1mm0rt41

Freebooter on the Internet in a Swiss company #OSCP #CRTP

[Trust Valley @TrustValleyCH]

Hats off to all the Season 7 winners! 🚀🛡️🇨🇭🌐Tech4Trust Crowns https://t.co/kpqfFoZVDJ as Grand Prize Winner. Learn more with this article: https://t.co/5Cxk5Nq7xV via @startuptickerCH #TrustValleyCH cc @lennig

[Trust Valley @TrustValleyCH]

🚀🛡️🇨🇭🌐 Trust Valley Day 2025 | Raphaël Conz, Managing Director, Office for Economic Affairs and Innovation now on stage to present the promising Tech4Trust Season 7. Congrats to the selected startups 🙌🏻 #TVDay25

[1mm0rt41 @1mm0rt411]

@EliWallic @DirectoryRanger In general you don't have used ACL directly on computers/users/groups. In general ACL comes from OU.
I used dsacl to reset ACL in a corp with 30'000 computers without any problem.
Bonus when a user have admincount=1 but isn't anymore in T0 => reset the user account with dsacl

[1mm0rt41 @1mm0rt411]

@4KingsFR C'est vrai mais c'était plus pratique quand c'était dans les colonnes et ainsi voir rapidement quelle crypto a le roi plus important

[Elsa Wainblum @ElsaWainblum]

I bought this book ! 📚

[Cube0x0 @cube0x0]

Let me introduce you to KrbRelay, the only public tool for relaying Kerberos tickets and the only relaying framework written in C#.
No-fix LPE + No-fix Cross-Session, VDI deployments has never been more broken.
Demo at Images/demo.mp4 !
https://t.co/xmZM1X7lqI

[Clément Labro @itm4n]

Some of you asked for a part 2, so here you go!

🔥 From RpcView to #PetitPotam 🔥

👉 https://t.co/4DBBIExqGW

In this post I explain how you can reproduce the #PetitPotam trick using RpcView, but the same principle can be applied to any Windows RPC interface. 🙂

[James Forshaw @tiraniddo]

@GossiTheDog @gentilkiwi @CraigKirby Of course now I think about it, it doesn't make sense for it to be IPsec :-). It's actually the remote authenticated user for RPC. So for example you can do the following to only allow EFS calls from Domain Admins. https://t.co/AXPMJshqM5

[Jonas L @jonasLyk]

Allright, here is how to enable testsigning / kerneldebug while keeping secure boot happy.

In administrator prompt enter the following(not powershell):

bcdedit /set {bootmgr} displaybootmenu 1
bcdedit /set optionsedit 1
bcdedit /bootems 1
bcdedit /ems 1

reboot

[Micah Van Deusen @micahvandeusen]

👀 shadow credentials with ntlmrelayx. You don’t even need AD CS web enrollment now. The attacks just keep coming. https://t.co/3bRhsnYp1i

[Pixis @HackAndDo]

You can steal an NTLMv1-SSP hash on @PythonResponder, but you would like to crack it on https://t.co/hvVHSmp7dz?
➡️No problem, you can use the --disable-ess parameter to get a crackable hash on https://t.co/hvVHSmp7dz
See https://t.co/ARaWJkk7N6 for more details

[Edward Snowden @Snowden]

Stop what you're doing and read this. This leak is going to be the story of the year: (LINK: https://t.co/zhC0LN4TlC)

[Pentester Academy @SecurityTube]

Congratulations to @1mm0rt411 for clearing our Certified Red Team Professional exam! #ADLab #CRTP #PentesterAcademy cc @nikhil_mitt https://t.co/gUx9gbXHsq

[Clément Labro @itm4n]

After several weeks of work, it's finally there!🔥

Introducing PPLdump, a tool for dumping PPL processes with a Userland exploit!😈

👉Post 1: https://t.co/r51JDfwtAw
👉Post 2: https://t.co/FUCjMVnPW6
👉Tool: https://t.co/5TJsxKxMMT

Credit goes to @tiraniddo for the technique.

[Orange Cyberdefense Switzerland @orangecyberch]

Second part of @itm4n's adventures bypassing LSA Protection has just been pusblished on our blog: https://t.co/hchtd7ZP4e

[Clément Labro @itm4n]

😎

[CryptoDiffer Analytics @CryptoDiffer]

TOP-10 Launchpad Platforms by Average ROI of the Projects launched in 2021

$BSCPAD $PAID $POLS $DAO #AUCTION $ZEE $SWAP $DUCK $CFI $POOLZ

[Clément Labro @itm4n]

I've been working on a very interesting subject for the past few weeks: 🛡️ LSA Protection 🛡️.

And, I have some really cool stuff to share with you in the coming days. 😉

But in the meantime, here is a first blog post... 🙂
👉 https://t.co/r51JDfwtAw