Gerrard

Red Teamer | Pentester

[Gerrard @Gerh4rdt_]

Observed infrastructure included rotating domains:
gpt-backup[.]com
gpt-safepage[.]com

[Gerrard @Gerh4rdt_]

First day in Las Vegas for #DEFCON, and while searching for GPT on Google, I was served an ad leading to a custom GPT used in a malicious chain. Quite the welcome to Vegas. 🎰

Google Ads → Custom GPT → rotating fake “backup” domains → ClickFix

@OpenAI @GoogleAds

Stay sharp.

[Gerrard @Gerh4rdt_]

@diego_ia85 Si nos quedamos sin médicos quien nos va ayudar con los temas de la salud?

[Steve Borosh @rvrsh3ll]

Giving a virtual presentation to another University here in #CostaRica tonight with my amigo @Gerh4rdt_ . Spreading the good word of how to grow into a cyber security career and the challenges here. It's an exciting time to be here in this field. 🦥🏖️

[Steve Borosh @rvrsh3ll]

I had an absolute blast tonight with my amigo, @Gerh4rdt_ 🤘 These eager, young minds taking their first step towards pwning their own futures. 🤩 @BHinfoSecurity @pwnedcr

[Gerrard @Gerh4rdt_]

@rvrsh3ll @BHinfoSecurity @pwnedcr It was great to contribute a bit of our experience to future generations of Infosec professionals.💪

[Gerrard @Gerh4rdt_]

@ekozonaredteam Hola, en que fecha avisan a los Speakers seleccionados para la villa?

[Gerrard @Gerh4rdt_]

You look good, friend! The red suits you💯

[Steve Borosh @rvrsh3ll]

I'm #official #redteam courtesy of mi amigo @Gerh4rdt_ !!

[Gerrard @Gerh4rdt_]

@rvrsh3ll You look good, friend! The red suits you💯

[PWNEDCR @pwnedcr]

El registro se abre hoy, es hoy!!
PWNEDCR 0x5 2022, será el Sábado 3 de diciembre en la Universidad Latina, este año contamos con 12 charlas y 5 talleres además de otras actividades, ya pueden registrarse en https://t.co/eBaNSLFhJo les esperamos!

[Gerrard @Gerh4rdt_]

@theluemmel @dec0ne Oh thanks! my fault

[LetsDefend @LetsDefendIO]

OSI Model and attack types

[LetsDefend @LetsDefendIO]

Useful Linux commands for host investigation

[mpgn @mpgn_x64]

Lately, two new tools for dumping the lsass process have come up: HandleKatz and nanodump 👀

I've integrated them to CrackMapExec as module:
1⃣ -M handlekatz
2⃣ -M nanodump
3⃣ -M procdump (as bonus 😝)
(dmp parsed by pypykatz from @SkelSec )

Available on @porchetta_ind 🪂

[Vincent Le Toux (Paris, France) @mysmartlogon]

Next in #PingCastle
Busy doing incident response and need to know if there is any hacker activity in progress? Try the next "export changes" feature. No install, setup in seconds.

Used LDAP sync, but if there is a real need for DCSync (more reliable but >AV alerts) I'll do it

[LetsDefend @LetsDefendIO]

Windows server auditing for SOC teams

[Jack Rhysider 🏴‍☠️ @JackRhysider]

Want to learn Metasploit? I highly recommend downloading this guide and having it handy while learning. https://t.co/ZuGaQfpAcO

[Gerrard @Gerh4rdt_]

Woohoo! Completed the Attacking Active Directory with Linux Lab from PentesterAcademy! https://t.co/Ho56eVMkYf #LinuxAD a través de @SecurityTube cc @nikhil_mitt

[Jorge Orchilles @jorgeorchilles]

December 2021 Patch Tuesday:
- 55 Vulnerabilities
- 7 are Critical
- 60 are Important
- 6 are 0day
- CVE-2021-43890 actively used by Bazar, TrickBot, Emotet for initial access (followed by #ransomware often)
- 5 0days are Privilege Escalation

https://t.co/bb9HH2H6G9