good to know: if having write access on the userAccountRestrictions property set of a computer, it does not matter if it is disabled. the property set includes userAccountControl also, so by modifying it we are allowed to reenable the computer account even if it was disabled.🧵👇
@ImposeCost With all things in life, there is a non-zero chance on that. If it's important to you, vote based on what the candidate tells you with their words, I don't see how its more complicated than that.
New blog: Lateral movement and on-prem NT hash dumping with Microsoft Entra Temporary Access Passes.
Some tips and tricks on abusing TAPs for Windows Hello persistence and NT hash recovery over Cloud Kerberos Trust. https://t.co/h3XHjBhwtz
Sad to see the creation of new free M365 dev tenants going away.
Read this post for details: https://t.co/0ICJl8UoA5
If this impacts you please join the Research panel and help shape the future of the M365 dev program.
https://t.co/JkA7CiVnLA
Got a new blog out today co-written with our super talented lead solutions engineer about Linux visibility and logging, check it out!
https://t.co/i9LlVpDZDf
[Blog] Abusing .NET Core CLR Diagnostic Features (+ CVE-2023-33127)
- Analysis of .NET diagnostic features and tradecraft
- Walkthrough of a .NET Cross-Session Local Priv Esc (LPE)
- Defensive Recommendations
https://t.co/PQutdcfd30
@moo_hax and I have been building this together and I'm incredibly stoked to work with him again.
We're already making awesome stuff to share and I think this next chapter will be great.
Let's see what some real hackers can do with AI.
I've approved a new version of https://t.co/nLVZJFKO5m. Thanks to all contributors especially @chudyPB for so many new gadgets!
📃See @chudyPB🤯"130 page" research: https://t.co/afHjboqPlX
📽️Video here: https://t.co/RtiQQjbaLF at @hexacon_fr#AppSec#DotNet#Deserialization
@LeftCoastLeafs Good podcast guys. Trevor, I think (I could be wrong too so no offense intended) you're wrong on this one, I think the return would be underwhelming. We're looking at another 5+ years of darkness if we misstep here. I disagree with these moves. Thanks for the pod!
Due to some very unexpected layoffs at Bishop Fox today, I am now looking for a new career opportunity. I'd appreciate any re-tweets, connections or opportunities you can send my way. Thanks in advance!
We izz back at it again! For the third year in a row the "Windows Instrumentation with Frida" training will be available at #BHUSA (in-person). Grab your 💻, brew some ☕️ and pull up a 🪑
Aug 5-6 - https://t.co/gYVsTCs5KC
Aug 7-8 - https://t.co/JDln9dMmz3