ps5-linux has been released! You can now turn your PS5 Phat console on 3.xx and 4.xx FWs into a fully functional Linux PC gaming device!
https://t.co/WiiQiPCoIa
I just dropped some research: DSCourier and would love for your opinion and to check it out!!
It’s a novel post-exploitation technique abusing WinGet’s COM API to execute code through Microsoft-signed binaries.
GitHub: https://t.co/pgIhifT5cT
Blog: https://t.co/kgeBvZw06N
We can relay back to the same machine using Kerberos relay instead of NTLM relay. I discovered this attack vector more than a year ago. I will describe it in detail in upcoming Black Hat Asia 2024 https://t.co/zz9z3n6t0h and introduce more interesting attacks.
Today I received a $12,000 bounty using the Sandwich Attack ! 🤑
The vulnerability allowed me to enumerate the API Keys of other users 🤯
How did I do that ? Well the API key was a UUIDv1. If you are not familiar with UUIDv1s you need to know that they are constructed in 6 sections:
High, Mid, Low, Clock Sequence, Node ID, and UUID version.
Interestingly, the Node ID corresponds to the MAC address of the system generating the identifier. This means that if two consequent UUIDs are generated on the same device, this part remains the same, similar to the Clock Sequence.
When High, Mid, and Low are combined, they reveal a timestamp represented in hexadecimal value.
Using some basic mathematics it's possible to subtract the offset between the Gregorian Calendar and the Julian Calendar and then divide by 1000 to get an Epoch TimeStamp.
Ok now that we know that they are generated by a timestamp + machine ID, it means that we could generate them back if we know when the API keys were created 🧐
Luckily enough the API Key that I was using was generated in a batch, meaning I could use the Sandwich Attack in order to brute force the API Keys of other users easily 🔥
If you want to know more about how I exploited the Sandwich Attack, go check my video about this on my YouTube channel 🤟
Nouveau podcast en 🇫🇷 : Service Hacktion.
Ça parlera cybersécurité (plutôt côté offensif), orienté technique, le tout sur un ton décontracté.
Au programme : Revue d'actualité, creuser un sujet en profondeur, interview, etc.
1/2 lien ⬇️⬇️⬇️
Exegol holiday release is live 🎄🎁🎅
New remote graphical desktop, image entrypoint, container startup script, new tools, improved pipeline, doc, etc. Many big things!
https://t.co/R6K6iOqgUf
https://t.co/TwVCkgRQ2a
gg to the team @Dramelac_@QU35T_TV 👏 and all contributors.
For Christmas 2023, Root-Me has decided to thank its favorite hackers! 🥳
Two prize packages including XXL mouse pads, mugs, stickers, flags, and pins are up for grabs ! 🎁
To participate, it's as simple as :
- Follow @rootme_org
- RT 🔃 this post
- Being verified on the official Discord Root-Me
The two winners will be randomly selected on December 28th at 6 p.m. !
Good luck to everyone and happy holidays ! 🎅🤶
I published a new article delving into the intricacies of sensitive data handling in smart contracts, specifically within Ethereum's account storage. Let's explore the memory organization, variable visibility, and potential risks 🙃
https://t.co/14NZFSHl0n
Hello everyone, I think that most of you have seen that last week @mpgn_x64 announced that it was stopping the maintenance of CrackMapExec, this announcement was followed by a lot of discussions and debates about the continuation of the tool.