0xReady B

Reda BELHAJ | OSCP+ | PNPT | CRTP | NNSA | Personal account 🇲🇦

[Renwa @RenwaX23]

"Dad, what was it like playing CTFs before AI?"

[Lyés @LyesBouzidi10]

I am genuinely over the moon for Neymar.

[𝐀𝐁𝐃𝐎𝐔 🇲🇦🇳🇱 @MarshallFCB]

Gavi qui débarque dans les vestiaires du Real Madrid parce que ça se bagarre sans lui

[Lyés @LyesBouzidi10]

This is the way the game was meant to be played man. Bayern and PSG are putting on a SHOW!

[Mahmoud 👨🏽‍💻🧙🏽‍♂️ @mahmoudfettal]

In gîtex Morocco there are more CEOs than registered companies in Morocco

[Bassem @bassemelnour]

مش قادر اتابع اي تطور في الذكاء الاصطناعي خلاص، هاخد كرسي و اقعد انقرض علي جنب في سلام.

[Ligue 1 English @Ligue1_ENG]

Neymar is better than all of you. End of discussion. 🤫

[Johnjr @jayjayr01]

Neymar won a puskas on Rooney head with that goal 😂😂😂😂

[FC Barcelona @FCBarcelona]

Eid Mubarak 💙❤️

[Ped @PedTalksSports]

If Neymar was English they would have said he is better than Messi

[Johyan @JohyanCruyff]

Neymar is the third best player to play football over the last 20 years

That’s all I have to say

[Ney @Neycromancer]

Not a single player in PL history comes close to this Neymar.

[SOCCER212 @SCCR_212]

🎙️La légende libérienne George Weah :

« Si vous voulez la vérité… celui qui quitte le terrain et se retire du match, puis revient et est considéré comme vainqueur… la loi est claire, il est perdant. Le football ne se joue pas comme ça… Le Maroc a défendu son droit et l’a obtenu, alors félicitations à lui pour le titre »

[Jake Knowlton @j2k3k]

“what port does X use”

who cares, google it, come up with better interview questions

[Aurélien Chalot @Defte_]

Dumping LSASS is old school. If an admin is connected on a server you are local admin on, just create a scheduled task asking for a certificate on his behalf, get the cert, get its privs. All automatized in the schtask_as module for NetExec 🥳🥳🥳

[Florian Roth ⚡️ @cyb3rops]

The first samples of #EDRFreeze that landed on VirusTotal were already detected by our existing rules – even though we hadn’t written anything specific for it. The reason is that the authors reused previously documented techniques we had already covered in our generic YARA rules

Some additional remarks:
- EDR-Freeze is another userland EDR killer abusing WerFaultSecure to suspend EDR/AV processes without BYOVD
- Early VirusTotal submissions had very low AV detection (5/73)
- The precompiled release binary was uploaded multiple times and eventually reached 22/73 detections
- Other builds of the tool still get just 8–10 detections
- Nothing new here: AV products still take their time reacting to publicly dropped tools
- We’ve now added blocking rules for this tool to our Sysmon config, using the imphash
- This means that if you use Sysmon with our config and a recent enough version, this tool gets blocked on write (via FileBlockExecutable)

EDR-Freeze
https://t.co/pyz9FFJsFu

VT samples (with our detections):
2c8fbd0f7fd0ed8ebcacb087c8faa6f3
768348397c70e19075cbb10a24cf9d83
c57067816def020b6984e7c2bee9be31

Sysmon Config (now with rules for EDR-Freeze):
https://t.co/f7kxUDwFbi

Sysmon FileBlockExecutable docs:
https://t.co/kZsbEd36fB

[Janty @CFC_Janty]

I’m sorry but the World Cup can never be hosted in America what the actual fuck

[Serpin Taxt @serpinxbt]

the npm dev got phished 😭😭😭

insane

[FastFoodRembrandt.onion @solminingpunk]

Intelbroker opsec blunder

[0xReady B @RedatoB]

@Azzapp_LoL Thank you @Azzapp_LoL #FreePalestine 🍉