲 Blocca l'iscrizione e diventa parte della community RHC: <a href="https://www.cybersecurityup.it/ethical-hacker-path" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.cybersecurityup.it/ethical-hacker-path</a> 📞 3755931011 | ✉️ e.picconi@fatainformatica.it<a href="https://mastodon.bida.im/tags/redhotcyber" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redhotcyber</a> <a href="https://mastodon.bida.im/tags/rhc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#rhc</a> <a href="https://mastodon.bida.im/tags/webinar" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#webinar</a> <a href="https://mastodon.bida.im/tags/EthicalHackerExtremeEdition" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#EthicalHackerExtremeEdition</a> <a href="https://mastodon.bida.im/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://mastodon.bida.im/tags/formazioneprofessionale" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#formazioneprofessionale</a> <a href="https://mastodon.bida.im/tags/infocert" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infocert</a> <a href="https://mastodon.bida.im/tags/sicurezzainformatica" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sicurezzainformatica</a> <a href="https://mastodon.bida.im/tags/ethicalhacker" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ethicalhacker</a> <a href="https://mastodon.bida.im/tags/hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacking</a> <a href="https://mastodon.bida.im/tags/cyberrange" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cyberrange</a> <a href="https://mastodon.bida.im/tags/hackmeup" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hackmeup</a> <a href="https://mastodon.bida.im/tags/hackthebox" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hackthebox</a> <a href="https://mastodon.bida.im/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a>

r1cksecExploitation of the container runtime socket to move laterally or to escalate privileges🕵️‍♂️ <a href="https://thegreycorner.com/2025/02/12/containerd-socket-exploitation-part-1.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://thegreycorner.com/2025/02/12/containerd-socket-exploitation-part-1.html</a><a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/docker" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#docker</a> <a href="https://infosec.exchange/tags/pentest" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pentest</a> <a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a>

r1cksecTool for viewing NTDS.dit<a href="https://github.com/trustedsec/DitExplorer" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/trustedsec/DitExplorer</a><a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/activedirectory" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#activedirectory</a> <a href="https://infosec.exchange/tags/windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#windows</a> <a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a> <a href="https://infosec.exchange/tags/pentest" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pentest</a>

r1cksecSoaPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts🕵️‍♂️ <a href="https://github.com/logangoins/SoaPy" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/logangoins/SoaPy</a><a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/activedirectory" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#activedirectory</a> <a href="https://infosec.exchange/tags/windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#windows</a> <a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a> <a href="https://infosec.exchange/tags/pentest" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pentest</a> <a href="https://infosec.exchange/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linux</a> <a href="https://infosec.exchange/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a>

Alexandre BorgesThe Key to COMpromise - Pwning AVs and EDRs by Hijacking COM Interfaces, Part 1, 2 and 3:<a href="https://neodyme.io/en/blog/com_hijacking_1/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://neodyme.io/en/blog/com_hijacking_1/</a> <a href="https://neodyme.io/en/blog/com_hijacking_2/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://neodyme.io/en/blog/com_hijacking_2/</a> <a href="https://neodyme.io/en/blog/com_hijacking_3/#vulnerability-1-leveraging-file-deletion-for-lpe" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://neodyme.io/en/blog/com_hijacking_3/#vulnerability-1-leveraging-file-deletion-for-lpe</a><a href="https://infosec.exchange/tags/edr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#edr</a> <a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a> <a href="https://infosec.exchange/tags/informationsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#informationsecurity</a> <a href="https://infosec.exchange/tags/edr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#edr</a> <a href="https://infosec.exchange/tags/com" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#com</a> <a href="https://infosec.exchange/tags/programming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#programming</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a>

Alexandre BorgesThe Key to COMpromise - Pwning AVs and EDRs by Hijacking COM Interfaces, Part 1, 2 and 3:<a href="https://neodyme.io/en/blog/com_hijacking_1/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://neodyme.io/en/blog/com_hijacking_1/</a> <a href="https://neodyme.io/en/blog/com_hijacking_2/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://neodyme.io/en/blog/com_hijacking_2/</a> <a href="https://neodyme.io/en/blog/com_hijacking_3/#vulnerability-1-leveraging-file-deletion-for-lpe" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://neodyme.io/en/blog/com_hijacking_3/#vulnerability-1-leveraging-file-deletion-for-lpe</a><a href="https://mastodon.social/tags/edr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#edr</a> <a href="https://mastodon.social/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a> <a href="https://mastodon.social/tags/informationsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#informationsecurity</a> <a href="https://mastodon.social/tags/edr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#edr</a> <a href="https://mastodon.social/tags/com" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#com</a> <a href="https://mastodon.social/tags/programming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#programming</a> <a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a>

Recherches récentes

Options de recherche

Administré par :

Statistiques du serveur :

#redteam