Mohamed M.Fouad

Red Team Lead Consultant, OSEP, CRTP, OSWP, OSCP, GWAPT, CEH, MCT, MCTS, MCPD | Bug Bounty Hunter

[International Cyber Digest @IntCyberDigest]

‼️🚨 MAJOR IMPACT: AI just found an 18-year-old NGINX critical remote code execution vulnerability. It has been disclosed on GitHub including PoC code.

- Affects NGINX 0.6.27 through 1.30.0
- Triggered via the rewrite and set directives in config
- Update NGINX ASAP
- NGINX is a widely used HTTP web server, be sure to check its prevalence in other products

[Mohamed M.Fouad @Flash162011]

I created this PDF including in-depth technical details about NFC technologies and how they relate to physical security assessments.

#nfc #rfid #CyberSecurity
#Pentesting #redteam #BugBounty
#physicalsecurity

https://t.co/zgkoj6AVCd

[Ian Carroll @iangcarroll]

In April, @samwcyo and I discovered a way to bypass airport security via SQL injection in a database of crewmembers. Unfortunately, DHS ghosted us after we disclosed the issue, and the TSA attempted to cover up what we found.

Here is our writeup:
https://t.co/g9orwwgoxt

[1ue @1ue1166323]

[CVE-2024-21096] mysqldump rce : ) learn form defcon32

[Youssef A. Mohamed @GeneralEG64]

Important Annonucement:

@BuguardLLC offers free migration from #Israel security products.

We invite all the #Arabian solutions providers to collaborate.

#CyberSecurity

[Ebrahem Hegazy 🇵🇸 @Zigoo0]

بضم صوتي لصوت أخي @Voulnet لو تعرف أي شركة اسرائيلية او بتدعم اسرائيل في مجال أمن المعلومات ياريت تكتبها وتعمل منشن لحساب محمد.
زي ما بيبلغو عن الموظفين الداعمين لفلسطين لشركاتهم فا يلا بقي نقلبها بنفس نظام اللعب القذر

[Mohamed M.Fouad @Flash162011]

@0x4148 Congratulations 🎉

[an0n @an0n_r0]

Played with Outlook CVE-2023-23397. Made a simple PoC email builder & sender featuring malicious reminder (just a Msg, no need to use a Task or Cal. Ev.).

Critical 0-click account takeover on internal networks even after MS patch, no need to open the message on the victim side.

[TechCabal @TechCabal]

Liquid Intelligent Technologies has acquired a Cairo-based cloud and cyber security provider, Cysiv MEA in bid to boost its African presence. https://t.co/qOZFwl0ksF

[mpgn @mpgn_x64]

It's 2023, CrackMapExec can now dump DPAPI credentials as a core feature !🚀

This is possible thanks to the work of @_zblurx and his library dploot ! He also added a module to dump firefox passwords 🔥

Pushed on @porchetta_ind v5.4.5 Bruce Wayne 🪂

No excuse, DA everytime, 🔽

[Ryan M. Montgomery @0dayCTF]

HoaxShell Beta - Integrated with https://t.co/DEELMA8lid
-
A new collection of payloads with some unique concepts has been added by @t3l3machus
-
More features, and automatic payload generation is coming soon!
-
-
#infosec #cybersecurity #bugbountytips #CTF

[Mohamed M.Fouad @Flash162011]

APT-29 (Cozy Bear) Adversary Simulation Progress...

#redteam #adversary #APT29 #MITRE #CALDERA #cybersecurity

[Mohamed M.Fouad @Flash162011]

@5yx Congratulations 🎉

[mpgn @mpgn_x64]

Bloodhound python from @_dirkjan is now integrated to CrackMapExec as a core feature 🔥

▶️ cme ldap <ip_dc> -u user -p pass --bloodhound

Enjoy this one, more juicy features to come soon 💪

Pushed on @porchetta_ind thanks to the sponsors as always 🪂

[Mohamed M.Fouad @Flash162011]

After FIN6 Adversary Simulation I did another Russians APT-28 (Fancy Bear) Adversary Simulation.

From Initial Execution -> Persistence -> defense evasion -> credential access (Kerberoasting) -> lateral Movement -> Data Exfilteration.

https://t.co/KlX2hcH2PH

[Mohamed M.Fouad @Flash162011]

APT-28 (Fancy Bear) Adversary Simulation Progress...

From Initial Execution -> Persistence -> defense evasion -> credential access (Kerberoasting)

Still lateral movement and data exfiltration...

#redteam #adversary #APT28

[Noy Pearl @NoyPearl]

Woah the new versions of jadx allow you to generate pure @fridadotre snippets from Java functions. Pretty useful when RE Android apps.
Here's an example of what it generates:

#BugBounty tip

[HTTPie @httpie]

🪄 Introducing HTTPie AI, a new way to interact with APIs

👉 https://t.co/AzXsn2xz80

[Mohamed M.Fouad @Flash162011]

@Lemonitup You're welcome

[Mohamed M.Fouad @Flash162011]

I did a short demo for 70% of FIN6 APT adversary simulation TTPs on a local AD environment from discovery to data exfiltration assuming a breach with an initial foothold inside the domain. #redteam #FIN6 #infosec #adversary #Mitreattack #APT #informationsecurity

[Mohamed M.Fouad @Flash162011]

@Lemonitup It's Mitre CALDERA framework