Hubbl3

CEO at BC Security LLC
Infosec Professional | Engineer | Skier

[BC Security @bcsecurity]

Our new #blog from @_Hubbl3 breaks down how Offensive IronPython techniques remain a powerful threat to networks, even 4 years after Turla's initial deployment of these TTPs.

[BC Security @bcsecurity]

Code & Cask | IronPython TTPs https://t.co/p7Oqp78tKA

[Jean @Jean_Maes_1994]

I'll just leave this here with a reminder that a free workshop is starting at noon est

https://t.co/FAstASyELM

[Hubbl3 @_Hubbl3]

@checkymander @byt3bl33d3r definitely gunna take a look!

[BC Security @bcsecurity]

Empire has come a long way since its humble beginnings. If you haven't used it in some time, take a look at how it's grown into a multi-language powerhouse. For our dedicated users check out the post for exciting news about the upcoming release!

[Cx01N @Cx01N_]

Most importantly, you will be "hacking" into Wells Fargoat as part of this class.

Note: No goats were harmed in the making of this CTF.

[BC Security @bcsecurity]

Don't miss the next episode of Code & Cask today at 5pm EST. We will be looking at python and webdav along with looking at Microsoft's new Python in Excel feature.

https://t.co/KRtwHONpwY

[Hubbl3 @_Hubbl3]

Wow another wave of explosions in Lebanon through radios. Starting to think this is more about PsyOps and creating a deep mistrust of communication devices by Hezbollah

[Hubbl3 @_Hubbl3]

@snehalantani The Israelis aren't exactly shy about about civilian collateral and you could control the distribution of the trigger through targeting of known numbers. But we won't know more for a while and the strength of explosion does point to some kind of hardware modification

[Hubbl3 @_Hubbl3]

@HackingLZ I'm really curious to find out if there were hardware modifications or if it was purely a software/firmware attack.

[Rasta Mouse @_RastaMouse]

Does anybody know how/where you can download older versions of KB4052623 (i.e. Defender Definition Updates)? Microsoft Update Catalog only provides the latest version.

[Hubbl3 @_Hubbl3]

@_RastaMouse commenting just so I can follow because I would love to know too.

[Hubbl3 @_Hubbl3]

@ShitSecure hmm, weird. I haven't tried a rust binary in a bit but I was planning on using it in a training in a few weeks😅

I wonder if an API changed? I have recently been unable to find a working python shellcode injector that doesn't crash the parent process either

[BC Security @bcsecurity]

We are excited to be heading to @Blackhatmea! Come upgrade your skills with our Evasion course. Learn how open-source tools & custom toolsets remain stealthy through application of code obfuscation & TTPs like API unhooking & C2 traffic modification.

[The DFIR Report @TheDFIRReport]

BlackSuit Ransomware

🌟Analysis & reporting completed by @MetallicHack, @yatinwad, & @malforsec.

🎵Audio: Available on Spotify, Apple, YouTube and more!

📚Report: https://t.co/HYvjamdbUH

[Hubbl3 @_Hubbl3]

@HackingLZ @TheDFIRReport But wow I haven't seen spread through the C$ folder in a while. That is some old school TTPs

[Hubbl3 @_Hubbl3]

@HackingLZ @TheDFIRReport Cue the "I thought APT was supposed to stand for advance" comments 🙄

[BC Security @bcsecurity]

Interested in getting started with offensive security? Our new Sliver Ops course is designed as an introduction to command and control frameworks, guiding students through the basics of the Sliver framework while familiarizing them with attacking Windows and Linux systems