RedShelf Virdocs - Bypass DRM protection PDF Download.
"Bypass DRM" protection for disallowed downloading of ePub/eReader eBooks on the RedShelf (Virdocs) platform, export these documents in PDF format.
https://t.co/dCrJ3aVup4
#bypass#drm#redshelf#virdocs
Quick POC this evening looking at how LAPS (v2) passwords are stored and decrypted on Active Directory (tl;dr, msLAPS-EncryptedPassword attr and NCryptStreamUpdate for crypto) https://t.co/QaZdleEvNc
🔍If you are looking for a comprehensive overview of the current #3CX supply chain attack, I created a diagram that shows the attack flow!💥I'll update as soon as the analysis progresses. Stay tuned for the MacOS edition! #cybersecurity#infosec#supplychainattack#3CXpocalypse
Implementación de 2FA en servicios de conexión SSH y la posibilidad de añadir un tercer factor de autenticación 3FA combinando los métodos SSH Public Key + Password + TOTP
Artículo: https://t.co/M27A1x2sQp
#SSH#2FA#hardening#blueteam#ciberseguridad#cybersecurity
Another way to mitigate #KrbRelayUp is to remove the "Authenticated users" group from the "Add workstations to domain" policy in the Default domain controller policy and assign a specific group to perform these operations. @dec0ne
@wdormann@dec0ne@tiraniddo@cube0x0@harmj0y There was indeed an implementation error, the GPO should be applied to the default domain controller policy. Although I still prefer the modification of the ms-DS-MachineAccountQuota=0 attribute directly prevents host creation in AD avoiding persistence and execution ;)
@wdormann@dec0ne@tiraniddo@cube0x0@harmj0y It seems that the best form of mitigation is to modify the ms-DS-MachineAccountQuota=0 attribute directly avoids host creation in AD and would also avoid persistence. I think it has less impact than requiring LDAP signature for retrocompatibility in legacy envs. @wdormann@dec0ne
Interesante artículo de @jasonfossen de @SANSInstitute sobre la seguridad cifrada y simétrica entre los formatos de compresión de ficheros 7z y zip.
"PowerShell 7-Zip" vs. "Compress-Archive" nativo de PowerShell.
https://t.co/Wflt5cyYvh
#cybersecurity#powershell#blueteam
JET is a Microsoft storage technology.
Access uses JET Red.
Windows uses JET Blue.
Redteam uses it to copy the in-use Windows account databases via the esentutl tool.
📎https://t.co/pKnETUD9K5
📎https://t.co/1WEo3YQcDv
Presenting "TweetFeed"
Public repo that collects IOCs posted on Twitter in order to search them in your environment.
Interesting for #BlueTeam members, contains:
- URLs
- Domains
- IPs
- MD5/SHA256 hashes
Also includes queries for MS Defender.
🔗 https://t.co/C0a7fdxCvS