UID 1

HF is the #1 online hacker community.

[UID 1 @HackForumsNet]

@DannyNoonanGolf Better than a putter with a 6 foot handle.

[UID 1 @HackForumsNet]

This is interesting.

Passkeys on Windows getting pwned.

[cr3ghost @cr3ghost]

Three zero-days in Windows 11 and Microsoft Entra ID. Over 20 novel attack techniques against passkeys. Toolkit open sourced. Microsoft declined to fix one of them.

Passkeys were supposed to be unphishable. @MGrafnetter from @SpecterOps just presented Pass-the-Passkey at Black Hat.

Global Admin impersonation from a standard user account. No user interaction. Bypasses phishing-resistant MFA Conditional Access policies. Zero alerts from Defender for Identity or Entra Identity Protection on M365 E5.

Windows Hello passkeys are still vulnerable after the patches because they always send signature counter 0.

Microsoft scored it 6.5 Medium and paid $1,000. The researcher scored it 8.6 High. Their advisory described it as 'could potentially read small portions of heap memory.'

This is the same team behind BloodHound, Certified Pre-Owned (AD CS), Rubeus, Certify, Seatbelt, SharpDPAPI, SharpUp, Ghostwriter, Nemesis, SharpSCCM, and CuddlePhish. They consistently ship research that changes how the industry thinks about Active Directory and identity security.

If you do red teaming, pentesting, identity security, Entra ID, FIDO2, WebAuthn, Windows Hello, phishing-resistant MFA, or detection engineering, this is the most important identity research to drop this year.

Pass-the-Hash for the passwordless era.

https://t.co/zZgx8JP89F

#Infosec #RedTeam #DetectionEngineering

[UID 1 @HackForumsNet]

@Steve_Sailer Every -ism is a PsyOp by the Chosen People.

Zionism
Marxism
Communism
Racism
Sexism
Feminism

It's all about class-warfare and diving people so they are easier to control, manipulate, and conquer.

[UID 1 @HackForumsNet]

@UsedGolfFacts Unplayable golf course.

[UID 1 @HackForumsNet]

@AngloRestore I would want money back they tried to give me that.

[UID 1 @HackForumsNet]

@bluewaterkarma @CensoredHumans It was always a Mossad Operation.

Don't be fooled by the Goy Slop.

Israel wanted this. They made it happen. Were happy to sacrifice a couple thousand lives for their long-term goals.

Gaza is now theirs. Soon Greater Israel.

[UID 1 @HackForumsNet]

@Itsfoss Yes, you run it on servers where you might check files being uploaded to the server and/or mail servers with attachments.

A very popular setup with ClamAV is with your SMTP setup.

[UID 1 @HackForumsNet]

@Arikalabs Because it's local code creating a verification number based on a secret key then plugged into an algorithm. The real important thing is that you clock is right on the device.

[UID 1 @HackForumsNet]

@Anc_Aesthetics Why do Blacks have to always be so threatening?

[UID 1 @HackForumsNet]

@Essex_Patriot It's happening and almost done.

Soon the Monarchy will officially become Muslims and that will end that.

[UID 1 @HackForumsNet]

@Rainmaker1973 I swear the whole Heavy Metal scene was a way to make it okay for men to look like women. Long hair, makeup, and they're even wearing heels.

@grok which member of Kiss were Jewish?

[UID 1 @HackForumsNet]

@BrickCenter_ It's the worst F'n sport on TV. Even worse than cornhole or darts.

Get rid of it.

[UID 1 @HackForumsNet]

@ForePlayPod Am I wrong that she's representing Canada? She's F'n Chinese!

[UID 1 @HackForumsNet]

@Parodyjeffx Glad that Israeli's have something we can trigger.

They got the Left to have TDS.

[UID 1 @HackForumsNet]

@brookportbestF @escapefrommelos What a Marxist you are.

[UID 1 @HackForumsNet]

@johnthenoticer Nuclear energy is supreme. Nothing even compares. It should be the main global power source.

[UID 1 @HackForumsNet]

@HansMahncke Typical low-IQ idiot and anyone that helped this clown get into Cambridge should be removed.

[UID 1 @HackForumsNet]

@KevinaFaga @Mc1789C I have a feeling your parents were awful. I have a feeling it was you that was awful and you still haven't accepted that.

[UID 1 @HackForumsNet]

@KevinaFaga The fact they have to go on Reddit to get coaching is sad. Sheep.

[UID 1 @HackForumsNet]

@Owennfa Your mistake is having insurance.

Cash pay at a Quick Care would have been cheaper.

The $7k is funding insurance executive and administrator salaries.

@grok how much of the healthcare industry is executives and administration vs actual doctors and nurses?