Alessio Sergi

[Swissky @pentest_swissky]

GPOddity: exploiting Active Directory GPOs through NTLM relaying https://t.co/zWThvLhWrW

[GitHub Security Lab @GHSecurityLab]

GHSL-2023-143_GHSL-2023-144: SAML signature validation bypass in OpenAM - CVE-2023-37471 https://t.co/Mb5OG8LNd9

[HackGit @hack_git]

DCOM DLL Hijacking

We recently discovered the following DCOM classes that are subject to DLL hijacking. If an attacker can write to the associated path, they can move laterally by instantiating the COM object. Some classes have additional DLL hijackin… https://t.co/mCOKUf3axn

[raptor @0xdea]

Nifty #bug

A #PoC for the CVE-2022-44268 - ImageMagick arbitrary file read

https://t.co/lYJUnzqsve

[张惠倩 @momika233]

CVE-2022-45025
Command injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)
https://t.co/ckY6LVAY1g

[DirectoryRanger @DirectoryRanger]

SilentHound. tool to quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.
https://t.co/IRml1YxRMH

[Nicolas Krassas @Dinosn]

MSMAP - Memory WebShell Generator https://t.co/xHXDbCOIyC

[raptor @0xdea]

The Art of Bypassing Kerberoast Detections with Orpheus

// by @TrustedSec

https://t.co/UH74yCOWja
https://t.co/Ht5gKto2hC

[Nicolas Krassas @Dinosn]

.NET Project for Attacking vCenter

https://t.co/aYHtCKhSeC

[Six2dez 🇵🇸 @Six2dez1]

This is a superb article for pentesting Cisco networks

https://t.co/spiVfvLyQm

[Nicolas Krassas @Dinosn]

New PsExec spinoff lets hackers bypass network security defenses https://t.co/g0AwXpySmM

[reverseame @reverseame]

Linux Threat Hunting: ‘Syslogk’ a kernel rootkit found under development in the wild https://t.co/7JvFObDOx7

[Nicolas Krassas @Dinosn]

A tool to kill antimalware protected processes

https://t.co/C3xwqBHquw

[Tim Brown @timb_machine]

Another reminder, eBPF is an attack surface not just a source of security telemetry: https://t.co/nMWpX0jED4

[LetsDefend @LetsDefendIO]

Detailed OSI Model

[Jas502n @jas502n]

#CVE-2022-1388 F5's BIG-IP Unauth RCE

Connection: keep-alive, X-F5-Auth-Token
Authorization: Basic YWRtaW46
X-F5-Auth-Token: anything

https://x.x.x.x:443/mgmt/tm/util/bash

[Oliver Lyak @ly4k_]

The first blog post is here. This one covers the technical details of CVE-2022-26923 (Active Directory Domain Services Elevation of Privilege Vulnerability).

The vulnerability was patched as part of the May 2022 Security Updates from Microsoft.

https://t.co/MJKEoZTuo2

[Antonio Cocomazzi @splinter_code]

Nice finding!
Note that this is also a UAC bypass.

Finally eventvwr is giving again free UAC bypasses like the good old time of the mscfile hijacking :D

GG WP

[Mor Davidovich @dec0ne]

Introducing KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).
All credits go to @tiraniddo @cube0x0 @harmj0y, most of the code was taken from their tools.
https://t.co/gyTmaITNin