Rohan Vazarkar

Penetration Tester and BloodHound Developer @specterops

[Jared Atkinson @jaredcatkinson]

🧵 Yesterday Microsoft released a post describing CVE-2024-37085, a vulnerability in ESXi hypervisors. According to the disclosure, a low-privilege user can gain "full administrative access" to domain-joined ESXi hypervisors.
https://t.co/GJdg9I08k7

[Andrew Chiles @AndrewChiles]

All slides for presentations at #SOCON2024 sponsored by @SpecterOps are now live! https://t.co/Zbt0XGMu6o

[Andy Robbins @_wald0]

This is a HUGE deal. If you've ever purchased a #BloodHound shirt or otherwise donated to @MDAorg, your money has gone towards making this happen.

[Rohan Vazarkar @CptJesus]

@Carlos_Perez @harmj0y @SadProcessor @zinic @_wald0 We just need to run into each other again so we can do the hug in person

[Rohan Vazarkar @CptJesus]

@PyroTek3 @IanColdwater @LitMoose @mzbat @_sn0ww @merill @inversecos @AlyssaM_InfoSec @mvelazco @josequinones @RachelTobac @hacks4pancakes @Carlos_Perez @mcohmi @EricaZelic @vmiss33 @techwithtaz @tywilson21 @BlackInCyberCo1 Was so great to see you at Shmoo again, its been far too long!

[Joshua Prager @Praga_Prag]

I was in a situation where I discovered a complete domain compromise. I needed to provide the client with remediation recommendations, but the available information was scattered and high-level. For that reason, @synth_nic0 put together this series:
- https://t.co/A132sn3kBM
- https://t.co/6kmwHViwIs

[Matt Creel @Tw1sm]

New post 👇taking a look at compromising Slack access on both Windows and macOS. New BOF included! https://t.co/4mK0gSTbVH

[DragoQCC @DragoQcc]

The HardHat Toolbox is finally ready https://t.co/HZe8v6078f. It contains Rivet, a demo Asset (Implant) written in Rust, along with the Asset Development repo, which contains detailed step-by-step guides and templates to help get you started on writing custom Assets for HardHat.

[Rohan Vazarkar @CptJesus]

@webyeti @BsidesDC I cant believe you still have the CD! Gotta thank @MikeOLearyTu for pushing me to go present there in the first place

[LuemmelSec @theluemmel]

You should absolutely check SCCMHunter if you are doing internal Pentests or RedTeamings from @garrfoster
What a cool tool.
https://t.co/26IIWRDlNm

[Andy Robbins @_wald0]

Join me and @CptJesus on August 17 from 11AM to noon Pacific for our first BloodHound CE webinar. We will show you:

- How to get started
- Huge performance improvements
- API interaction use-cases

And more. Register here: https://t.co/u07YgmjEfC

[Andy Robbins @_wald0]

We are releasing BloodHound Community Edition next week. As part of this release, we are raising money for @StJudeResearch.

You can buy your limited edition shirt starting today here: https://t.co/oUMpMEcq8g

[Andy Robbins @_wald0]

Today: join me and @CptJesus in the BloodHound Slack from 11AM to Noon Pacific for an AMA regarding the upcoming BloodHound CE release.

Not in the BloodHound Slack yet? Get your invite here: https://t.co/RMujGtjDdU

[SpecterOps @SpecterOps]

We're thrilled to announce BloodHound Community Edition (CE) -- the next evolution of #BloodHound.

Scheduled for release on 8/8, BloodHound CE has many new features & enhancements, making it easier for users to deploy, manage, and utilize.

Learn more: https://t.co/aLMuHQvwfB

[Andy Robbins @_wald0]

I am proud to announce the release of #BloodHound 4.3!

Release blog post: https://t.co/9LESMBrimP

Limited edition T-shirt: https://t.co/V4PvatsuuQ

Get BloodHound 4.3 NOW at https://t.co/LOlhrNILYB

[FalconForce Official @falconforceteam]

Wow, what a crowd today at #FIRSTAMS2023! Over 45 people are attending our free Advanced BloodHound workshop in Amsterdam. A great start of the FIRST 2023 Technical Colloquium.

#training #bloodhound

[Andy Robbins @_wald0]

To understand our future, we must study our past.

I am proud to announce the release of #RetroHound!

✅ Runs on Windows 3.1
✅ Backed by an MS Access database
✅ Full NetBEUI & LANMAN support

See it in action here: https://t.co/gwMaOqwnIF

[SpecterOps @SpecterOps]

Skill up, help out. Take one of our six workshops at SO-CON and support the Equal Justice Initiative! https://t.co/Spec26bojE

[ʎppɐɯɔ @cmaddalena]

We here @SpecterOps just released @getghostwriter v3.0.6! There are great new system health monitoring features. This and the previous release also include some very useful contributions from the community, which I really appreciate♥️

https://t.co/pUIpSbZzbJ

[Joshua Prager @Praga_Prag]

At @SpecterOps, @leidy_tector and I focus on maturing detection engineering teams. This blog explores our methodology for prioritizing the detection engineering backlog. https://t.co/XQqn7Qh8RN