Top Tweets for #RpcFirewall
#NauthNRPC is a tool that can help you enumerate computer / user accounts anonymously in #ActiveDirectory via DsrGetDcNameEx2 RPC calls.
This is not often in most environments, so used could be blocked via #RPCFirewall.
Nice job by @haider_kabibo ๐๐
https://t.co/Jf0Ep0AGb2
My thoughts about CVE-2025-33073, and on how to prevent #NTLM / #Kerberos relay attacks in general using #RPCFirewall & #LDAPFirewall
https://t.co/oV47fgPedH
Excellent writeup by @cybergentix on #WMI #LateralMovement
Didn't mention mitigation via #RPCFirewall, which could be achieved by blocking remote #DCOM operations
https://t.co/BCbhHmFUwE
Yet another RPC #remotecodeexecution.
If patching is not possible, you can always rely on #RPCFirewall to mitigate!
https://t.co/S0jyNCvtd2
CVE-2025-29969 is an RPC #RemoteCodeExecution vulnerability, base score 7.5.
Exploits a time-of-check time-of-use & affects Windows vers 2025, 2022, 2019, 2016, 2012 R2, 2012, 2008 R2 SP1, 2008 SP2; Win 11 22H2/23H2/24H2, Win 10 1607/1809/21H2/22H2.
https://t.co/jrd1brZLjs
Did you know that you can block DCOM via the #RPCFirewall?
Make sure you're protected against #RemoteMonologue #NTLM #Coersion !
https://t.co/WGjbhkAM7J
RemoteMonologue - A Windows credential harvesting attack that leverages the Interactive User RunAs key and coerces NTLM authentications via DCOM. Remotely compromise users without moving laterally or touching LSASS.
Hope you enjoy the blog & tool drop ๐ค
https://t.co/ch9WuSP6bm
This one checks a lot of #LateralMovement TTPs. Could have been nicely blocked by #LDAPFirewall & #RPCFirewall + some #NetworkSegmentation
How #blackSuit #ransomware spread from first fake #zoom installer -> d3f@ckloader #IDAT #SectopRAT
https://t.co/nuYNOBicMp
๐New report out today!๐
Fake Zoom Ends in BlackSuit Ransomware
Analysis and reporting completed by @pigerlin, UC1 and @Miixxedup
Audio: Available on Spotify, Apple, YouTube and more!
https://t.co/r9hQxzPTL0
#LDAPNightmare #PoC by @safebreach uses RPC to trigger CLDAP search. Crafted response may #RCE.
Once you achieve MITM (via RPC or otherwise) you could exploit on any windows OS.
#RPCFirewall could mitigate the triggering part :)
@guhe120
@MacmodSec
@oryair1999
@ShahakMo
1/ A DoS exploit demo for CVE-2024-49112 by @safebreach.
RCE exploit is probably coming soon.
Patch!
@TalBeerySec @gentilkiwi @harmj0y @_wald0 While there's no POC yet, it does seem that either #RPCFirewall or #LDAPFirewall (or both) would serve as a mitigation.
We always encourage putting both of our tool in #PreventionEngineering mode to block all unknown / unexpected operations.
https://t.co/8kAADLa4oU
Me and @dekel_paz workshop is now public. Check it out.
All about setting up #LDAPFirewall & #RPCFirewall in #PreventionEngineering mode.
@DEATHCon2024
@DEATHCon2024 weekend is done, with a ton professional, hands-on workshops.
Even if you don't have access to the conference, we wanted to make the workshop available for any #ThreatHunter who wants to try out our #LDAPFirewall & #RPCFirewall
https://t.co/DoEcW5Nq9N
@DEATHCon2024 weekend is done, with a ton professional, hands-on workshops.
Even if you don't have access to the conference, we wanted to make the workshop available for any #ThreatHunter who wants to try out our #LDAPFirewall & #RPCFirewall
https://t.co/DoEcW5Nq9N
Shared a (partial) list of suggested tools to run in the @DEATHCon2024 lab to see #LDAPFirewall & #RPCFirewall in action.
Anything else I need to add ? :)
In this @DEATHCon2024 , @dekel_paz and @SagieDulce will show how #RPCFirewall & #LDAPFirewall capture potentially malicious activities on the DCs.
If you configure our tools right, you're a simple Sentinel query away from detecting (and the next step is stopping) attacks!
Great play @rpargman :).
I've always enjoyed @TheDFIRReport analysis. I also think it would be really interesting to add #RPCFirewall & #LDAPFirewall to their telemetry.
Hope they jump on the idea ๐ค
We're going to have two fun and challenging CTFs at DEATHcon this year: @TheDFIRReport is hosting one of their signature hunting competitions, and @tracebit_com has a cool challenge trying to avoid tripping detection canaries while achieving red team objectives in cloud assets ๐ฅ
Everything is ready to go for @DEATHCon2024!
Join @dekel_paz and @SagieDulce for their workshop: ๐๐ง๐๐ซ๐๐ฃ๐ฉ๐๐ค๐ฃ ๐๐ฃ๐๐๐ฃ๐๐๐ง๐๐ฃ๐ via #LDAPFirewall and #RPCFirewall.
See how to start stopping - instead of just responding (too late) to attacks.
https://t.co/fyQByZYsR5
Another #RPC vulnerability dropped along with a #PoC code.
This #EoP enables attackers to perform #NTLMRelay (against #ADCS or other servers).
#RPCFirewall makes you secure by default! as there is no reason for MS-RRP interface to be open remotely.
https://t.co/gAiXuj3TJK
๐จ ๐ฆ๐ฒฬ๐ฐ๐๐ฟ๐ถ๐๐ฒฬ ๐ฑ๐ฒ ๐น'๐๐ฐ๐๐ถ๐๐ฒ ๐๐ถ๐ฟ๐ฒ๐ฐ๐๐ผ๐ฟ๐ : filtrez les accรจs RPC ๐ฑ๐ฎ๐ป๐ด๐ฒ๐๐ฟ๐ฒ๐๐
avec ๐ฅ๐ฃ๐๐๐ถ๐ฟ๐ฒ๐๐ฎ๐น๐น
๐ Lisez l'article pour en savoir plus : https://t.co/kmi9fKTPvs
#cybersรฉcuritรฉ #ActiveDirectory #RPCFirewall
How #PreventionEngineering is used to stop #ADCS ๐๐๐ซ๐ญ๐ข๐๐ข๐๐ ๐๐ซ๐-๐๐ฐ๐ง๐๐ attacks?
@SagieDulce demos how attacks via #Certify and other tools are mitigated with the #RPCFirewall, #LDAPFirewall and #NetworkSegmentation.
Read more here:
https://t.co/Ye6R3an7hZ
Asking #ChatGPT what is the #RPCFirewall :
"In short, RPC-Firewall helps protect systems from attacks that exploit RPC by giving administrators visibility and control over RPC traffic."
https://t.co/WGjbhkBjXh
Latest ESXi CVE-2024-37085, which was exploited in the wild by various #ransomware groups, can actually be mitigated by #RPCFirewall and #LDAPFireall - even though it is not a @Windows bug.
@ZeroNetworks offers mitigations OOTB :)
CVE-2024-37085 (discovered by @MSFTResearch) was used by #ransomware to access ESXi by creating a group in AD called โESX Adminsโ - and adding users to that group.
Those users will have admin access to ESXi ๐คฏ
https://t.co/ioazJRCLyf
Last Seen Hashtags on Sotwe
Trampling
Seen from Italy
็ท็ธ
Seen from Japan
cockcleaners
Seen from United States
ometv
Seen from United States
momson filter:videos
Seen from United States
ngintip
Seen from Indonesia
็็ฉบ่ข็ชๆฏ
Seen from Germany
taboo
Seen from United States
ู
ุนุตูุชููู_ุฑูุญูุชูู
Seen from Saudi Arabia
เธเธญเธเนเธเนเธเธเธฑเธเนเธขเนเธ
Seen from Thailand
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
240.8M followers
Barack Obama
@barackobama
119.2M followers
Donald J. Trump
@realdonaldtrump
111.7M followers
Cristiano Ronaldo
@cristiano
111.3M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
97.8M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91M followers
KATY PERRY
@katyperry
88M followers
Taylor Swift
@taylorswift13
81.9M followers
Lady Gaga
@ladygaga
73.4M followers
Virat Kohli
@imvkohli
70.5M followers
Kim Kardashian
@kimkardashian
69.9M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
64.1M followers
Neymar Jr
@neymarjr
63.3M followers
The Ellen Show
@theellenshow
62.4M followers
CNN
@cnn
61.9M followers
Selena Gomez
@selenagomez
61.1M followers
X
@x
60.8M followers