any0ne

[any0ne @_any0ne_]

Hi @AskWorkspace ,
I'm trying to subscribe to Google Workspace, but facing an issue on your side. At the "Review and checkout" stage, I cannot enter my credit card number and clicking on "checkout" does not do anything. I've tried on several browsers- it doesnt changed anything.

[Christoph Kuderna @qd285]

So MS reduced Exchange AD permissions in June 2019: https://t.co/WSDPCUM6gY.
One of the changes: "There is a deny ACE on the DNS admins group..."
That's pretty cool considering that DNSAdmins is basically Domain Admins (https://t.co/ywtfbn8BUw)
1/2

[Alex Ionescu @aionescu]

A few slide releases by mob request:
* Recon 2018 -- My talk with @tiraniddo on 12 ways to bypass PPL: https://t.co/43iFK03Q6A
* BlackHat 2018 -- My talk with @pwissenlit on Windows Notification Facility (WNF) abuse & misuse + defensive scripts: https://t.co/hcYNKZPrPg

[Ronnie Flathers @ropnop]

Also, happy to release Kerbrute, a cross platform standalone binary for bruteforcing and enumerating AD users through Kerberos AS requests. Definitely the fastest way to brute force (or lockout ;) a user in an AD domain https://t.co/qk7IRP4gFj

[any0ne @_any0ne_]

@ldap389 Awesome work, very inspiring ! Glad to see people continue research on AD incident response :)

[gdr @krali_]

From #Exchange Organization Management to #ActiveDirectory compromission: part 2. https://t.co/Fj8frypqIT

[Ben Hawkes @benhawkes]

Project Zero blog: "Injecting Code into Windows Protected Processes using COM - Part 2" by @tiraniddo - https://t.co/mz27XgBrbO

[Fist0urs @Fist0urs]

Good reference if you want to dive into iOS/macOS default heap on an exploitation point of view

[John Lambert @JohnLaTwC]

To anyone in IT who's ever pulled an all nighter because of a crisis, slept at work because that's what it took to respond, or flew to Ghana to retrieve the sole intact instance of your domain controller, RESPECT🙏
https://t.co/ioFblidMOp

[Nicolas Krassas @Dinosn]

7-Zip: From Uninitialized Memory to Remote Code Execution https://t.co/qO0cUP5iP9

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

Ever seen kerberos problems when dealing with domains approbation? **Especially when disabling NTLM authentication?**
#mimikatz command: kerberos::ask /target:cifs/[email protected] helped here - https://t.co/Wzb5GAfWfd
(in Windows 10, native command: klist get ...)

[DirectoryRanger @DirectoryRanger]

UncoverDCShadow. A PowerShell utility to dynamically uncover a DCShadow attack
https://t.co/bUuI0mWYLR

[Cloudflare @Cloudflare]

Announcing 1.1.1.1: the fastest, privacy-first consumer DNS service - https://t.co/xiM3yllWHj

[Elad Shamir @elad_shamir]

A technique for retrieving NTLM hashes without touching LSASS
https://t.co/4NU215vMlC

[Alex Ionescu @aionescu]

Good news: you no longer need special registry keys to get the Meltdown/Spectre paches for your client Windows machines (https://t.co/XSutkxSd0l). Bad news, @Kaspersky now has a special place in your kernel.

[x0rz @x0rz]

UAC bypass via elevated .NET applications https://t.co/yDyf0b4ZpW #windows #pentesting

[Vincent Le Toux (Paris, France) @mysmartlogon]

@_wald0 Just published NTLMInjector (https://t.co/Mp7enpZ5yM): set the previous password using its hash after a password reset (#DCSync)

[James Forshaw @tiraniddo]

So the final part 3 of my UAC journey has been posted. How to exploit the UAC issue on Windows 10. https://t.co/TOu0IIUzsd

[Efrain Torres @etlow]

#ShadowBrokers Table with all the exploits leaked based on public info to help understand the impact for current and legacy unsupported OSs.