Shaposhnikov Ilya

Information Security Researcher

⚠️I rarely use twitter. Better contact me at telegram or linkedin: @drakylar⚠️

[Shaposhnikov Ilya @drakylar]

AWS penetration testing cheatsheet (large article)

Services->Service1->Role1->Attack1,Attack2

https://t.co/w7zsRFLmat

P.S. In Russian, so you may need to use translator.

#cloud #google #aws #penetrationtesting #pentest #security #itsec

[Shaposhnikov Ilya @drakylar]

Active Directory Penetration Testing (Windows) cheatsheet/hints for newbies:

https://t.co/8JpVVA0rgt

P.S. In Russian, so you may need to use translator.

#security #pentest #redteam #penetrationtesting #windows #activedirectory #itsecurity #ad

[Shaposhnikov Ilya @drakylar]

Constrained Language Mode bypass methods: https://t.co/ZOSoujXm3r

#pentest #amsi #redteam #windows

[Shaposhnikov Ilya @drakylar]

AMSI bypass methods: https://t.co/LrN8I4zVtE

#pentest #amsi #redteam #windows

[Shaposhnikov Ilya @drakylar]

Some people tried to contact me about CVE-2022-34747 Zyxel NAS326 vulerability at twitter - its better to contact me at telegram: @drakylar

[Shaposhnikov Ilya @drakylar]

@VictorStinner @gvanrossum @brettsky @llanga Created a topic at forum (but it was banned as a spam :)

https://t.co/jSA0bsmkso

[Shaposhnikov Ilya @drakylar]

@gvanrossum @brettsky @VictorStinner @llanga I found a security vulnerability into latest python builds (2.7 & 3.9) but my reply emails to [email protected] were ignored for a month. Can you recheck it, please?

My email: [email protected]

#python #python39 #python27

[Shaposhnikov Ilya @drakylar]

@VictorStinner @gvanrossum @brettsky @llanga I explained about whats wrong with this feature and was ignored. As you later answered me - I will create a public discuss page later.

[Black Hat @BlackHatEvents]

Pentest Collaboration Framework - An opensource, cross-platform and portable toolkit that allows you to exchange information on the penetration testing process. @drakylar will show you how it works at #BHASIA Arsenal: https://t.co/SuMuKGH3gf

[Shaposhnikov Ilya @drakylar]

@w88ugs You can try PCF(Pentest Collaboration Framework) with user-defined template report generation.

[Rawsec @rawsec_cyber]

New tools added to the Inventory:

🚀 Pentest Collaboration Framework made and added by @drakylar
🚀 de4dot made by wtfsck and added by @Jenaye_fr

https://t.co/5X5G460dwV

[Loqpa @loqpa]

Finished reproducing #Proxylogon exploit tonight. What a Journey!

Kudos to @orange_8361 for discovering such a cool bug.

[Shaposhnikov Ilya @drakylar]

Found six 0day vulnerabilities in IQrouter (https://t.co/k8YKMUBUBv) including multiple root RCE without authorization (50 vulnerable parameters).

Full CVEs list: https://t.co/mE5Mk2RNdG

Exploit:

P.S. Also applied for CFP of on…https://t.co/TlFCjB64of https://t.co/ThrA0T6c2y

[Shaposhnikov Ilya @drakylar]

https://t.co/FqPRMKDYPN

[Shaposhnikov Ilya @drakylar]

https://t.co/1KeV3CYJoC

[Shaposhnikov Ilya @drakylar]

Стали победителями в Attack-Defense CTF соревнованиях NSKCTF2018 в составе команды МГТУ им. Баумана SFT0 ! https://t.co/cny90tdBK4

[Shaposhnikov Ilya @drakylar]

Парк Горького. https://t.co/nGBPwzcTPF

[Shaposhnikov Ilya @drakylar]

https://t.co/T4ZJntm2Ed

[Shaposhnikov Ilya @drakylar]

https://t.co/eW70E1JtZo

[Shaposhnikov Ilya @drakylar]

123