CN

CISSP | CISA | CISM | GPEN | PNPT | MEP | RTs ≠ Support | Opinions = Just Mine

[CN @Cybrly]

Really enjoyed this discussion with James Maude on the Adventures of Alice & Bob about my unconventional career path - EMT, LAPD, 9/11 response, Hurricane Sandy, COVID - and how I ended up in offensive security. I also shared one of my most outlandish physical pentest stories that I think many of you will appreciate.

https://t.co/SqRsbrd8vA

[CN @Cybrly]

@NHLFlyers https://t.co/f0ixkFLtpz

[CN @Cybrly]

@coffinxp7 @coffinxp7 When can we expect that article!? Looking forward to it

[CN @Cybrly]

@SkelSec Idk working in both my lab and a prod env.. I'll keep working on it

[CN @Cybrly]

@SkelSec @Cyb3rC3lt Git pull the updates from earlier today

[@Cravaterouge.infosec.exchange @rouge_cravate]

BadSuccessor in python with bloodyAD

Have fun :D

https://t.co/W1gUvo8Ux6

[David Kennedy @Cyb3rC3lt]

Python version of BadSuccessor by Cybrly.

https://t.co/TuB5Cyb78A

[CN @Cybrly]

Christopher Neuwirth Vindicated in Ethics Complaint; Secures $2.25M Settlement from State of New Jersey https://t.co/EfyWVGtc6x

[CN @Cybrly]

@elonmusk Exploring Grok 2 behavior: observed shell command execution and access to system files like `/etc/passwd` and '/etc/shadow'. Is this expected functionality or a potential bug? #Grok2 #BugBounty #VDP

[Black Hills Information Security @BHinfoSecurity]

We said once, and we’ll say it again, DISABLE LLMNR!

Read this blog post on how and why you want to disable LLMNR.

https://t.co/ujteDIbpBR

[Jesse D'Aguanno @0x30n]

Boom!
Windows Hello fingerprint authentication bypassed on top three devices:
- Dell Inspiron
- Lenovo ThinkPad
- Microsoft Surface Pro
Still waiting for recordings from our BlueHat talk to drop, but here's our writeup: https://t.co/GzqqadMdeg
#infosec #security #vulnresearch @blackwinghq

[CN @Cybrly]

@M7moud_mk99 @_Zer0Sec_ https://t.co/1SBXO4HVaI

[CN @Cybrly]

@Dr1tz @_Mayyhem @Tw1sm @topotam77 @_xpn_ @Raiona_ZA Exactly my experience this week

[CN @Cybrly]

@Dr1tz Yea, this one ran for me fine although I wasn't able to deobfuscate the strings in the NAAPolicy.xml I have

[CN @Cybrly]

@Tw1sm @Dr1tz @_Mayyhem @topotam77 @_xpn_ Thank you sir!!

[CN @Cybrly]

@subat0mik Great job! Using the new https://t.co/0ujm9gwIQV --sccm attack, you've got the NAAPolicy.xml off the SCCM server, decrypted and local, but now you're stuck with just the obfuscated creds...advice to get plaintext from here?

[CN @Cybrly]

@_Mayyhem @topotam77 @Tw1sm @_xpn_ Does anyone know of any SCCMwtf policysecretunobfuscate.c alternatives since it doesn't seem to compile?

[Smith Eibeler, LLC @SmithEibelerLLC]

Only 2% of population is on the national registry and a significant # of the 2% cannot be located or will not donate when asked #bethematch

[CN @Cybrly]

@mpgn_x64 @_dirkjan @porchetta_ind Lorsque vous mettez à jour CME à la dernière version via Porchetta, il y a une erreur qui indique qu'il manque le module LDAP Bloodhound.