aas

Offensive Security Auditor 🇨🇭

[aas @aas_s3curity]

My #Blackfield VM for @hackthebox_eu is retired. Some writeups here:
- https://t.co/JFMNSiTd0a
- https://t.co/eKloXcTefh
- https://t.co/Txp6GKkQBA

[Tom Dörr @tom_doerr]

Android emulator in a Docker container

https://t.co/M8nlWPXAWb

[Sooraj @iAnonymous3000]

The @GooglePixel_US is an engineering marvel in mobile security.

Titan M2 is physically separate silicon with its own processor, RAM, and flash. Your encryption keys live there and the main CPU has no electrical pathway to extract them. Keys are generated on die during manufacturing and never exposed to factory systems.
(That’s defense against nation state interdiction)

Pixel 8 deployed Memory Tagging Extension at consumer scale using the Tensor G3. Hardware enforced memory tagging catches buffer overflows and use after free bugs instantly. These vulnerability classes account for 70% of critical mobile exploits. MTE doesn’t mitigate them - it eliminates them.

Protected KVM isolates sensitive computation in VMs the Android kernel cannot access even with root. Kernel compromise no longer equals game over.

The Pixel is the only Android device supporting bootloader relocking with custom keys. This enables @GrapheneOS to run with full verified boot integrity. Hardware that empowers third party hardening rather than preventing it.

Seven years of security updates. Published security bulletins. Open vulnerability research program.

This is what defense in depth looks like when you control the silicon.

[aas @aas_s3curity]

Introducing ScEntra
https://t.co/VtGbJACerq

[aas @aas_s3curity]

https://t.co/1j2ovMrRXx

[aas @aas_s3curity]

https://t.co/oNT7MPw9pA

[aas @aas_s3curity]

@weareKLOUD who is the beautiful voice behind Follow me song? Please come in Europa :).

[Mayfly @M4yFly]

Welcome to the new AD Mindmap upgrade !
v2022_11 will be dark only (this is too painful to maintain two versions).

Thx again to : @Vikingfr and @Sant0rryu for their help 👍

Full quality and zoomable version here :
https://t.co/eIJE0apRzw

Overview :

[aas @aas_s3curity]

AD Pentest Cheatsheet:
https://t.co/O3nrUaehgr

[aas @aas_s3curity]

https://t.co/PHCa681GGZ

[aas @aas_s3curity]

https://t.co/IOgjspEK19

[Andy Robbins @_wald0]

Tiered Administration is among the strongest security controls that exist.

But the vast majority of organizations do not use it.

Here is how you can get started using Tiered Administration TODAY in your #Azure environments: 🧵

[mpgn @mpgn_x64]

Oh noooo..., anyway 😆

https://t.co/Kx3AfZqY5B

[Hakin9 @Hakin9]

How to test Registration forms to ensure a secure authentication process. https://t.co/vu7IjThGl2

#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #Linux #windows #DFIR #cyberattack

[DirectoryRanger @DirectoryRanger]

SMB Relay Cheatsheet
https://t.co/IfAash5UIt

[Dirk-jan @_dirkjan]

New BloodHound version 4.2 means new BloodHound[.]py version 😀 BloodHound python v1.4.0 is now live, compatible with the latest BloodHound version. It includes the research from my last blog as a new edge "WriteAccountRestrictions", which also got added to SharpHound ❤️

[aas @aas_s3curity]

Did this thing Friday.

[Binni Shah @binitamshah]

Awesome RCE techniques : Awesome list of techniques to achieve Remote Code Execution (RCE) on various apps! : https://t.co/7U70BSONjt credits @podalirius_

[Mathis Hammel-Brylinski @MathisHammel]

#6. Coolors

Je suis nul en design, surtout quand il s'agit de choisir des palettes de couleurs.

Coolors génère automatiquement 5 couleurs qui vont bien ensemble, verrouillez celles qui vous plaisent et changez les autres à l'infini !

🔗https://t.co/KilkU89RY6

[Mathis Hammel-Brylinski @MathisHammel]

#1. Carbon

Créez et partagez des morceaux de code source en images. Incroyablement utile pour faire des belles présentations et donner de l'impact à vos tweets.

🔗https://t.co/6DtelFhpro