Arale61

AppSec, Security enthusiast and Software Architect.

HTB Profile:

[N7WEra @N7WEra]

I have put together a list of publicly known IOC for impacket. Thanks to @Octoberfest73 and others on the awesome research.

https://t.co/DuHAnOnjLH

[Óscar Alfonso Díaz @OscarAkaElvis]

I'm glad to announce that my collaboration on CWP certification, where I've personally contributed to the content. If you're interested in learning how to conduct a professional WiFi audit at an affordable price, this is for you:
https://t.co/TEZdari4hS

#wifi #certification #cwp

[Arale61 @arale61]

This is an experimental function we've added to assist you, as a time saver, knowing what you're doing.
Best results come from better trained models, but, with standard LLM's you already get some good results.
Use simple prompts, [k]eep, adapt then execute.
Give it a try+feedbk

[Óscar Alfonso Díaz @OscarAkaElvis]

Fresh meat! We've created a new Evil-WinRM branch with integrated multiple AI LLM support. New docker image, new gem (gem install evil-winrm-ai) and new possibilities

Check it out and let us know what you think
https://t.co/BgRn1z7vi0

Happy hacking
#evilwinrm #hacking #llm #ai

[Óscar Alfonso Díaz @OscarAkaElvis]

Fresh meat! We've created a new Evil-WinRM branch with integrated multiple AI LLM support. New docker image, new gem (gem install evil-winrm-ai) and new possibilities

Check it out and let us know what you think
https://t.co/BgRn1z7vi0

Happy hacking
#evilwinrm #hacking #llm #ai

[Luis Vacas de Santos @CyberVaca_]

Fresh meat! We've created a new Evil-WinRM branch with integrated multiple AI LLM support. New docker image, new gem (gem install evil-winrm-ai) and new possibilities

Check it out and let us know what you think
https://t.co/hyXBwP5lBp

Happy hacking
#evilwinrm #hacking #llm #ai

[Óscar Alfonso Díaz @OscarAkaElvis]

Today, I pushed the Ruby gem of the new v3.6 evil-winrm release:

https://t.co/RWxTM1qNOQ

"gem install evil-winrm" to update it. Interesting new features like user-agent control and ETW bypass among other stuff. Hack the planet!

#hacking #evilwinrm #winrm #pentesting

[Luis Vacas de Santos @CyberVaca_]

🚀The release of Evil-WinRM version 3.6 is here madafaca ! 🔥

- AMSI bypass refactor ⚙️
- Added ETW bypass 🛡️
- Fixed Donut-Loader feature 🛠️
- Customizable user-agent using the legitimate Windows default one 📋

#EvilWinRM #Version36 #AMSIBypass #ETWBypass #RedTeam #Pentesting"

[ATTL4S @DaniLJ94]

Releasing a complete rewrite of "Understanding Windows Lateral Movements"

- 71 more slides
- Better explanations
- Less errors and bad assumptions

If you liked the 2019 version, you should check this one out

Available at https://t.co/7Rk15VuyBo

[Arale61 @arale61]

@OscarAkaElvis @theluemmel There's no price for that amazing long nights! 😉
We all work hard to make it happen!
🙌🙌🙌🙌

[Six2dez 🇵🇸 @Six2dez1]

Web UI you said? Nothing more to say #micdrop

#reconftw new release, highlights over here ⬇️

Just a big shoutout to the devs of new additions like @n0kovo @hakluke @lc @r0oth3x49 and the web UI creator master @lur1el1

#bugbounty #hacking #recon

[Óscar Alfonso Díaz @OscarAkaElvis]

Evil-WinRM v3.5 released! a complete refactor on upload/download functions to make them work like a charm, allowing relative/absolute paths and wildcards. Docker supports remote path completion and more improvements!
https://t.co/PEwvSTxt8p

#evilwinrm #winrm #hacking #pentesting

[Sergio Pereira @SergioRocks]

I'm describing below 10 use cases where ChatGPT will make your work easier and/or better as a Software Engineer.

You can steal the prompts and use them in you day-to-day work.

Happy coding👇

[dennisbabkin @dennisbabkin]

So You Want to Code-Sign Windows Kernel Drivers? - How to get a certificate, and the process of code-signing Windows kernel drivers. https://t.co/XzMc2q7Pao

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

Always fabulous to see editors low the Windows Security level

When Citrix SSO is enabled... passwords are stored in *user processes* (in addition to system ones)

Ho yeah, *even if you have Credential Guard*
Yeah, that's what Citrix is calling "SSO"

> Will be in #mimikatz 3 🥝

[Andy Robbins @_wald0]

Tiered Administration is among the strongest security controls that exist.

But the vast majority of organizations do not use it.

Here is how you can get started using Tiered Administration TODAY in your #Azure environments: 🧵

[Kurosh Dabbagh @_Kudaes_]

The race condition in Seclogon described by @splinter_code in https://t.co/82593wCb52 has been finally pushed into Dumpy along with several code improvements.
Just set the option "force" to ensure the pressence in the system of an open handle to lsass ;)
https://t.co/dvope0TAD9

[Florian Hansemann @CyberWarship]

"Bypassing EDR real-time injection detection logic"

#infosec #pentest #redteam
https://t.co/IFxD4Hnl3g

[Florian Hansemann @CyberWarship]

"Process Injection via Component Object Model (COM) IRundown::DoCallback()"

#redteam #pentest #infosec
https://t.co/kg6zBg2CYn

[h-c0n @h_c0n]

📢 Abierto el Call for Papers de la V edición de h-c0n, la con de @hackplayers que tendrá lugar en @LaNaveMadrid los próximos 24 y 25 de febrero de 2023. Deja tu propuesta aquí 🗣️
- Español: https://t.co/xYzKXKTKMt
- English: https://t.co/rW6Sl5geSZ
¡Prepárate para #hc0n2023! 🏴‍☠️

[X-C3LL @TheXC3LL]

I created a crappy PoC to resolve dynamically SSNs for syscalling in VBA using @elephantse4l approach (FreshyCalls-style). https://t.co/mFpQETxdUx