Karan

Detection Engineer

[Ido Veltzman @Idov31]

I released EtwSuite: A Windows native ETW inspection suite for listing providers, reading metadata, parsing manifests, creating sessions, consuming events, and opening ETL files from one place for x64 and ARM64. https://t.co/j3k0fnhGPv

[Connor McGarr @33y0re]

[New @originhq blog+POC]

No PPL? No problem!

SecurityTrace, an undocumented ETW feature, restricts some AutoLogger traces to PPL only — yet we found this current design still allows non-PPL processes to consume from Threat-Intelligence as admin only!

https://t.co/iZyILtbJx8

[Karan @K4R4NX]

Just successfully owned "Analytics" on HTB and even created a Proof of Concept (POC) during the process to establish that initial foothold. If you're interested in checking it out, feel free to take a look.
You can find the repository here :

https://t.co/Osi2s2vkw6

[Mike Takahashi @TakSec]

Google Dork - SSRF

inurl:http | inurl:proxy= | inurl:html= | inurl:data= | inurl:resource= inurl:& site:target[.]com

[Elsa Wainblum @ElsaWainblum]

I finished reading this course on Activre Directory and it was awesome ! It is very detailed and it links to a lot of interesting articles :
https://t.co/OkpKBfbI6z

[Karan @K4R4NX]

Excited to share my first blog, "YARA 101" A Beginner-friendly guide! 🚀 Discover YARA's power in malware research & threat hunting. #YARA #Cybersecurity #ThreatHunting #MalwareResearch #BlogLaunch https://t.co/vREnKEwoEI

[Nick Aleks @Nick_Aleks]

Free Black Hat GraphQL Book Giveaway! Retweet for your chance to win! #graphql #api #hacking #book #giveaway (10 signed books)

[DirectoryRanger @DirectoryRanger]

AD FOR OSCP (Active Directory Guide)
https://t.co/VuDkJAGkED

[𝙎𝙍𝙏 🇮🇳 @shubham_srt]

"𝐓𝐚𝐬𝐭𝐲 𝐂𝐨𝐨𝐤𝐢𝐞𝐬 🍪": Cookies with a Security Lens 🔎

I studied cookies in-depth and documented everything in Detail! Including various Edge Cases of Cookies / Browsers.
Took me almost a Month! to compile all this.
🥷🏻
𝐓𝐚𝐬𝐭𝐲 𝐂𝐨𝐨𝐤𝐢𝐞𝐬: https://t.co/eqLLxBjdE6

[Aseem Shrey @AseemShrey]

Subfinder 101 : Find 10x more Sub Domains

🧵👇

[Manas @ManasH4rsh]

A very good blog:-

https://t.co/vKYbs66eeL

[7h3h4ckv157 @7h3h4ckv157]

Active Directory Mind-Map 📍
#oscp edition

https://t.co/McN8qr2DVX

#offsec #ActiveDirectory #infosecurity #CyberSec #bug #coding #BugBounty #infosec #bugbountytip #bugbountytips #pwn #ctf #CyberSecurityAwareness #cybersecuritytips #Hacking #redteam #Pentesting #cybersecurity

[Jon Gorenflo 🇺🇦🌻 @flakpaket]

#OSINT Tip:

Did you know you can recover scrubbed metadata from a PDF that wasn't scrubbed properly?

The changes are incremental, and the history is stored in the PDF.

This command removes the "updates" to the PDF metadata:

exiftool -PDF-update:all= file.pdf

[Karan @K4R4NX]

I am Excited to share that I've passed the @eLearnSecurity eCPPT Certified Professional Penetration Tester exam!

Big thanks to my friends and the community for their invaluable support and resources. #eCPPT #Cybersecurity #infosec

[Somdev Sangwan @s0md3v]

SubGPT is available for free now :)

Good luck with your recon✨

https://t.co/4U7skFljTT

[Mauricio Velazco @mvelazco]

Need a full AD lab with 20 windows servers +Kali+win logging+sysmon+splunk to test attack techniques and review the resulting telemetry ? Attack Range has your covered in ~30m ⌨️python attack_range.py build
Config🔗https://t.co/vu8AaIuY42
Attack Range 🔗 https://t.co/K5L9AVLp5k

[MIDHUN @MrG6OOT]

Unicode Normalisation Leads to Account takeover
https://t.co/hfvtg1SLfz

#bugbounty #bugbountytip

[Nishith K @busk3r]

40 Methods For Privilege Escalation

https://t.co/uYHbxtMaYP

#Security #Pentesting #SecurityEveryday #BugBounty #Pentest #AppSec

[Binni Shah @binitamshah]

Building a Basic C2 : https://t.co/mYCTAky0YC credits @Ahm3d_H3sham