B088Y

Dance like no one is watching....encrypt like everyone is.

[/r/redteamsec @r_redteamsec]

Custom DLL injection with Cobalt Strike Beacon Object Files https://t.co/K0VFKGm0V5 #redteamsec

[Jai Minton @CyberRaiju]

Red Team Tip:

'explorer.exe /root' can be run from the command line - similar to 'cmd.exe /c', only it breaks the process tree and makes its parent a new instance of explorer

For blue team: keep an eye on multiple instances of explorer.

explorer.exe /root,"D:\CyberRaiju.exe"

[Volodya @volodiyah]

First blog post on how to automatically rewrite 700'000 lines of code to bypass most AV/EDR (features string+API call obfuscation for Meterpreter): https://t.co/O9xGB09at0

[Billie @_BillieBelieves]

Imagine being a spy right now, stuck at home trying to convince your family you have a normal job

[B088Y @QjA4OFk]

Very cool!
https://t.co/kxunjASIma

[The Hacker News @TheHackersNews]

Cmd Hijack !!!

A command/argument confusion issue with path traversal bug in Windows cmd.exe

https://t.co/GlD1323xfz

cmd.exe /c "ping 127.0.0.1/../../../../../../../../../../windows/system32/calc.exe"

via @julianpentest

[B088Y @QjA4OFk]

Impressive work! Part 2: Faxing Your Way to SYSTEM
#redteam #hacking #infosec https://t.co/YeM1VeBtvd

[B088Y @QjA4OFk]

Brilliantly done! Part 1: PrintDemon: Print Spooler Privilege Escalation, Persistence & Stealth #redteam #hacking #infosec https://t.co/bMn0PpgZRi

[B088Y @QjA4OFk]

A #POC for #CVE-2020-0601; #Codesigning PE files using a Certificate Authority validated by ECC #crypt32 #cryptoapi

https://t.co/fY7xmqlyvZ

[B088Y @QjA4OFk]

New #Iranian data wiping #malware, #zerocleare #xHunt #APT34 #OilRig https://t.co/QMdNnHJhBq

[B088Y @QjA4OFk]

#NorthKorea #Lazarus using in memory #Mac #malware: https://t.co/OjELaBoq7c

[B088Y @QjA4OFk]

#Hacking via #ESET #antivirus we console: https://t.co/VXa6pBjwch

[B088Y @QjA4OFk]

A very nice #uacbypass for #Windows10
https://t.co/G5miybGorm

[B088Y @QjA4OFk]

Please use @signalapp

[Florian Hansemann @CyberWarship]

Abusing Microsoft Word Features for Phishing: “subDoc”

#infosec #pentest #redteam
https://t.co/SlFQTCk4R8

[B088Y @QjA4OFk]

EV #CodeSigning for only $30! #signedbinaries #avevasion #Hacking
https://t.co/lNhSm0ZXwf

[B088Y @QjA4OFk]

A #cheatsheet with commands that can be used to perform #kerberos attacks
https://t.co/SOoHn39yyY

[Beau Bullock @dafthack]

For everyone wondering how spam events got added to your Google Calendars without having a source in your inbox @ustayready and myself talked and wrote about how the Google Calendar API can be used to do this two years ago when we reported it to Google. https://t.co/g0Aip263cZ

[IssueMakersLab @issuemakerslab]

North Korean hackers from Kimchaek University of Technology, who was dispatched to India and engaged in hacking activities, are believed to have recently moved to Cambodia.

[Samir @SBousseaden]

#redteam tip, ifu plan to persist via scheduled task, give a try to hijack this MS Office related task (got created and deleted automatically by office integrator.exe), task xml file can be edited if u have local admin (same folder host other tasks), otherwise try to mimic same

[B088Y @QjA4OFk]

@Jaroneko @lllarppa @defcon @jaysonstreet Quartz Crystal https://t.co/E8loYAO69t