Aitor Fuentes

Red Teamer at @TelefonicaTech and @SynackRedTeam | | Occasionally Game Developer | Side projects World Record holder

[Shahar Tal @jifa]

Ending with a demo on 16.1 latest beta 🤩

[Aitor Fuentes @Aitor_FL]

@Lena_Xativa @Xativa això no és el que estic criticant, i torne a repetir el motiu del meu tweet: No entenc com els participants per a un esdeveniment organitzat i promogut per la Regidoria de Joventut es decideixen en reunions presencials a les quals tot el món no pot acudir. A més de [2/4]

[Aitor Fuentes @Aitor_FL]

@Lena_Xativa @Xativa No entenc el procés que vols explicar-me personalment, i per què hauria de ser de forma personal i privada i no públicament. Respecte a la resta, per descomptat, i veig perfecte que les comunicacions per a la joventut es facen per RRSS, no obstant, [1/4]

[ATTL4S @DaniLJ94]

Si te interesa saber cómo funciona Kerberos, ya está disponible la presentación que hice en la última edición de @h_c0n @hackplayers

https://t.co/NaXQ0a4o4A

[X-C3LL @TheXC3LL]

This sunday I wanted to refresh a bit of C# so I ported the PoC about using Windows Filtering Platform as a covert channel for incoming communications. The idea is to carry the information encoded as source ports from packets sent to well-kwnown ports. https://t.co/58rmT3aTGl

[Qualys @qualys]

Exploit for CVE-2021-33909 (#Sequoia) is now available after successful testing on vulnerable versions of Ubuntu 20.04, 20.10, 21.04, Debian 11, and Fedora 34 Workstation. See cve-2021-33909-exploit.tar.gz at https://t.co/fRYOMfFx54

[Adepts of 0xCC @AdeptsOf0xCC]

Dear Fellowlship, How is your summer going?

Our N-Day owl @lockedbyte was bored in his holidays and decided to build an exploit for CVE-2020-9273. Check our post:

Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)

https://t.co/nfdZ6UMiYn

[n00py @n00py1]

Not sure who made this, but pretty useful chart

[Christoph Falta 🇺🇦 @cfalta]

Since I kind of lost track of the vulnerabilities this month, I made a list ^^
https://t.co/E0NWwdTKOs

[X-C3LL @TheXC3LL]

[Spain only]
I'm looking for a Malware Developer to join the Red Team that I lead at Telefónica Tech. Please DM me if you are interested in:

- Malware Dev
- EDR/AV bypass
- Research about internals and new tactics
- The things that I publish at @AdeptsOf0xCC

[Florian Roth ⚡️ @cyb3rops]

#PrinterNightmare

[Adepts of 0xCC @AdeptsOf0xCC]

Summer is coming and our owls keep writing! Check this article by @TheXC3LL titled "Don't use commands, use code: the tale of Netsh & PortProxy"
https://t.co/KYMeFB9REq

[SkelSec @SkelSec]

@kmkz_security

[X-C3LL @TheXC3LL]

I feel increasingly removed from the InfoSec scene in Spain. I don't know if it happens in the rest of the world, but here little by little it has become infested with "cyberinfluencers" [1/3]

[Aitor Fuentes @Aitor_FL]

After 15 months of recuperation and rehab, finally returning to 2 wheels✌️

[Dev Side Story 💣 @devsidestory]

- "¿Ves, becario? Tanta IA y tanto ML que me intentas enseñar y que te ponía ardiendo la CPU... pillas un server en OVH, le pones el modelo y que vaya entrenando tranquilamente..."

OVH:

[ATTL4S @DaniLJ94]

"You Do (Not) Understand Kerberos" slides and (spanish) video available in my blog! (english video soon)

Hope you enjoyed!

https://t.co/7Rk15VuyBo

[Volexity @Volexity]

Volexity has identified multiple 0-day exploits in Microsoft Exchange resulting in authentication bypass and RCE. Actively exploited in the wild since at least January 2021. More here: https://t.co/nnCkaYRPRm
#threatintel #dfir #infosec

[Aitor Fuentes @Aitor_FL]

@Noval33t @HackingPatatas CORE (https://t.co/SnRrqzBUw7) se ha puesto muy de moda últimamente. Tengo entendido que no hace falta saber programar por que trae prácticamente todo lo necesario para hacer un juego. Si se sabe programar se pueden extender sus posibilidades con LUA.

[Talaia @GVATalaia]

🔴 #Vulnerabilidad crítica expone a usuarios de #DockerEngine. En caso de ser explotada, permitiría al actor de amenaza escalada de privilegios a usuarios de root.

Más detalles en el siguiente enlace: https://t.co/xFEA93zfoH