dracosec

[sn🥶vvcr💥sh @snovvcrash]

Yo, ho, was doing a bit of pentesting today. Inspired by @ippsec I shall give you my short story of 3 different paths to DA in 5 hours of work (hot pics are inside). Enjoy!

[AMIT KUMAR @ikamitkumar]

NTLM relaying password for gMSA
https://t.co/9KFob2rXV0

[NoLimitSecu @nolimitsecu]

#Podcast #Cybersécurité

Épisode #258 consacré à WMI, avec @_dracu_

https://t.co/cfNDC1SgbK

[Hervé Schauer @Herve_Schauer]

Exemple d’attaque à #SigSegv2 par Andrei Dumitrescu via #WMI par latéralisation via uniquement #DCOM TCP/135 https://t.co/a0P3O69ysR #RTFM @sigsegv_event

[Mathis Hammel-Brylinski @MathisHammel]

Google dorks to find DNA databases by @nono2357 at #SIGSEGv2

[Pixis @HackAndDo]

Pour le week-end, voici un nouvel article présentant une technique pour lire le contenu d'un dump de lsass **à distance**, évitant ainsi la détection des AV (#mimikatz) et le téléchargement de dumps volumineux (80-150Mo).
Bon week-end ! 🙃
https://t.co/ousCuq8wU5

[noraj @noraj_rawsec]

Andrei Dumitrescu (@_dracu_) from @OrangeCyberdef will talk about "WMI Attacks" during #SigSegV2

[dracosec @dracosec_]

The #WMI #Shell project - proof-of-concept of a WMI-only remote access to a #Windows machine (so no need for open SMB ports) is archived here:
https://t.co/g97RPrURdZ

[Jake Williams @MalwareJake]

RouterSploit: The Metasploit For Routers! - PenTestIT - https://t.co/DBvkkcEiOj

[Scott Sutherland @_nullbind]

[BLOG] Exploring WMI Classes, Properties, and Methods by @0xbadjuju - good stuff! https://t.co/EwwQInpGWz

[Matthew Green @matthew_d_green]

Brickerbots are probably the best thing anyone ever invented. Kill the IoT before it kills us. https://t.co/UHxeN8iGgN

[dracosec @dracosec_]

nice to see my research is "weaponized" haha: https://t.co/u3mYYI5KrA #WMI #Shell #Windows

[Khalil @sehnaoui]

I will so miss Leonard Cohen.
You earned your place in the Tower Of Song. Rest in peace.
#LeonardCohen
https://t.co/xbAVaT3OA4

[WithSecure Labs @FSecureLabs]

Create arch independent malicious documents and templates and bypass security software with wePWNise https://t.co/tNftcOjJzQ

[CoinDesk @CoinDesk]

Report: Russian Government to Abandon Penalties for Bitcoin Use https://t.co/9XAMuTpckB

[Fiora @FioraAeterna]

protip: if you don't give people a way to report vulnerabilities, they'll report them on pastebin (Teamspeak 3 RCE) https://t.co/6gG7eCKIQb

[Jerry Gamblin @JGamblin]

7 years of Defcon CTF challenges on one VM for download: https://t.co/vqkGl4bXaB

[hackaday @hackaday]

Editor Wars: The Revenge of Vim https://t.co/oKHhRqg1Z8

[Peerlyst @Peerlyst]

"All #HITBGSEC #Singapore #CommSec talks for 25th and 26th August have been published!" by @l33tdawg on @Peerlyst https://t.co/X9wUuMYimP

[@[email protected] @pathetiq]

.@defcon BurpSmartBuster #demolabs done. Code here: https://t.co/b63agEHqWa

Great time thanks all!