theGingerbreadMan

I Like 🐚 and the color red.

[theGingerbreadMan @aidan_gbm]

⁦@UberEats⁩ Something’s not adding up here…

[theGingerbreadMan @aidan_gbm]

Just pwned Worker! This was my first Windows box in a while, feels good to get back to it. https://t.co/5V4U7faOCW #hackthebox #htb #cybersecurity

[theGingerbreadMan @aidan_gbm]

Just pwned SneakyMailer on #hackthebox! This was a really fun one to come back to after some time off. Props to sulcud for letting me learn new techniques. https://t.co/TggBdl8vXC

[Dr. Nestori Syynimaa @DrAzureAD]

Found out that #Microsoft #Teams policies are ONLY applied on the client🤦‍♂️and can be bypassed:
1. Use #AADInternals Teams functions 🔥 (edit and delete messages)
2. Lie to the Teams client😂(bypass messaging, meetings, and cloud storage policies)

👉 https://t.co/Fpoikj4dGQ

[theGingerbreadMan @aidan_gbm]

Here's my writeup for Admirer on @hackthebox_eu. It was a fun box with a lot of enumeration at the beginning, abusing Adminer to get credentials and then a misconfiguration in sudoers to allow for privesc.
https://t.co/580LxPtYTz

[theGingerbreadMan @aidan_gbm]

Finally getting back into @hackthebox_eu writeups with Remote - an easy Windows box abusing an Umbraco CMS RCE and bad service permissions. Read my post here:
https://t.co/5RUor4yuDH

[Nicholas Kristof @NickKristof]

When all 57 Buffalo police officers on the emergency response team resign because two were suspended for knocking down a 75-year-old man and sending him to the hospital, this seems like an opportunity to find 57 new police officers who don't approve of assaulting senior citizens.

[Barack Obama @BarackObama]

Real change requires protest to highlight a problem, and politics to implement practical solutions and laws. As I mentioned yesterday in our @MBK_Alliance town hall, there are several steps our mayors and elected officials can take right now:

[Mudge @dotMudge]

From:

Sergeant Major of the Army
General of the Army
Secretary of the Army

Message:

It is the job of all members of the Army to protect the protestors and their constitutional right to peaceful assembly!

HUA!
https://t.co/2tD5YhJGo7

[theGingerbreadMan @aidan_gbm]

Prepping for my OSCE exam next week and I wish I did vulnserver sooner, these challenges are super fun. It’s really cool to validate the concepts I learned from the @offsectraining guide and labs since I don’t do much binex otherwise

[theGingerbreadMan @aidan_gbm]

Just owned system on Cache! User took me longer than most for this one but I learned some fun new tools. https://t.co/vibNiE8lZh via @hackthebox_eu

[John Hammond @_JohnHammond]

Okay, you asked for it! Streaming more @RealTryHackMe King Of The Hill today at 5:00 PM EST with @heldstab_alex -- I will make a private game at the start and I'll share the link in the stream chat, so YOU can join in too! https://t.co/hW7iXAtcK9

[theGingerbreadMan @aidan_gbm]

Here's my writeup on Obscurity from @hackthebox_eu , a medium Linux box focused on finding vulnerabilities in custom code.
https://t.co/ELh80mSpjZ

[theGingerbreadMan @aidan_gbm]

Just owned system on Quick! This one lived up to its description as a hard box, but it was a lot of fun. https://t.co/vibNiE8lZh via @hackthebox_eu

[theGingerbreadMan @aidan_gbm]

Control retired on @hackthebox_eu yesterday, and somehow I forgot to publish my writeup but here it is now. Great Windows box for learning about services and Powershell, and my first ever hard box on #HTB!
https://t.co/XobshImqV9

[theGingerbreadMan @aidan_gbm]

Mango just retired from @hackthebox_eu. It was a great box for trying NoSQL injections and practicing my scripting! https://t.co/oszCZQwxNK

[theGingerbreadMan @aidan_gbm]

Just owned system on Cascade! Lots of depth with this box, one of my favorites for sure! https://t.co/vibNiE8lZh via @hackthebox_eu

[theGingerbreadMan @aidan_gbm]

Just owned system on ServMon! Tried to get a blood for the first time today and came close with user, the box had some connectivity issues but fundamentally it was pretty fun. @hackthebox_eu

[theGingerbreadMan @aidan_gbm]

Just owned system on Sauna! This was a relatively easy but fun one to play around with new forms of authentication. https://t.co/vibNiDQKAH via @hackthebox_eu