Ex Android Dev

Ex android developer, pentester, red teaming enthusiast

[Ex Android Dev @ExAndroidDev]

@vxunderground @mrgretzky Comment

[Ex Android Dev @ExAndroidDev]

@vxunderground @mrd0x @MalDevAcademy Comment

[Ex Android Dev @ExAndroidDev]

@vxunderground @whid_ninja 👀

[Ex Android Dev @ExAndroidDev]

@vxunderground @AlteredSecurity 👀

[The Haag™ @M_haggis]

🚨 If you haven’t tested your Microsoft 365 environment like an APT, the time is now! Introducing msInvader, an adversary simulation tool designed to emulate attack techniques within M365 and Azure environments.

🔑 Key Features:
•Versatile Authentication Simulation: 🔄 Supports multiple OAuth flows to mimic various attack scenarios, including compromised user credentials and service principals.
•Comprehensive Exchange Online Interaction: 📧 Engages with Exchange Online through Graph API, Exchange Web Services (EWS), and the REST API used by the Exchange Online PowerShell module.
•Diverse Technique Simulation: 🎯 Capable of simulating techniques such as reading emails, searching mailboxes, creating rules, and more, providing a thorough assessment of your security posture.

Enhance your detection capabilities by simulating real-world attacks with msInvader. 🛡️

Check it out here:
https://t.co/vekI5hkX3r

[Ex Android Dev @ExAndroidDev]

@vxunderground @cyberwarfarelab 👀

[InfoSect @infosectcbr]

At #Pwn2Own Ireland, our team successfully exploited vulnerabilities in the Lorex 2K Indoor WiFi Camera. Check out our blog for the full technical breakdown: https://t.co/MEFC3BQM85

[Ex Android Dev @ExAndroidDev]

@vxunderground @MalDevAcademy 👀

[vx-underground @vxunderground]

Today James Forshaw (@tiraniddo) did a quick assessment on the new Windows 11 Sudo.exe.

Despite his quick assessment, the blog post is wonderful. It is an excellent read. We recommend it:)

tl;dr fancier ShellExecute 😭

https://t.co/q6gFs6faO2

[Antonio Cocomazzi @splinter_code]

Do you want to start the RemoteRegistry service without Admin privileges?
Just write into the "winreg" named pipe 👇

[Ex Android Dev @ExAndroidDev]

@sertzoff You are welcome. I'm glad it was helpful.

[The Hacker News @TheHackersNews]

🚨 Beware, Mac users! MetaStealer, a new info-stealer #malware, is targeting #macOS. Learn how it's posing as prospective clients to trick victims into launching malicious payloads.

Learn more: https://t.co/hMnvinjgHd

#cybersecurity #hacking

[Last Week in Security (LWiS) @lastweekinfosec]

Zero-click iOS exploits (@citizenlab), in-the-wild Chrome 0day, physical/mobile RE writeup (@elttam), Linux LPE (@SidewayRE), and more! https://t.co/KG7FDnrQdg

[MDSec @MDSecLabs]

In our latest post, @breakfix details how we were able to publish a malicious VSCode extension to the marketplace and leverage it for initial access during a red team https://t.co/mAHpQM2uCp https://t.co/nBzdsCSzrw

[SinSinology @SinSinology]

Here is my #exploit and blog post for the VMWare Aria Operations for Networks which has CVSS 9.8 and targets all the versions from 6.0 to 6.10 (CVE-2023-34039) Apparently VMware forgot to regenerate their SSH keys 🔐

https://t.co/1KHGmBZfs6

[Gabriel Landau @GabrielLandau]

Forget vulnerable drivers - Admin is all you need

Article 👉 https://t.co/dHO0KJ90WH
👇 Demo - enable sound 🔊

[Filip Dragovic @filip_dragovic]

Here is PoC for LPE in Windows Error Reporting Service CVE-2023-36874

https://t.co/sodVtsvBeu

[Daily OSINT @DailyOsint]

If you need to get information on a GitHub account,

You can try GitSint, which allows you to retrieve information on #github through username, email, and organization.

https://t.co/noGTjU5aIn

@norze15

#OSINT #cli #tool #intelligence #infosec #CTI #ThreatIntel #cybersecurity

[Dave W Plummer @davepl1968]

Big news! Someone finally noticed that if you hold down CTRL, the process list in Task Manager conveniently freezes so you can select rows without them jumping around.

I did this so you could sort by CPU and other dynamic columns but then still be able to click stuff...

[LuemmelSec @theluemmel]

Really cool lists for hash cracking I just stumbled upon:
https://t.co/nGsi8sTwkM