Brett Nieman

Red Teamer 🔴
| Social Engineering Guru
| OSCP | OSWP | CISSP | Beer snob 🍻

[Mahak Bhoria @mehakbhoria]

INSTEAD OF WATCHING NETFLIX TONIGHT.

Spend 1 hour with this.

Claude AI FULL COURSE that teaches you how to BUILD and AUTOMATE anything.

The people who watch this tonight will wake up tomorrow with a new skill.

Watch it and Bookmark it now.

[Adam @heyadam_ai]

All Paid Courses (Free for First 4500 People)

𝗣𝗮𝗶𝗱 𝗖𝗼𝘂𝗿𝘀𝗲 𝗙𝗥𝗘𝗘 (PART - 1)
1. Artificial Intelligence
2. Machine Learning
3. Prompt Engineering
4. Claude,Chatgpt,Grok
5. Data Analytics
6. AWS Certified
7. Data Science
8. BIG DATA
9. Python
10. Ethical Hacking

(72 Hours only )

Like + RT + comment ' Drive '

Must Follow me so I can DM you.

[Brett Nieman @brettnieman]

@heyadam_ai Drive

[Brett Nieman @brettnieman]

@chux13786509 Without knowledge of the code, this seems difficult to figure out in a bkackbox scenario.

[DirectoryRanger @DirectoryRanger]

ADCS Cheat Sheet, by @pentest_swissky
https://t.co/Dpa1hcxdC1

[Rasta Mouse @_RastaMouse]

Props to @octopwn and @SkelSec for making the list.
https://t.co/S6aZiQ63c0

[Het Mehta @hetmehtaa]

🔥 𝐀𝐈 𝐑𝐞𝐝 𝐓𝐞𝐚𝐦𝐢𝐧𝐠 𝐏𝐥𝐚𝐲𝐠𝐫𝐨𝐮𝐧𝐝 𝐋𝐚𝐛𝐬 from Microsoft

12 free labs to up-level your hacking skills from the “AI Red Teaming in Practice” Black Hat training, covering:

- Credential exfiltration
- Extracting a secret from the metaprompt
- Indirect prompt injection
- and more!

https://t.co/lo2MOgTDIT

[Brett Nieman @brettnieman]

@thoughtfault @I_AM_1970 Are you working for a 3rd party consulting firm? This was my gripe too and didn't want to get pigeon-holed. After going to in-house teams, that all changed

[Brett Nieman @brettnieman]

@AliK_InDaHouse @offsectraining They specify pentest, i.e. detection doesn't matter.

[Brett Nieman @brettnieman]

What are you excited to be working on right now?

[Brett Nieman @brettnieman]

@HackingLZ Personally, I built my own. This means I get what I want and need out of it, and also, it's brand new, so bypasses basically everything. It's a continuous work in progress, so I add/update as necessary. It's been working great on engagements.

[Brett Nieman @brettnieman]

@Jhaddix It's been working for a lot of companies since a lot of the clients don't actually care about the results and are only seeking a "pentest" for compliance. If that makes the test cheaper, I'm sure the clients are in favor.

[Maxime Meignan @th3m4ks]

How to disable some parts of EDR’s telemetry on Windows 10? Just ask nicely!
See https://t.co/Vxio1trFh4 for more info about an interesting logic bug we found on Win10 that affects all EDRs 😉

[BlackWasp @BlWasp_]

New tool by @Prepouce_ and @hackoura for local privilege escalation on a Windows machine, from a service account to NT SYSTEM. Should work on any recent versions of Windows. Watch out the explanatory blog:
https://t.co/pEl8DjB40O
And the tool : https://t.co/3QkyKD9tjH

[Matt Johansen @mattjay]

🧵: Everything We Know About the MGM and Caesar's Hacks

The Big Picture: Both casinos faced significant cyberattacks due to phishing employees' Okta accounts.

[Brett Nieman @brettnieman]

@technick There was, unfortunately, a LOT of stupid and immature stuff at DEFCON this year. I'm assuming it will only get worse.

[Mor Davidovich @dec0ne]

Excited to share my new research: a POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local/remote processes.

https://t.co/SgMXv3dg9L

An accompanying blog post with more details:
https://t.co/vHmdDtUkZp

[JS0N Haddix @Jhaddix]

🍎 A macOS Red Team thread: 🧵

🕵️‍♂️Been reading more about macOS c2 and implants, found a few talks interesting:

🔴 Red Teaming macOS Environments with Hermes the Swift Messenger by @slyd0g

(SWIFT Implant that works with Mythic)

📺 https://t.co/tdfjz3Hq59

🧵 1/x

[Coin Trades @coin_trades]

Like and R/T if you ❤ $ALGO

[Brett Nieman @brettnieman]

Useful collection

https://t.co/dgvm0ZLoS5