bobsecq

[Oliver Lyak @ly4k_]

Today we're publishing new techniques for recovering NTLM hashes from encrypted credentials protected by Windows Defender Credential Guard.

These techniques also work on victims logged on before the server was compromised.

https://t.co/euNIyX2dwW

[OrdinalExport @OrdinalExport]

Releasing a new tool: Orpheus! Bypasses most Kerberoast Detections (including my own). Blog post and video is up at @TrustedSec! Even used @HackingDave's old alias in the demo. https://t.co/qhP8r28s4K #infosec #security #kerberoast

[Florian Hansemann @CyberWarship]

"Coercer: A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods."

#infosec #pentest #redteam
https://t.co/8cV0Wgvnrx

[Mor Davidovich @dec0ne]

Introducing ShadowSpray, it's like password spray but with shadow credentials. More info in the repo.
Huge thanks to @elad_shamir for the amazing technique and to @harmj0y (and others) for the implementation in Rubeus from which a lot of code was taken.

https://t.co/nIsnmaitfw

[Pavel @sadreck]

Ahead of the @44CON talk, I'm releasing Codecepticon into the wild (MIT License). Time to obfuscate your C#, VBA, and PowerShell tools! Clone, Build, and Enjoy!

@AccentureSecure #Accenture #Codecepticon #EDR #AV #Obfuscation

https://t.co/39gMqcbhPF

[Zhenpeng (Leo) Lin @Markak_]

The slides of my presentation @BlackHatEvents is available at https://t.co/LsRhGiX2gC. For another demonstration, I will release a #DirtyCred version exploit of CVE-2022-2588 (an 8 years old bug) here https://t.co/f5iSe5qIND. Stay tuned!

[Andy Robbins @_wald0]

The #BloodHoundEnterprise is proud to announce the release of #BloodHound 4.2: The Azure Refactor!

This is a HUGE release. Get all the details in this blog post: https://t.co/FWJBhWfgur

[Clément Labro @itm4n]

The July 2022 update of Windows 10/11 killed PPLdump 💀😢

Find out how in this blog post...
👉 https://t.co/o0izvkkSm0

[Thomas Roccia 🤘 @fr0gger_]

After a few months of work, we are pleased to announce the new version of Unprotect: your catalog of malware evasion techniques!🤩🧵👇
#unprotectproject #infosec #malware #cybersecurity @DarkCoderSc

https://t.co/rduZMNU7EV

[S4ntiagoP @s4ntiago_p]

New update to nanodump!

You can now force WerFault.exe to dump LSASS for you. Thanks to @asaf_gilboa for the original research.

https://t.co/R2lVXtd3uX

[bobsecq @bobsecq]

Very interesting project for details about anti* (e.g. anti debug, anti forensic) #infosec #redteam https://t.co/8VPAz8cIko

[Kurosh Dabbagh @_Kudaes_]

I've just pushed an small update on Dumpy with some new features:
- x86 support.
- New flag "upload" that allows to send the xored dump through HTTP directly from memory, avoiding to store it on disk.
- New help menu.

https://t.co/dvope0TAD9

[0x0ffset @0x0ff53t]

Great blog by @ShitSecure about LSASS dumping but also some good examples on how to solve some PE loading from memory issues, take a look:
https://t.co/rCLsh5OYnL

[Oddvar Moe @Oddvarmoe]

There is one tool that I use a lot that does not get enough praise 🙏
Ever heard of Hashview? We use that internally at @TrustedSec
Nice graphs as outputs for reports, easy management of jobs, agent based, dynamic wordlists ++
Tool: https://t.co/HT9z0L95wm
Also follow @jarsnah12

[Nicolas Krassas @Dinosn]

CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation

https://t.co/yj2GDmuM6L

[DirectoryRanger @DirectoryRanger]

ADeleg. Active Directory delegation management tool. It allows you to make a detailed inventory of delegations set up so far in a forest, along with their potential issues
https://t.co/sbqcK2mPHW

[rootsecdev @rootsecdev]

Have fun everyone

Certifried: Active Directory Domain Privilege Escalation (CVE-2022–26923)

https://t.co/QZHBOpSK9M

[bobsecq @bobsecq]

New release of ODAT (v5.1.1). A bug fix and new standalone. If you have SSL/TLS connection problems to database, use the last standalone which uses Oracle client 12.2 instead of 11.2. https://t.co/Pc9S7jSzkK

[Grzegorz Tworek @0gtweet]

Did they tell you "This function is included only in Windows XP." at https://t.co/RN9GrnGaz2 ?
They lied :P
Feel free to try it at home: rundll32 keymgr,KRShowKeyMgr

[mr.d0x @mrd0x]

https://t.co/9YRvR6rtP5 updated. Thanks to all the contributors.