Geiseric

AD/Azure Enthusiast | eCPPTv2 | CRTP | CRTO | CRTE | CRTM | CARTP | CARTE

[Geiseric @Geiseric4]

@infosecnoodle @unsigned_sh0rt I have tested the manual way under Windows 11 26H2, but the HTTP connection comes unauthenticated. Are there any hard-reqs?

[Keanu Nys @RedByte1337]

Excited to be back as a @defcon mainstage speaker in Vegas for the 2nd year in a row! 🎉

This year I'll reveal new techniques to get Microsoft to deliver any phishing email from official Microsoft addresses. Plus... interactive phishing pages rendered inside email clients!? 😜

[Geiseric @Geiseric4]

@c3l3si4n I would say: learn to also leverage user interaction. When no misconfigs are there, you can still trick users into doing something for you (e.g. run a powershell script from a network share). I find myself still struggling at this.

[Geiseric @Geiseric4]

@0xdf_ That did the trick, thanks!

[Geiseric @Geiseric4]

Peak comedy.

[Geiseric @Geiseric4]

@0xdf_ I have plenty of things that could trip classifiers; however shouldn't this behavior be reset for each new chat? Sonnet shouldn't even have these much guardrails. I also have no tools enabled. 🤔

[Geiseric @Geiseric4]

After quite a long break, another box of mine will be released! Enjoy!

[Hack The Box @hackthebox_eu]

If you wanted a soft serve, you should have gone for ice cream 😏
Here's the content that's coming to the #HackTheBox platforms this week!
🔴 PingPong, the last HTB Season 10 Machine, created by Geiseric
🔴 Plug and Pray, a Challenge created by C3TUS

Find them on #HTB Labs and Enterprise Platform: https://t.co/Rygagi2lbQ

#Cybersecurity #InformationSecurity #NewRelease #Hacking #CyberSkills

[Geiseric @Geiseric4]

@NVIDIAGeForce PRAGMATA RTX

[Geiseric @Geiseric4]

@vxunderground @mrd0x @MalDevAcademy

[Geiseric @Geiseric4]

@vxunderground @Octoberfest73 h3ck

[Geiseric @Geiseric4]

@vxunderground @cyberwarfarelab

[Geiseric @Geiseric4]

@hakluke I had this too with my Mac M1! When connected to HDMI I indeed would randomly lose connection to regain it immediately after just removing the cable.
DisplayPort it was then!

[Keanu Nys @RedByte1337]

📧 GraphSpy 1.5.0 is out now and brings a brand new Outlook Graph module!

✅Read emails in any folder
✅Send HTML-formatted emails directly in GraphSpy
✅Access shared mailboxes
✅Search for sensitive information like passwords

🔗Check out GraphSpy here:
https://t.co/OfI2TanQ61

[Keanu Nys @RedByte1337]

Microsoft seems to have recently deprecated the legacy account.activedirectory.windowsazure[.]com endpoint, which GraphSpy was using to list and add MFA methods for a user.

GraphSpy 1.4.3 now utilizes the mysignins[.]microsoft[.]com API now (which is also a FOCI resource!)

[Geiseric @Geiseric4]

Unpopular opinion: if red team publishes a new research/technique, detections should not be shared as well.

[Keanu Nys @RedByte1337]

GraphSpy just hit 600 stars on GitHub after releasing version 1.4!✨

This version introduces the new Entra ID module, better loading animations, and JSON syntax highlighting.

Check it out here:
https://t.co/OfI2TaonVz

[Geiseric @Geiseric4]

@LazyTitan33 @hackthebox_eu Well done! Glad you liked the box!

[Hack The Box @hackthebox_eu]

Old but gold 🏅
Vintage created by Geiseric will go live on 30 November 2024 at 19:00 UTC. Lantern will be retired!
✔️ Hard
✔️ Windows
→ Choose your Machine and start #hacking: https://t.co/fzQGVV3KW7

#HackTheBox #HTB #CyberSecurity #NewRelease

[Vulnlab @vulnlab_eu]

Time to dive into Active Directory again - Redelegate by @Geiseric4 will be released on Thursday!

[Geiseric @Geiseric4]

As many others did, I also created a BlueSky account, hopefully leaving this platform.

If you want to keep in touch https://t.co/Io5IxHUr1N, see you there!