Sx1000

Ethical hacker | Youtuber | Red Teamer | sports bike enthusiast | CyberSecurity Researcher

[Mr.programmer @freeprogrammers]

Good Search Engines for Pentesters

#Pentesting #CyberSec #cyberawarness #cybersecuritytips #informationsecurity #infosec #ethicalhacking #bugbounty #bugbountytips #aws

[Ryan Basden @_rybaz]

Hacking resources that are free but are worth thousands:

[Ryan Basden @_rybaz]

Exploit development courses from @pwncollege

Want to learn exploit development in an easily accessible and challenging way? Brush up on your C and ASM and start here. You can even host it yourself.

https://t.co/XkZWY4u8wj

[shubs @infosec_au]

You can bypass Akamai WAF's XXE filters by HTML encoding the SYSTEM entity within a payload like this:

<!DOCTYPE foo [<!ENTITY % a "<! ... omitted ...

neat trick! used this today.

[mgeeky | Mariusz Banach @mariuszbit]

IMAP Password lying out there in Registry in DPAPI-encrypted form. Worth adding Seatbelt collection support? :-)

HKLM\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676

Simple CryptUnprotectData() will do to decrypt it.

[Duty @duty_1g]

SubCat a subdomain discovery tool that discovers valid subdomains with provided scope for websites by using passive online sources.
it's useful to both penetration testers and bug bounty hunters alike.
https://t.co/pJ1qB14Uvu

[Adrian Denkiewicz @a_denkiewicz]

I wrote down some thoughts on bypassing #EDR with syscalls, and shared my super small patch for #SysWhispers2 to evade Defender detection:

https://t.co/efwAfD9ckO

[Dr. Nestori Syynimaa @DrAzureAD]

This @Secureworks report reveals various APIs that allowed unauthorized access to internal information of any Azure AD tenant.

1/4

https://t.co/cetumEmCIk

[David Bouman @pqlqpql]

Happy to finally publish my work on the two vulnerabilities in the Linux kernel I've found: CVE-2022-1015 and CVE-2022-1016! I'll be talking some background, a deeper look into nf_tables, and a local privilege escalation PoC! (code on my github)

https://t.co/8cummKtTHT

[ippsec @ippsec]

Created a video showing off how I use PowerShell to tail the sysmon log for doing dynamic malware analysis against tools. Also, I've used this to ensure my sysmon profile would log what tools like CobaltStrike are doing. https://t.co/Wz2PFOAA3N

[Jesko Hüttenhain @huettenhain]

Recent #Emotet downloaders use:
XLSX ➡ VBA ➡ batch ➡ PowerShell
Based on some great work by @DissectMalware, binary refinery now has a batch deobfuscator. Ripping out those C2s is easier than ever!
🏭 xlxtr | bat | carve -sd b64 | xtp url
🌐 https://t.co/UFEAIVxsJx

[Michael Maltsev @m417z]

Introducing Windhawk, the customization marketplace for Windows programs! Windhawk is a platform for developing and sharing mods (customization modules) for Windows. Each mod is a C++ snippet which is injected into other programs.
https://t.co/GZb9dCZosN
https://t.co/PEh0afKeIj

[sn🥶vvcr💥sh @snovvcrash]

A new blog post: Abusing Kerberos Constrained Delegation without Protocol Transition.

Configuring RBCD2self for a compromised service with KCD (Kerberos only) enabled to obtain a forwardable TGS which can be used in S4U2proxy against another service: https://t.co/OWk08amw7s

[Greg Lesnewich @greglesnewich]

Day 36 #100DaysofYARA - looking for variations of the MZER / MZAR / MZRE header allowing a PE to also be executed as shellcode!

good ref here:
https://t.co/sH8kp9W2Z6

rules:
https://t.co/1ofZOkskOz

[David Bombal @davidbombal]

You need to learn Linux in 2022!

#Linux #KaliLinux #Ubuntu #hacking #Cybersecurity #infosec #cyber

[Nicolas Krassas @Dinosn]

A python script to extract information from a Microsoft Remote Desktop Web Access (RDWA) application

https://t.co/9dJ9qt3ja9

[Brian Maloney @bmmaloney97]

Introducing OneDriveExplorer. GUI and command line tool for parsing <UserCid>.dat Write up still to come. #DFIR

https://t.co/Qr4mdp9v2l

[Emeric Nasi @EmericNasi]

My latest msdt uac bypass has been added to UACME. Thx @hFireF0X!

https://t.co/JAbC7B9h7q

[Ed @EdOverflow]

New blog post: "What Bypassing Razer's DOM-based XSS Patch Can Teach Us" — https://t.co/XnuUUFgsS3.

[TrustedSec @TrustedSec]

Senior Security Consultant @Jean_Maes_1994 gives us the first comprehensive resource about all things #relaying. This guide covers a range of techniques from most common to the lesser-known.

https://t.co/dtX02qtSP1