Jairo

Ciberseguridad. Gallego. Antes entrenaba en MAD, eMz, KIYF, G2V, Team Heretics, OG.

[Jairo @CoachJairo_]

En lo que sea pero el mejor.

[Jairo @CoachJairo_]

@_EthicalChaos_ Good idea! If you also hook NtAccessCheckByType, you can make it compatible with certmgr.msc so it can request certificates from non-domain :D

[Jairo @CoachJairo_]

@FTREFORMED @HolaSoySergio__ Espalda al fallo

[Jairo @CoachJairo_]

@Octoberfest73 @x86matthew 2 years ago I wrote a blog post extracting files embedded on a LNK with CMD only if you want to avoid powershell execution (or maybe it gives you more ideas to research) :)

https://t.co/mVf6JnpYpt

[Jairo @CoachJairo_]

@TheXC3LL 😂😂😂😂😂😂😂😂

[Jairo @CoachJairo_]

@decoder_it @tiraniddo @cube0x0 Even you are using Kerberos instead of NTLM, the usual restrictions still apply, right? Ex. SMB to LDAP not allowed

[Jairo @CoachJairo_]

@_xpn_ The installation of the SCCM lab was a terrible pain 😂😂. Highly recommend the SCCM-GOAD to automate it otherwise.

[Jairo @CoachJairo_]

Jeje

[Future @FTREFORMED]

Me acuerdo de estar comiendo mierda en eMonkeyz sin sueldos sin agua caliente en la casa y sin comida y salir a agachar la cabeza y señalar a nada cada vez que perdíamos para que la culpa me cayese a mí y no a los jugadores

Al final cada uno concibe competir de manera diferente.

[Pablo @pablopazo93]

Vuelvo a ser Freelance, y esta vez no va a ser algo temporal.

En 2024 quiero impulsar mi marca personal a lo más alto. Empresas y particulares, no dudéis en contactar conmigo para cualquier necesidad audiovisual que se os presente. Vamos con todo 🚀

📥: [email protected]

[Jairo @CoachJairo_]

@maikypedia CodeQL fanboy 🤪

[Jairo @CoachJairo_]

@vysecurity @eversinc33 @domchell Yeah, that's true, but maaaaaaaaaaaaaybe it is. I hate to abuse GenericWrite without ShadowCreds :(

[Jairo @CoachJairo_]

@eversinc33 @vysecurity @domchell +1. In my experience I feel ADCS is not required but maybe there was an ADCS that I didnt found😂

[Jairo @CoachJairo_]

@_Kudaes_ Hard agree.

[Jairo @CoachJairo_]

@_nt_tnt @arget1313 JAJAJAJAJA Entendí la referencia.

[Arget @arget1313]

Here's my writeup for the challenge Math Door from #CyberApocalypse23, featuring FILE structures overwriting.
I really enjoyed this challenge because it made learn about this technique. Totally worth it.
https://t.co/x7pwsCXwqn

[Jairo @CoachJairo_]

@domchell @_Sn0rkY IT happened to me in a recent engagement. Not being able to restart the DC so I solved it by doing a Pass-the-cert to the LDAP.

[Jairo @CoachJairo_]

@JonRUrk Que buenos eran los coreanos eh...

[Jairo @CoachJairo_]

@domchell Is it new? I saw it in my lab 6mo (+-) ago and thought it was always like this.

[Jairo @CoachJairo_]

@saramartinng @AlbusDreamer @EHxIRENE @nahiamuga @Machuki_LoL @TheRealAritz @PolMalone @_GorkaRodriguez Tio @Machuki_LoL me has copiado la sudadera

[HackTricks @hacktricks_live]

Today in https://t.co/pnKi1NCVCl at 5.30pm (UTC) @arget1313 will be joining to talk about techniques to load in memory shellcodes and binaries from sh using techniques such as DDexec, TailExec...
We will do demos and also disclose how to avoid EDRs.

#hacktricks #live #ddexec

[Arget @arget1313]

DDexec doesn't need dd anymore, with tail (yes, tail, the string oriented command) we can do exactly the same. DDexec is dead, long live TailExec.