Gr1nch

Pentester/Researcher -- @Poland Skype: rener.sistemas PGP Key ID: 59949F8E PGP Public Key:

[v1n1v131r4 @v1n1v131r4]

Já adquiriu seu exemplar do Livro OPSEC Inteligência Cibernética na Prática?

https://t.co/Pou2hFA2Xe

[Mr. Cl0wn @MrCl0wnLab]

Nuclei Templates Brazuca ( DISPONÍVEIS )
Conjunto de templates focados em OSINT contexto Brasil.
> https://t.co/FUTKuGFptZ #osint #hacking

[Gr1nch @Gr1nchDC]

CVE:2021-3560
[Privilege Escalation]
Polkit-Privilege-Esclation PoC - By secnigma.
https://t.co/WIVDfkPaTC

Original Post: https://t.co/FNcn9ogzbI

[v1n1v131r4 @v1n1v131r4]

E aí, já conferiu o meu livro #OPSEC Inteligência Cibernética na Prática? Não?!
O livro está disponível na Amazon pra Kindle, aqui: https://t.co/NaEBhUXAYf

E quem quiser a versão física, está disponível no site da editora aqui: https://t.co/prCmd6uVxN

Corre lá e aproveita!

[Gr1nch @Gr1nchDC]

Nuclei Template Generator Burp Plugin

"A BurpSuite plugin intended to help with nuclei template generation."

https://t.co/2iYkI8n7Cr

[Gr1nch @Gr1nchDC]

"Decrypting your own HTTPS traffic with Wireshark"
https://t.co/mVMWZMmjTE

[reverseame @reverseame]

Active Directory Fundamentals (Part 1)- Basic Concepts https://t.co/LjLmBdynXf

[Orange Tsai 🍊 @orange_8361]

Unsafe .Net Deserialization in Windows Event Viewer! This is a by-product of my research. Has confirmed with MSRC that this didn't cross any security boundary, but I guess it could still be another fun #LOLbas or Defender Bypass.😆

[Michael Skelton @codingo_]

Making a DNS bruteforcer that @sml555_ @hakluke and I worked on privately approx 3 years ago public... Code here, if you want to poke early: https://t.co/FvPmUhAKBg .. Still needs some work - will update further before I cover in a video

[Crash @crashbrz]

Boa tarde pessoal! Pra quem ainda não conferiu, segue a palestra do Rodrigo Dumaresq no canal da BHack Conference no YouTube. https://t.co/7n1brnNYA0

#letshack https://t.co/sG232E1z0i

[Adrian Denkiewicz @a_denkiewicz]

I wrote down some thoughts on bypassing #EDR with syscalls, and shared my super small patch for #SysWhispers2 to evade Defender detection:

https://t.co/efwAfD9ckO

[☣ KitPloit - Hacker Tools @KitPloit]

ADReaper - A Fast Enumeration Tool For Windows Active Directory Pentesting Written In Go https://t.co/kuFdh5kiUn #ADReaper #golang #LDAP

[The Tor Project @torproject]

ProntonMail has had a .onion site since 2017, but today they are rolling out new experiences for Tor users... including the ability to sign up for your Proton account directly on their .onion site! Read about all the improvements for Tor users here ⤵️
https://t.co/LDgoqMZQ7u

[Sunjoo Park @grigoritchy]

I don't know what is a CVE number for my spooler EoP 0-day that i discovered last year. Anyway It was patched by microsoft tuesday patch, So I'm sharing this PoC one of the bug that listed on the screenshot for spooler EoP here: https://t.co/51k1A3SUW7

[Chris Thompson @_Mayyhem]

Check out my new post about coercing NTLM authentication from the local admin accounts used by SCCM servers, how to prevent it, and the release of SharpSCCM, a C# tool that can be used to demonstrate the impact of these techniques: https://t.co/y4ieWKEtXM

[Gr1nch @Gr1nchDC]

[REDTEAM]
"ScheduleRunner - A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation" by @netero_1010 - https://t.co/chct3jrAoR

[Maxime Villard @m00nbsd]

Kernel RCE in #FreeBSD via WiFi frames: https://t.co/GCw2f9HdV5

Also affects #pfSense / #OPNsense / etc

[Hack The Box @hackthebox_eu]

Caption this 👇

[Gr1nch @Gr1nchDC]

[ For Students ]
"vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios in the means of Exercises."
Download: https://t.co/HfQS0eQECy
Writeup: https://t.co/szCcJLX29M

[Gr1nch @Gr1nchDC]

@Bhaskarpal__ You're welcome.... Amazing job man congratz! Love these articles. Keep it up!

[Gr1nch @Gr1nchDC]

Article 5 - "Active Directory - Domain Persistence" by @Bhaskarpal__
"This guide explains Active-Directory Domain Persistence mainly by creating Golden tickets, Silver tickets, Skeleton Keys, DSRM and multiple ACL attacks in detail."
https://t.co/viBaL6PyLg