A new clickfix technique, FileFix, developed by @mrd0x, is being used in the wild—poorly.
Website tersmoles[.]com delivers a "Legitimate Chrome Installer" using FileFix.
The attacker didn’t even change the path and filename—just copy-pasted code directly from demo website
🚀I'm finally releasing GraphSpy to the public!🕵️
A powerful offensive security tool focused on making initial access and post-compromise enumeration in Microsoft Entra and M365 much more convenient during penetration tests and red team assessments!
https://t.co/OfI2TanQ61
AD Privesc
Kerberos TGS and SeTcbPrivilege
If you have SeTcbPrivilege, you can ask TGS on behalf of ALL logged users on your machine WITHOUT Password
...and if there is a Domain Admin logged?
Zero detection by EDR/AV
https://t.co/FpVmxPiDP3
#redteam#SeTcbPrivilege
Something I still reference a lot. To this day.
The Attackers Guide to Azure AD Conditional Access – Daniel Chronlund Cloud Security Blog https://t.co/BqNKCwukZ4
Just launched the #CloudBreach Blog 🚀: Dive into the essentials of AWS Enumeration! Uncover the tactics for unauthenticated #AWSEnumeration, leveraging OSINT, Google & GitHub Dorks, and more. A must-read for #CloudSecurity readers. https://t.co/N03pdOsqhE