Crypt0s

Application security guy who dabbles in radios, networking, protocols…pretty much anything anyone puts in front of me to hack!

[Crypt0s @Crypt0s]

Confused about DMR? Fustrated you can't get your hotspot configured? Need some help? Here is a quick tutorial: https://t.co/lELU5HxNE9

#DMR #hamradio #brandmeister #mmdvm

[Crypt0s @Crypt0s]

@iEndure_4evr @RipRawlings @d0tslash && @KismetWireless I think we talked about this at the start.

[Crypt0s @Crypt0s]

@d0tslash

[Crypt0s @Crypt0s]

@d0tslash Dammit, Bobby (tables)

[Cathal Mc Daid @mcdaidc]

1/12
It has been confirmed that the #Taurus interception was done via “a non-secure line”. Below is my opinion of one way in which it *might* have been done, taking into account the situation and #Russia's previous history.

Essentially it involves using #SS7 interception.
🧵

[stacksmashing @ghidraninja]

Lenovo X1 Carbon Bitlocker Key Sniffing any% Speedrun

(42.9 seconds)

[an0n @an0n_r0]

OST cannot be stopped. Here is a technique we tested internally 9 months ago: blocking EDR telemetry by leveraging the Windows Filtering Platform. Considered it so evil that we didn't publish it that time. It was pointless, now here it is by @netero_1010: https://t.co/TxxJrefTcW

[s1zz @s1zzzz]

Discovered and exploited an arbitrary file delete vulnerability that lead to SYSTEM level privileges.

Thanks to the goat @filip_dragovic.

[Samir @SBousseaden]

interesting recent UAC bypass method

https://t.co/dbgCqFlna8

[Crypt0s @Crypt0s]

The best thing about generative AI is that I hear far far less about Web3 bullshit

[Crypt0s @Crypt0s]

@N4k3dTurtl3 BOKOR drop when?

[Crypt0s @Crypt0s]

@badkobold

[Crypt0s @Crypt0s]

Are we really not supposed to double space after a period anymore???????

[Crypt0s @Crypt0s]

@greybrimstone I have no idea but people are saying you’re either a lawyer or a boomer if you do it and I’m like…..???

[dragosr @dragosr]

Red, Blue, and Purple LDAP Queries.
Quite useful.

https://t.co/7m83V9RUEK

[Crypt0s @Crypt0s]

Very cool explanation of CANbus theft technique

[Dirk-jan @_dirkjan]

New blog: Obtaining Domain Admin from Azure AD by abusing Cloud Kerberos Trust

I teased this a bit during my Windows Hello talks, now found some time to write about this interesting technique. Also contains defenses and detection opportunities.

https://t.co/KSPVRm5iGo

[Crypt0s @Crypt0s]

@Andrew___Morris

[Crypt0s @Crypt0s]

A certificate reseller bypassed the HTTP verification of the ACME cert protocol by using a remote code injection in https://t.co/IaPJptnCBU to write their own

When called out they are surprised Pikachu and say they didn’t know what an RCE was before this.

😬

[Ryan Castellucci @ryancdotorg]

🍿🍿🍿

CA dId NoThInG wRoNg

(they built a product around an 0day in a certificate management tool, got caught, and I'm hoping this results in a root CA being incinerated because that would be funny)

https://t.co/EeMslOmee5