Chereese Creel

Cybersecurity & Compliance

[Nick Powers @zyn3rgy]

@Tw1sm and I did some Extended Protection for Authentication (EPA) research to enumerate when this protection will prevent your NTLM relay attacks, across multiple protocols.

We are also releasing RelayInformer - python and BOF implementations of these techniques.

🔗🧵

[Matt Creel @Tw1sm]

Nothing new, but formalized some operator notes on Entra ID/Azure tradecraft I've found to be exceptionally useful on ops. Overlooked this myself for quite some time and thought others in the same boat might find it worth a read! 📖

https://t.co/6f3Kb2UhHx

[Matt Creel @Tw1sm]

Worked through the CloudBreach Breaching AWS course and exam over the last two weeks. Didn't see a ton of info out there on it prior to buying the course so wrote a small review with my thoughts
https://t.co/evjXuKDwLR

[Matt Creel @Tw1sm]

New blog up to cover manual AD CS enumeration using ldapsearch and the new release of bofhound 🔍

https://t.co/O4i2lERNfN

[Matt Creel @Tw1sm]

Finally got around to bringing SQLRecon’s SCCM commands over to PySQLRecon. Threw together a brief post with the new update, demonstrating usage with ntlmrelayx for TAKEOVER-1

https://t.co/mf0LCBKVbN

https://t.co/bEUjRJ1emx

[Swissky @pentest_swissky]

SHADOW CREDENTIALS: WORKSTATION TAKEOVER EDITION - Matthew Creel
https://t.co/xyiCpE6HVZ

[Chereese Creel @chereese]

Happiest of birthdays to my best friend, the best husband, dog dad, and to the most amazing person I know!

[Matt Creel @Tw1sm]

Been working to improve my BOF/C dev skills, created some BOFs mimicking SQLRecon modules as a fun learning exercise

https://t.co/BMwI2TYzJe

[Andrew Oliveau @AndrewOliveau]

If your a Red Teamer and not looking for this👇your missing out! Got Domain Admin in 3 out of my last 4 engagements using this attack 🔥

AD Tip: Enforce LDAP Signing and Channel Binding to stay protected.

[Matt Creel @Tw1sm]

Took a while, but finally added the ability for BOFHound to parse session data and local group membership data from SA BOFs - details including usage examples in this post
https://t.co/iQLgv2Fdbg

[Chereese Creel @chereese]

@jadasimone_x14 You are killing it you hot mama!!!

[Chereese Creel @chereese]

@jadasimone_x14 Nooo it’s okay!!!! It’s all about balance!!!! Make sure you’re getting the food your body needs, but also the food it wants! Otherwise you’ll never be able to stick with it!!

[Matt Creel @Tw1sm]

New post 👇taking a look at compromising Slack access on both Windows and macOS. New BOF included! https://t.co/4mK0gSTbVH

[Chereese Creel @chereese]

@coffeegist @NinjaParanoid I am CACKLING at the love island reference 😂

[Sprocket Security @SprocketSec]

One of the best password sprayers: spraycharles

- Target EWS & NTLM over HTTP endpoints with ease
- Smart delay periods to avoid account lockouts
- Detects valid logins via response analysis
- Bypass IP-based controls with proxy support

Try it 👇

https://t.co/MrT5eVBERL

[Chereese Creel @chereese]

@rez0__ @Tw1sm

[Chereese Creel @chereese]

@seclilc You a strong azzzzz bishhhh!!!!!

[Matt Creel @Tw1sm]

Been playing with SQLRecon by @sanjivkawa to learn more about attacking SQL server - awesome tool in an area I haven’t scrutinized enough on tests for creds/lateral movement

Created a Python port, PySQLRecon, while labbing out the attack scenarios

⏩ https://t.co/bEUjRJ1emx

[Chereese Creel @chereese]

@MalwareMurph Congrats DMurph!!!

[Chereese Creel @chereese]

@dopaminefi3nd_ @DavidAlvesWeb Desk is amazing!!! Uplift (worth the price) - treadmill is just 2 and 1 superfit walking pad on Amazon! I’ve had it for over a year now and haven’t had any issues!!