Denny Fischer

IT-Security Consultant | Problem Solver | Father | Mastodon: | Bluesky:

[Denny Fischer @df_sec]

From spoofing to tunnelling: New Red Team networking techniques for initial access and evasion

https://t.co/X9LCAthI9f

#infosec #redteam

[Denny Fischer @df_sec]

TaskHound hunts privileged Windows scheduled tasks and exports them for BloodHound attack path analysis.

https://t.co/JaFf8bkrTR

#infosec #pentest #redteam

[Denny Fischer @df_sec]

NetExec Lab is a set of hands-on labs used in the NetExec workshop and CTF to help you mastering NetExec for your next pentest engagement.

https://t.co/QFy1uoxQ5Y

#infosec #pentest

[Denny Fischer @df_sec]

Extracts browser-stored data such as refresh tokens, cookies, saved credentials and more from modern Chromium-based and Gecko-based browsers (Chrome, Microsoft Edge, Firefox, Opera, Opera GX and Vivaldi).

https://t.co/cpUCEEdGVj

#infosec #pentest #redteam

[Denny Fischer @df_sec]

Many cybersecurity myths are outdated and distract from real risks. An open letter calling for practical, evidence-based security advice.

Read more: https://t.co/ITWqxtpb9Y

#infosec

[Denny Fischer @df_sec]

ProfileHound is a tool that enumerates Windows domain user profiles via the C$ share and exports them to BloodHound as a HasUserProfile edge making it easy to see which users have profiles on which hosts.

https://t.co/c10hjrEKUk

#infosec #pentest #redteam

[Denny Fischer @df_sec]

Native Sysmon functionality coming to Windows

https://t.co/tOLcgW0aSR

#infosec #blueteam

[Denny Fischer @df_sec]

"HELP! MY ACCOUNT GOT HACKED!" - Business Email Compromise (BEC) Part 1

https://t.co/xwuLf1bRuy

"The Anatomy of a Business Email Compromise Attack" - Business Email Compromise (BEC) Part 2

https://t.co/QlHgpZjmlt

#infosec #blueteam

[Denny Fischer @df_sec]

Harden Windows Security by @CyberCakeX is an open source PowerShell module (with GUI/CLI/Unattended mode) that documents, automates and hardens Windows security settings based on supported Microsoft mechanisms

https://t.co/7LzP8tflbl

#infosec #blueteam

[Sean Metcalf @PyroTek3]

If you have Active Directory Certificate Services (ADCS) in your environment, run Locksmith now!

In Active Directory Security Assessments, we have found critical security issues in *most* ADCS configurations.

The great thing about Locksmith is that it doesn't just highlight the security issues in your ADCS environment, but also provides the command to remediate it!

If you're a pentester/red teamer, Locksmith is great for you to provide remediation recommendations to your customers.

https://t.co/vvtBeeMLuR

#ActiveDirectorySecurityTip

[Denny Fischer @df_sec]

Prowler by @ProwlerCloud is an open-source security tool that helps assess and enforce security best practices across AWS, Azure, Google Cloud and Kubernetes.

https://t.co/wsXGKkrRAM

#infosec #BlueTeam

[S3cur3Th1sSh1t @ShitSecure]

This is so much! 🔥🔥😎

Found two new Potato triggers just today. Not only Potato but can also be used for LPE as remote auth is done which could be relayed to LDAP without Signing enabled. Or relayed to ADCS for a certificate.

https://t.co/H83AIxtskn

[Denny Fischer @df_sec]

Ransomware Tool Matrix by @BushidoToken: This repository lists tools used by ransomware gangs. Defenders can detect and block these commonly reused tools to stop intrusions.

https://t.co/0BJOmKaVor

#infosec #blueteam

[Denny Fischer @df_sec]

State-of-the-art phishing: MFA bypass by Jaeson Schultz @talossecurity

https://t.co/OwPk1zzsTC

#infosec #blueteam

[Denny Fischer @df_sec]

ArgFuscator is an open-source web app that generates obfuscated command lines for common system tools. Great for testing your defenses against real-world attack techniques.

https://t.co/FfokdhCweh

#infosec #pentest #redteam #blueteam

[Denny Fischer @df_sec]

How well do you protect your privacy?
The Privacy Checkup helps you assess your online surveillance defenses and take steps to protect your data.

https://t.co/RujcfF6TrY (English, Deutsch, Español)

#privacy #infosec

[Denny Fischer @df_sec]

A great read on the exploitation of VMware vulnerabilities - from both attacker and defender perspectives - plus practical recommendations to strengthen your security posture.

Breaking the Virtual Barrier: From Web-Shell to Ransomware

https://t.co/zzTHTPDF57

#infosec #blueteam

[Denny Fischer @df_sec]

Eine kriminelle Organisation hinter mehr als 75.000 Fake-Shops, >1M Bestellungen & >$50M Schaden. Einblick in ihr ausgeklügeltes System & wie sie Käufer täuschen.

#38C3: "Fake-Shops von der Stange: BogusBazaar" mit @kaibiermann und kantorkel.
https://t.co/UsvhSIwKHd

#infosec

[Denny Fischer @df_sec]

Twitter:
"Mastering Sysmon: Deploying, Configuring, and Fine-Tuning" by @dfirinsights
A free mini eBook for #DFIR professionals with practical steps to deploy, fine-tune, and start logging with Sysmon.

https://t.co/J76IWHa7Pj

#infosec #blueteam

[Denny Fischer @df_sec]

Carseat by @0xthirteen is a Python implementation of GhostPack's Seatbelt, a situational awareness tool for analyzing Windows security configurations.

https://t.co/deYuqX7PtZ

#infosec #pentest #redteam