Steve Breen

[Steve Breen @breenmachine]

@execveat The original Potato vulnerability for local privilege escalation actually worked for quite a while before it got fixed! It was mostly just the implementation of some of @tiraniddo's research that had been marked "WontFix" by MS.

[Steve Breen @breenmachine]

@shortxstack Is that graphic available anywhere? It's really cool.

[Steve Breen @breenmachine]

@tqbf It's a bit older but this book is worth a read on the subject https://t.co/4z6r8UH1kK

[Steve Breen @breenmachine]

@steventseeley I also noticed "paste-from-file" with some binary files was breaking recently. Had to use curl.

[Andrea P @decoder_it]

Just uploaded the pdf slides of my talk "whoami /priv" @hackinparis #HIP19 https://t.co/G4nsZBXGVN

[0xdeadbeefJERKY ☠️ @0xdeadbeefJERKY]

This paper is *the* resource for abusing tokens on Windows for privilege escalation. I especially appreciate the level of detail @dronesec and @breenmachine go into to explain the token ecosystem, permissions, past attacks, etc. 10/10 would read again.

https://t.co/i5pDwZElsh

[Steve Breen @breenmachine]

Nice!

[Silent Signal @SilentSignalHU]

A small gift from S2anta: @breenmachine showed how to abuse JasperReports for RCE (https://t.co/eiyP760xKf) - now here's a single .JRXML file to achieve the same thing if no .JAR's are allowed:
https://t.co/kVgan1VpAy

[Atredis Partners @Atredis]

Hey so we're stoked to welcome @jstnkndy @breenmachine and @brandonprry from @foxglovesec to the AtrediFam.

We've been calling it "The Hat Trick".

[Andrea P @decoder_it]

I'm releasing with @Giutro Juicy Potato, another Local Privilege Escalation tool from a Windows Service Accounts to SYSTEM by abusing the golden privileges (https://t.co/wk9RKGxMzl)

[Justin Kennedy @jstnkndy]

#UnpopularOpinion conferences should more heavily vet talks and reject those that are subpar because those speakers often get an inflated sense of skill and spread misinformation.

[Steve Breen @breenmachine]

@Rhynorater np, glad it's still useful!

[Andrea P @decoder_it]

Custom version of C++ Rotten Potato along with some observations ;-) https://t.co/5PgJX9tvOP

[James Forshaw @tiraniddo]

@ifsecure uploaded the privilege escalation I wrote (with @halvarflake size coding) for the WPAD blog. https://t.co/3qaabrqOnQ Small footprint and uses RPC libs instead of parsing the RPC traffic like Rotten Potato /cc @breenmachine

[Panos Gkatziroulis 🦄 @ipurple]

#RottenPotatoNG - New version of #RottenPotato as a C++ DLL and standalone C++ binary by @breenmachine https://t.co/ggzMc8EFZb

[Steve Breen @breenmachine]

@jensvoid @foxglovesec I believe you maintain the printer hacking wiki? Great resource, was very useful during this project. If you have any questions or would like to add some of this material to the wiki, I'd be interested in assisting.

[FoxGlove Security @foxglovesec]

HP has released the security bulletin which addresses the vulnerability described in our blogpost https://t.co/FSTwgnuJ80

[Steve Breen @breenmachine]

@cninja321 @foxglovesec @BrotherOffice Ouch, that doesn't sound good.

[FoxGlove Security @foxglovesec]

We think HP should be more concerned with foxes than wolves - "A Sheep in Wolf's Clothing - Finding RCE in HP's Printer Fleet" by @breenmachine - https://t.co/lAABu721Ic

[Bryan Alexander @dronesec]

Abusing delay load DLLs for remote process injection https://t.co/EvAPyIzsje

[FoxGlove Security @foxglovesec]

Dropping @breenmachine and @dronesec latest Windows privilege escalation project - For exploit devs and pentesters - https://t.co/Zi9ntdoPVQ