james cook

[Atredis Partners @Atredis]

Awesome Atredian and our favorite BJJ prizefighter @_tomsteele is a coauthor! Excited to see this ship!

https://t.co/O6k7dThT1a

[Ryan Hanson @ryHanson]

I found a Freemarker template injection bug in Artifactory a few months ago, but I couldn't create new objects because the ?new and ?api built-ins were disabled. I ended up reusing existing objects within scope and found a way to read/write files: https://t.co/YS1jH202hN

[james cook @_jbcook]

So excited to have join the @Atredis team, it's going to be a great year!

[NowThis Impact @nowthisimpact]

Fox News is refusing to air this segment where Tucker Carlson loses his temper after guest @rcbregman tells Carlson he's 'a millionaire funded by billionaires' during a blunt conversation about economic inequality. NowThis obtained the full interview.

[james cook @_jbcook]

Leverage rundll32 to execute a DLL over remote webdav share in @metasploit originally found by @ryHanson https://t.co/q3uckaKO9d

[james cook @_jbcook]

Going to @CactusCon today!

[james cook @_jbcook]

Created some terraform projects including one that installs cobaltstrike and using letsencrypt to configure a new java keystore. https://t.co/YbKnZBdFHj

[PHX2600 @PHX2600]

CactusCon is only a week away. Be sure to check out the schedule. See everyone there!

https://t.co/FA7SugU7so

[Optiv @Optiv]

Optiv’s @rmikehodges speaks about #hideNsneak used to take down a distributed #cloud attack infrastructure. #BHUSA https://t.co/21ukvGuoIW

[james cook @_jbcook]

@tatanus Congrats dude!

[Kevin Robertson @kevin_robertson]

[Blog] Beyond LLMNR/NBNS Spoofing - Exploiting Active Directory-Integrated DNS https://t.co/WvyIADM1j6
Also, #PowerShell ADIDNS spoofing functions added to Powermad https://t.co/jRJgtnb9Ws

[james cook @_jbcook]

For those times when you want each request to go through a random socks proxy. Also when you want each request to have a random user-agent. https://t.co/3JH527FuBr

[Nick Popovich @pipefish]

Getting ready for @BSidesAustin. Trying to acquire breakfast tacos for 50 people at 6am.

[Optiv @Optiv]

Don't miss Optiv's @theDarracott & @Tyl0us presentation on #SniffAir, an #opensource #wireless #security #framework tomorrow at 9am | Lil Tex Auditorium at @BSidesAustin. #pentest https://t.co/nkibmQoJLP

[Ryan Hanson @ryHanson]

After the first time I encountered a system with PowerShell restrictions, I started researching bypasses like most of us. But I also began looking for an alternative "shell" that could import modules and dynamically execute code/scripts in-memory. So I started building one :)

[james cook @_jbcook]

First time using #Vagrant. I've written a wireless and internal machine for engagements. https://t.co/krHWL1JkRs. You can use either Fusion or Virtualbox.

[james cook @_jbcook]

Received my shirt from #Hacktoberfest thanks @digitalocean and @github

[james cook @_jbcook]

Updated peepingJim with better URL parsing https://t.co/JhBgqb1otz

[james cook @_jbcook]

Quick program thrown together to enumerate names from ccmcip. https://t.co/vdGTttIRIQ

[Ryan Hanson @ryHanson]

The well known Excel DDE vector can also be manipulated, here is the formula:
=MSEXCEL|'\..\..\..\Windows\System32\cmd.exe /c calc.exe'!''