OrdinalExport

[Alex Neff @al3x_n3ff]

A new module has been merged into NetExec: change-password🔥

Accounts with STATUS_PASSWORD_EXPIRED aren't a problem anymore, just reset their password.
You can also abuse ForceChangePassword to reset another user's password.

Made by @kriyosthearcane, @mehmetcanterman and me

[OrdinalExport @OrdinalExport]

@DotNetRussell @bettersafetynet @UK_Daniel_Card @chenb0x @x25princess @Bandrel @DoingFedTime Awe, that was very kind of you! Great group of people!

[OrdinalExport @OrdinalExport]

@HackingDave Now you need a sign that says Future. Put it behind you. When someone asks why you can say so you can go back to the future!

[OrdinalExport @OrdinalExport]

@HackingDave “Back” to the future?

[OrdinalExport @OrdinalExport]

Phishing Pretext: An obvious spam email with a header that has a message “<Organization> has flagged this message as a phishing email. Click <button link>Report</link> to submit this to the Security Operations Team”

[OrdinalExport @OrdinalExport]

https://t.co/FoMVCmnBh1

"In response, a coalition of longtime, active CVE Board members have spent the past year developing a strategy to transition CVE to a dedicated, non-profit foundation."

They've been planning for the past year.

[Florian Roth ⚡️ @cyb3rops]

MITRE announced on April 15 that their CVE contract ends on April 16. That timing alone raises some questions.

The language in the message feels very deliberate: “We’re committed,” “considerable efforts,” “if a break were to occur” – while they know a break will happen the next day. That’s not just unfortunate timing. It looks like controlled messaging, maybe even a pressure move.

CVE isn’t some massive budget item. It’s a lightweight system with probably a small core team and some automation. I’d guess a handful of full-time staff, not dozens. So cutting this - of all things - doesn’t really look like cost-saving.

If the goal was to send a message about funding or contract uncertainty, they picked the most visible and disruptive program. And it worked – everyone’s paying attention.

It’s worth noting that MITRE owns the CVE and CWE trademarks. Even if someone else takes over, they’ll still be operating within MITRE’s legal boundaries.

All in all, this looks less like a necessary budget cut and more like a strategic decision to generate visibility and urgency. Hard to read it any other way.

[Ryan Platten @rp1atten]

@Ben0xA @TrustedSec

[OrdinalExport @OrdinalExport]

@DotNetRussell @TrustedSec I really have no clue. I do have 3 grey hairs now though!! I'm a big kid now.

[OrdinalExport @OrdinalExport]

@Bandrel Empty?

[Chris Spehn @ConsciousHacker]

Here's your free red team tradecraft for today https://t.co/wjPvCHKLZ0

[Nicolas Krassas @Dinosn]

CF-Hero: discover the real IP addresses of web applications protected by Cloudflare https://t.co/eZksknMcsL

[WitherOrNot @witherornot1337]

Improved bypass for Windows 11 OOBE:

1. Shift-F10
2. start ms-cxh:localonly

Only required on Home and Pro editions.

[OrdinalExport @OrdinalExport]

@TonikJDK Yup! All it does

[OrdinalExport @OrdinalExport]

@TonikJDK reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE /v BypassNRO /t REG_DWORD /d 1 /f

[OrdinalExport @OrdinalExport]

@TonikJDK Time to backup bypassnro.cmd

[Jim Kennedy @TonikJDK]

We’re removing the bypassnro.cmd script from the build to enhance security and user experience of Windows 11. This change ensures that all users exit setup with internet connectivity and a Microsoft Account.

https://t.co/vRkAIDV1sa

[Alex Neff @al3x_n3ff]

The NXCDB of NetExec finally supports the LDAP protocol as well🎉

Long overdue and now finally implemented by @lapinousexy

[OrdinalExport @OrdinalExport]

@Oddvarmoe @_RastaMouse @HackingLZ 😅
...
😒