NOODLE

I like to learn about Windows/Active Directory pentesting, Red Team stuff & Maldev enjoyer

[SpecterOps @SpecterOps]

Create a folder called (calc). Shift+Right click « Open PowerShell Window here » and boom you have a command injection.

@podalirius_ found two command injection vulnerabilities in Windows Explorer's context menus, both exploitable since 9 years. https://t.co/LNNTpKeDnJ

[BlackSnufkin @BlackSnufkin42]

shipping v5 of LitterBox after way too many late nights

real EDR in the loop now. drop an agent on your VM, fire payloads at it, alerts land back with full call stacks. Elastic Defend + Fibratus work. new UI + better performance — notes in the release.

https://t.co/NWCd3KIxXh

[DbgMan ^_^ @0XDbgMan]

DrvEye automates kernel driver analysis to uncover IOCTL paths , symbolic, dangerous primitives, and exploitable code paths, then generates PoCs, fuzzers, and rev artifacts auto
and even check if u can download any new drivers
https://t.co/cWGHmOJPgt

[Quentin Texier 🦀 @g0h4n_0]

Async BOF implementation of 'Rubeus monitor' to detect and automatically extract Kerberos TGTs as they appear on a target system by @virtualloc 🔥
https://t.co/vLwWuLyXi7

[Atsika @_atsika]

Recent supply chain attacks have demonstrated that the most valuable targets are developers 🧑‍💻

In this new blog post, I'll walk you through the full setup of a phishing attack 🎣 (ab)using GitHub OAuth App to gain control over an account! Trusted domains, free infrastructure, social engineering tricks, ...

🌐 https://t.co/6zFxAUemy6

P.S: I've updated the blog design ✨, hope you enjoy it

[Noobosaurus R3x 🦖 @NoobosaurusR3x]

Partie 1 en replay sur Youtbe !
@HacktBack et @_Euzebius
Let's gooo !
https://t.co/56xCkf5yfF

[quarkslab @quarkslab]

After @Coiffeur0x90 found 3 LPEs in Intego antivirus for macOS, @kaluche_ had to check the Windows version too.
Spoiler: it was vulnerable.
Here's the full write up of a symlink attack to achieve Local Privilege Escalation👇
https://t.co/5HOygEPoVP

[Kylm @0xKylm]

😁

[Noobosaurus R3x 🦖 @NoobosaurusR3x]

Bon allez, je me lance.
Petit article, sans prétention, sur les IDOR.
https://t.co/UrF1Dvoz8s

Je sais que le sujet est déjà pas mal traité, mais j'ai essayé de regrouper pas mal de tips and tricks. En français, pour permettre aux non-anglophones de pouvoir comprendre :)

[TrainSec Academy - Where pros train pros @TrainSec]

New in the Knowledge Library: Windows system programming in Rust @zodiacon.
windows crate features, unsafe Win32 boundaries, Toolhelp process enumeration, and UTF-16 handling.

https://t.co/vZghAzIPdT

[NOODLE @bragames2]

@vxgiveaways @OSINTindustries plz

[RandoriSec @RandoriSec]

Cette semaine nous avons organisé une formation interne "Android 101" orientée recherche de vulnérabilités.

L'objectif est de présenter le fonctionnement interne d'Android avant de passer à la recherche et l'exploitation de vulnérabilités.

Un grand merci à nos formateurs 🙏

[Moloch @LittleJoeTables]

New Sliver release!

> Improvements to shell you can now manage multiple shells and swap between them!
> Windows PE metadata spoofing
> Improvements to MacOS shellcode loader
> Bug fixes

https://t.co/hQ6wTCKMLd

[Atsika @_atsika]

🥳 ProxyBlob V2 is now available 🎉

As promised, here is the new version of ProxyBlob, boosted with aznet. Az-what 🤔?

This version introduces a new Go module called aznet that allows you to use Azure storage services (not just blobs 😏) as a direct replacement for net.Conn!

🏎️https://t.co/AZDniVnzGY

🌐https://t.co/BkczwWO1xi

Complete documentation is available in the aznet repo to understand how it works 📚

[Rtl Dallas @RtlDallas]

Huginn Project:
Project to generate COFF-format shellcode with API for :
- Indirect syscall API
- Stack Spoofing
- Proxied LoadLibraryA calls

Great for UDRLs, stage0 and OPSEC-conscious shellcode.
https://t.co/tIiSlawD8K

[Vulnotes @vulnotes]

Our new website is live 🎉
Check out https://t.co/1XhBsTS8Gs and let us know what you think:
https://t.co/Vt2UVM1oNY

[Nick VanGilder @nickvangilder]

loot and pillage while you can

[NOODLE @bragames2]

@_Euzebius @nickvangilder Don't need a plan if you are the plan

[Atsika @_atsika]

Even if stealth wasn't the objective, I still wanted to test the next release during my engagement. I must say that I'm very happy with the costs incurred 💸 This is the result of a large number of actions, which led to a massive DCSync with ~ 20k hashes 🎯

[Nicolas Grégoire @Agarri_FR]

Spring is just around the corner, and that's when I offer online training courses on Burp Suite Pro 👨‍🏫 Two sessions are planned (in English and French), and there are still a few spots left in each.

Contact me to get an early-bird discount code! 💰

https://t.co/7ysNLmvJat