bohops

Red/Purple/Research | Adversary Services @xforce red | ✞

[bohops @bohops]

[Blog] Abusing .NET Core CLR Diagnostic Features (+ CVE-2023-33127)

- Analysis of .NET diagnostic features and tradecraft
- Walkthrough of a .NET Cross-Session Local Priv Esc (LPE)
- Defensive Recommendations

https://t.co/PQutdcfd30

[bohops @bohops]

@magicswordio Looking forward to it!

[MagicSword @magicswordio]

One of LOLBAS founding contributors, Jimmy Bayne (@bohops) joins us for the next PLL Episode. If you’ve ever wondered what’s still executing after you think you’ve locked everything down, he’s the person to ask.

We’re getting into WDAC bypass, the binaries that survive app control, and what attackers are still finding room to work with.

Subscribe here to join: https://t.co/yL7QoxbpP0

[bohops @bohops]

@HackingLZ In a high-energy-demand world, the relevant distinction is not “green” versus “non-renewable.” All usable energy is harnessed energy at this point.

[bohops @bohops]

@CroodSolutions @techspence @merill quick workarounds now cost more later.

[bohops @bohops]

@CroodSolutions @techspence @merill haha all good. I'm always intrigued when I see FreeIPA deployed - that engineer is either very experienced or brave (assuming if they did not inherit an environment).

[bohops @bohops]

@HackingLZ Thank goodness I'm not the only person who has reached this conclusion.

[bohops @bohops]

@Teach2Breach @v3ga_hax @lauriewired @domchell @chompie1337 @_subTee @S1n1st3rSecuri1 @ShitSecure @rvrsh3ll @0xBoku

[K̵i̵r̵k̵ ̵T̵r̵y̵c̵h̵e̵l̵ ☦︎ @Teach2Breach]

more hackers you should follow:
@v3ga_hax
@lauriewired
@domchell
@chompie1337
@_subTee
@S1n1st3rSecuri1
@ShitSecure
@rvrsh3ll
@0xBoku
@bohops

[bohops @bohops]

@discoverscripts @hakluke 🫶

[bohops @bohops]

On the topic of Monster Trucks...

Son: "Dad, Max-D was around in the old days."
Me: "What do you consider the old days, bud?"
Son: "You know, way before I was born, like the early 2000s"
Me: "Ouch"

[bohops @bohops]

Awesome seeing great folks win like this. Congrats @dreadnode team!

[dreadnode @dreadnode]

CrowdStrike has signed a definitive agreement to acquire Dreadnode.

As part of the Falcon platform and @CrowdStrike's Cyber Superintelligence Lab, we'll bring automated AI security testing to every enterprise, so teams can find and fix weaknesses in their models and agents before they reach production.

We've always run Dreadnode like a lab, and now we get to build with one of the largest security companies in the world. This isn't an exit for us. It's a call-up to the big leagues, with more resources and a higher bar.

Thank you to our customers, partners, and community for getting us here. The mission doesn't change: ensure AI strengthens defenders faster than it strengthens their adversaries.

Read the full announcement ⬇️

[bohops @bohops]

@techspence 💯Most of the top notch defenders don't post. they just do.

[bohops @bohops]

“How dare these pleebs think personal computers are for personal use instead of global AI allocation.”

[Valuetainment @valuetainment]

NEW: Sam Altman says it’s “quite terrible” for everyday people to own RAM, arguing it belongs in data centers.

[bohops @bohops]

Happy All Hallows' Eve!

[bohops @bohops]

@AgentRandom_ I hope so

[bohops @bohops]

15 years after Skynet. A front-line resistance hacker and his local AI stack still resisting.

[bohops @bohops]

@SoCalRuss1983 right?

[bohops @bohops]

@HackingLZ Breaking news: hackers could do things!

[bohops @bohops]

@NetworkChuck @WiCiHQ This just seems very inefficient...