Basem Ibrahim

Security Consultant | Master of Information Security | OSCP Certified

[Basem Ibrahim @Basem_Ibrahim_]

@eMoroor السلام عليكم
هل يمكن قيادة السيارة للمقيم برخصة دولية او مصرية علما بأني جئت للملكة مند شهر فقط ؟

[Basem Ibrahim @Basem_Ibrahim_]

As per Microsoft documentation, event id 4723 should be generated if a user changed his own password, however upon testing in the lab, 4724 is generated instead Anyone know what is the reason ?
https://t.co/oanecau8dM
#soc #security #threathunting #windows

[Tom Wechsler - Microsoft Azure & CDM MVP @tomvideo2brain]

🔥🔥Advanced threat hunting within Active Directory Domain Services - Knowledge is power!🔥🔥
@Microsoft @MSTCommunity #Microsoft #ActiveDirectory #mvpbuzz #coolstuff #Hunting #ADDS #Windows #WindowsServer @windowsserver @msftsecurity
👇👇👇👇
https://t.co/6blMKqdc2n

[NetWitness @NetWitness]

🌐Unleash the power of SASE for secure, streamlined networking and remote work support. Learn how #NetWitness enhances SASE in our latest blog post. Check it out: https://t.co/ja7kZ6EfI5

#SASE #Cybersecurity

[SANS Institute @SANSInstitute]

Don't miss this upcoming #RansomwareSummit talk! 🗓️

🎤 Beyond Encryption: Exploring the Tactics Ransomware Operators Use During Negotiation and their Impact

👥 @BrycexWJ, Dir. of Intelligence Ops, GroupSense

✍️ Join us June 23 for Free Live Online: https://t.co/BgZueKXQEm

[SANS DFIR @sansforensics]

Learn how to access password-protected files for your next investigation during this 🆓 workshop on June 22

Register here: https://t.co/5fp8IEg0vg

[ATT&CK @MITREattack]

Twitter is reminding us that it’s the 8th anniversary of ATT&CK’s Twitter account and ATT&CK’s public release. This year marks the 10th anniversary of when @stromcoffee @jadefh @esheesle and Brad Crawford started ATT&CK. Stay tuned for special related content at ATT&CKcon 4.0.

[Basem Ibrahim @Basem_Ibrahim_]

Very interesting blog about windows tokens
https://t.co/riTHs0eyYb

[0xdf @0xdf_]

I needed an SSH honeypot for a recent project, and had some fun playing around with Python to build one, starting with a socket, and then added Paramiko on top. By the end, we'll have a SSH server that logs usernames and passwords entered into it.

https://t.co/rvWv9IpU1g

[Basem Ibrahim @Basem_Ibrahim_]

One of the reasons also for failing OSCP is to get stuck into trying to understand every single tool and how it works, every tool has tons of options. I think one needs to focus on the concepts deeply and learn the tools which are necessary enough to practice the concepts.
#OSCP

[Basem Ibrahim @Basem_Ibrahim_]

When I failed OSCP for the first time, one of my main weaknesses was privilege escalation part, I believe @0xTib3rius courses were amazing in helping me overcome this weakness
https://t.co/hSlKtP5j1x
https://t.co/he6tgmr4Ho
#OSCP #CyberSecurity #hacking #PenetrationTesting

[Basem Ibrahim @Basem_Ibrahim_]

@_JohnHammond Can you help please if you know a way or spread in your network 🙏🙏

[Basem Ibrahim @Basem_Ibrahim_]

I am trying to build an active directory lab for some testing , Is there any easy tool or script to simulate multiple events similar to production environment, I need to have login and logout events, applications and service starting...etc @0xdf if you can help please
#SOC

[Basem Ibrahim @Basem_Ibrahim_]

@0xdf_ Thanks you for the quality content!!! keep it up

[Basem Ibrahim @Basem_Ibrahim_]

If you are preparing for OSCP and need quality writeups to learn from then I think you will not find better than @0xdf_ writeups, It helped me a lot in my OSCP journey
https://t.co/kajmks2T42
#OSCP #OffensiveSecurity

[John Hammond @_JohnHammond]

Setting up a simple cloud instance of ELK, spinning up an Elastic agent, and installing Sysmon -- all to get our feet wet with some SIEM logging and open the doors for so much more! https://t.co/BUzU9ajUxG

[ippsec @ippsec]

One old motto I've thought a lot about recently is "Practice doesn't make perfect, perfect practice makes perfect".

When pursuing a career in video games, I thought about this a lot as if you just grind out games for 12 hours per day. You likely will hit a wall that would quickly be torn down if you just broke the problem apart and "trained". In games, this could mean watching replays to see what you could do better or hyper-focusing on one aspect of the game and accepting you'll lose games in the immediate future but when you play normally you will have become better.

I think this translates a lot into what you see in my videos. I've said it before, but when I started HackTheBox in 2017, I cheated the invite code system to be able to play. I wasn't anywhere near what you see today. One of the main reasons I succeeded is because my videos forced me to.

I often say videos peer pressured me into sticking with HackTheBox. However, they also forced me to reflect on every single machine I was solving. After I did something, I normally spent an equal amount of time (or more) thinking about how to explain it. Which I think was key in "mastering" the material and appearing as this expert whom has done pentesting for countless years.

Even the machines I did not like, I couldn't just trash it. I had to spend time finding aspects I did like, so I could talk about that. The hunting positivity, instead of just saying it was trash I regret doing that, did wonders for keeping me sane and motivated.

Well that was a wall of text. Hope ya'll have a good rest of the week, thanks for reading.

[Basem Ibrahim @Basem_Ibrahim_]

@SK_Expert Its my pleasure :)

[Basem Ibrahim @Basem_Ibrahim_]

https://t.co/XBpx1Fnenm