Olivier

[YOLOP0wn @YOLOP0wn]

Checkout the new postdump version inclusive indirect syscalls, procexp ppl bypass, and asr bypass !

https://t.co/QKGj7moiUZ

[kmkz @kmkz_security]

It's Xmas time!
Our #Offensive #Security team (COS) released a new version of our #EDR bypass toolset "PostDump" 🔥🔥
Thanks to our teammate @YOLOP0wn for the amazing job and all others for ideas and improvements !
Together we pwn harder 😉
(Including both CME / Lsassy modules)

[Michael J. Kramer @MichaelMOTTCM]

Here is the #sp500 2008 vs. 2022 analog update.. including today.

[DirectoryRanger @DirectoryRanger]

PostDump. tool to perform a memory dump (lsass) using several technics to bypass EDR hooking and lsass protection
https://t.co/SygIbwdFdV

[kmkz @kmkz_security]

Liked our #redteam feedback blog series -> Chapter 3 (the final) is on line!
https://t.co/x0AzT1jhli
-Custom Rasp. Implant to bypass network restriction
-Physical intrusion in DataCenter to access core network
-Simulated #phishing for initial access and more..
Thanks to the team!

[Olivier @Grunch_]

@Vecchi_Paolo @Iglocska @MISPProject Neither do I but I often ends not far away ...

[Olivier @Grunch_]

@MISPProject @Vecchi_Paolo @Iglocska It would be nice to have workers running as systemd services however. It simplify monitoring and journaling. I will try to open a ticket/PR.

[Olivier @Grunch_]

@MISPProject @Vecchi_Paolo @Iglocska It is. And selinux+nginx does not help. I have one instance working with thid setup however.

[Olivier @Grunch_]

@Vecchi_Paolo @Iglocska @MISPProject Because it is not hard enough deploy it via salt management stack. I managed to deploy it properly but it is already broken...

[Olivier @Grunch_]

@Vecchi_Paolo @Iglocska @MISPProject Try installing it on CentOS with nginx instead of Apache and selinux enabled and using systemd services for workers.

[Eldar Zaitov @kyprizel]

Well, we released our plugin which turns #Burp Suite into headless automatic web vulnerability scanner. https://t.co/WHGLhkOQbX #Zeronights

[CIRCL - @[email protected] @circl_lu]

CIRCL training catalogue 2017 published https://t.co/N28a4yHJgv #luxembourg #infosec

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

'From Mimikatz to Kekeo, Passing by New Microsoft Security Technologies'
Slides from my talk @ #bluehatil https://t.co/gM0ldxNBl2

[Nicolas Krassas @Dinosn]

CVE-2016-6187: Exploiting Linux kernel heap off-by-one https://t.co/3IUPIxqRDy

[CIRCL - @[email protected] @circl_lu]

IAEA chief: Nuclear power plant was disrupted by cyber attack https://t.co/4RZpgdZQup

[KT @koczkatamas]

Wow, this is HOT! "Introducing Ponce: One-click symbolic execution"
https://t.co/CyfCa0HBGJ

[John Matherly @achillean]

The person compromising these Ubiquiti devices is kind enough to say how the device was vulnerable :)

[quarkslab @quarkslab]

[BLOG] Xen exploitation part 3: XSA-182, Qubes escape: https://t.co/Ki7xXS7ROE Final notes on finding Xen vm escape and exploitation