greenapple / M.Asato

Nyaffensive Security

[greenapple / M.Asato @greenapple_w]

@wcceb おめでとう！早く物質世界から解放されようね＞＜

[r00tapple @r00tapple]

最近Windows/Mac向けのEDR回避する疑似マルウェアとかBOFとかの研究と開発担当してます🍻
去年ぐらいまでは、PT/Redteamのマネージャメインしてました🍻
技術とマネージメントの両方でおしゃべりできるから、ワイと福岡で握手や😎🍻
今日の18時から募集開始です👋😎🍻
※参加応募時に聞きたいことあれば投げれるようにしてあるのでそれベースに内容とか資料作ります！

🔴GMOイエラエ Pentest Meetup Night in 福岡
⏳2026/07/15(水)　18:00〜21:00🔥

https://t.co/CBB0QZGns1

[Alex Neff @al3x_n3ff]

SMB share enumeration via ACLs with NetExec🔥

NetExec now detects share permissions via ACL enumeration, instead of trying to write a file. In addition, we can now detect if a user has indirect access to the share, e.g. by having ACL write permissions!

Made by @PytelJack🚀

[rootsecdev @rootsecdev]

This morning I have made public an internal repo on relaying available to everyone. I call it the relay bible. I still have a few more additional tweaks and techniques to add in here but for the most part. It's ready. Hope everyone enjoys my reference.

https://t.co/if08LR2Nwv

[とある診断員 @tigerszk]

白石さんのTLPTについての講演スライド。イベント会場で久々に色々お話できて楽しかったです。
自分もTLPTに関しては色々思うところがあるので、この発表が元で、色々な議論の切っ掛けとなると本当に良いですね。

[greenapple / M.Asato @greenapple_w]

シナリオゴール型のペネトレーションテスト… 聞き覚えが

[Tinydile @Tinydile]

[Slides/資料公開] 本日のBSides Tokyo 2026での講演資料です。

TLPT2.0の提案 －「敵を知る」と「自分を知る」の分離
(A Proposal for TLPT 2.0: Decoupling "Knowing the Enemy" from "Knowing Yourself")

https://t.co/KddOdQOrcd

#BSidesTokyo #TLPT #レッドチーム #RedTeam

[greenapple / M.Asato @greenapple_w]

@HaifeiLi @TheEnergyStory @starlabs_sg @streypaws @EXPMON_ @_jsoo_ CVE-2026-34626の報告の際に利用したminimal PoCです。

event.__defineGetter__("type", function(){ return "App"; }); event.__defineGetter__("name", function(){ return "Init"; });
app.beginPriv();

[greenapple / M.Asato @greenapple_w]

AADGraphActivityLogsを出したからMicrosoftは更に廃止を伸ばせる...?

[Fabian Bader @fabian_bader]

In my latest blog "Now You See Me: AADGraphActivityLogs" I explore the newly released Azure AD Graph logs and demonstrate how you can detect tools like ROADtools and AADinternals that rely on this API and have been under the radar for defender so far.

https://t.co/TXlkbsqKHa

[greenapple / M.Asato @greenapple_w]

@white_cat_sh 大阪くるんですね！了解です〜

[Stephen Sims @Steph3nSims]

Join us next Friday, May 8th at 11AM with Elias Bachaalany (@allthingsida) for the next @offby1security stream on, "Automated Reverse Engineering with LibGhidra, GhidraSQL, and AI Agents!

https://t.co/tLrD3qUvEk

[greenapple / M.Asato @greenapple_w]

@_ktwr 企業側のパッチ処理やシステム処理のタイミングで毎回個人に対して認証が発生するか、そうなるとやっぱり企業側が情報を持つってしまうことになりませんか？企業側が本当にデータを持たずに利益活動をするならいいんですけど…

[greenapple / M.Asato @greenapple_w]

0dayの隠し持つの進化系が0dayを埋め込むマン… ←実は誰もがなれる可能性秘めてて難しいね🙄

[greenapple / M.Asato @greenapple_w]

0dayを隠し持つ vs 0dayを大公開

[shubs @infosec_au]

We've just released a high fidelity scanner for CVE-2026-41940 (cPanel/WHM authentication bypass). All public PoCs so far lead to false negatives, and are not reliable. @SLCyberSec's research team's notes on this here: https://t.co/7gik0IY4Cl & tool here: https://t.co/RKoB6WaSQk

[watchTowr @watchtowrcyber]

The Internet is falling down, falling down, falling down

Welcome back to another disaster - this time, an Auth Bypass in cPanel/WHM, tracked as CVE-2026-41940

Enjoy with us..

https://t.co/bOzCPy8iS1

[Mathy Vanhoef @vanhoefm]

Just presented AirSnitch at Black Hat Asia 2026!

The presentation covered how we could often bypass Wi-Fi client isolation in home and professional access points. This was an awesome collaboration with UC Riverside!

The slides and our NDSS'26 paper are linked below ⬇️