Liatsis Fotios

The man who trades freedom for security does not deserve nor will he ever receive either - OSCP | eCPPT | CRTP | CARTP | CRTO

[Liatsis Fotios @_wizard32]

- Have you ever tried to create a phishing campaign using #Gophish?
- Have you ever tried to MiTM using #Evilginx2?

Go beyond that by creating a more sophisticated campaign by migrating Gophish and Evilginx2 under Apache proxy (AaRP)

Alice in PhishLand: https://t.co/JkJtlZLU6j

[Liatsis Fotios @_wizard32]

@ShitSecure @m_fielenbach Nicely! What if Administrator is disabled or renamed? Could be nice to have the option to specify the alternate UPN name.

[Liatsis Fotios @_wizard32]

CVE-2022-45608 - ThingsBoard Access Control Privilege Escalation
https://t.co/Sny7qXWFiL

[Liatsis Fotios @_wizard32]

@thingsboard can you please contact me? I have found a critical vulnerability under your platform for both cloud and professional edition

[Liatsis Fotios @_wizard32]

@mrgretzky Waiting for it! 🎣

[Liatsis Fotios @_wizard32]

5) To clarify. Evilgophish project is totally based on the blog that I released. I will not hide that Dylan made some changes, but is not a way that I think community works, and of course my improving thinks are not making you the owner/creator for that.

[Liatsis Fotios @_wizard32]

1) I always trust and will continue to trust the community for sharing my ideas and new methods/implementations/improvements. But there are moments when people escalate your effort and the time you invest and not only don't give you credit but blame you for what you have offered

[Liatsis Fotios @_wizard32]

4) Dylan Evans (fin3ss3g0d) after making some changes, decided to remove me from the credits section. I contacted him in good faith, but he decided to follow the aggressive way accusing me that after the changes that he made, the project is based now on his own solution.

[Liatsis Fotios @_wizard32]

@mrgretzky The simplest solution that I found out was to use apache as reverse proxy, capture and custom rotate the evilginx logs, and by playing/modifying a bit the gophish, to update the statistics using an "update" button at the dashboard interface

[Outpost24 @outpost24]

Check out our red team's blog on 3 ways to escalate privileges and steal credentials based on real world hacking https://t.co/RK4sLJx5Ta

[Liatsis Fotios @_wizard32]

Alice in Windowsland: 3 ways to escalate privileges and steal credentials
https://t.co/OsRbwndf03 @outpost24 #azure #credentialmanager #sqldumper #redteaming

[Liatsis Fotios @_wizard32]

I just got a voucher for @SEKTOR7net Malware Essentials course from the @RedTeamVillage_! Thank you so much for sponsoring the @RedTeamVillage_'s #CTF at DC29 #DEFCON this year! @lazzslayer @NopResearcher @j0nk1m

[Liatsis Fotios @_wizard32]

@RedTeamVillage_ @SEKTOR7net @NahamSec The details explanation of how LLMNR and NetNTLM relay works.

[Liatsis Fotios @_wizard32]

Completed the Az AD Lab from #PentesterAcademy! https://t.co/ihUlwmJOod #AzureAD via @SecurityTube cc @nikhil_mitt

[Liatsis Fotios @_wizard32]

Nicely done and amazing Lab. Recommended for all those who want to expand their skills in AD attacks

[Pentester Academy @SecurityTube]

Congratulations to @_wizard32 for clearing our Certified Red Team Professional exam! #ADLab #CRTP #PentesterAcademy cc @nikhil_mitt https://t.co/gUx9gbXHsq

[Liatsis Fotios @_wizard32]

@degiroeu Follow up 3 times in a row, and still got no reply-back by email. Please don't reply "contact Service Desk" because will be ironic at that point

[Liatsis Fotios @_wizard32]

@degiroeu My account is still not verified on your side since 11th of June (have been on waiting list since May 8). Try contacting twice through email and I got no reply back. Yesterday after third attempt received a reply similar to "we are under verifying your account"

[Liatsis Fotios @_wizard32]

@MikeLowlove @somethingbrite @CattisGrunewald @AnnLinde Really man? Because GR have not money and lot of debts based on your "professional" experience, must allow travellers from countries which didn't take any countermeasures against Cvd-19? This is your answer: Money instead of peoples health? Sorry, but I thinks this is courageous

[Liatsis Fotios @_wizard32]

@evasundin1 @VonBlabar @AnnLinde Greece needs money? What kind of thinking is this? even if GR depending on tourism, peoples health matters most. Once GR and other countries were in quarantine, Sweden was not. It's not GR problem n' I hope until Sweden 'll decide to change strategy, will not open the int-flights