Liam

🏴

[Lefteris Panos @lefterispan]

Was recently tinkering with DPAPI and CREDHIST and managed to find a way to extract hashes for old passwords and recover them in a new module written for hashcat. Blog -> https://t.co/iX9mn4DdUd

[Lefteris Panos @lefterispan]

Wrote a BOF that is able to execute .NET assemblies in-memory via module stomping so ETW / AMSI are seeing a legitimate GAC assembly instead - https://t.co/IimpD8aZ66

[Iceman @herrmann1001]

The latest Proxmark3 release is called BREAKMEIFYOUCAN!

Not a random name.

That is the actual 3DES factory default key NXP burned into every MIFARE Ultralight C they shipped since 2008.

Somebody finally broke it properly.

The paper drops the keyspace from 2^112 down to 2^28.

Counterfeit cards fall in under 60 seconds from a single card interaction. The tooling is merged: https://t.co/2CYKrRdv22

#Proxmark3 #RFID #NFC #MifareUltralightC #NXP #OpenSource

[trickster0 @trickster012]

Just shared a SharePoint file enumeration tool in C#. We have been using it for a while with quite the success via C2.
https://t.co/7NiiSpLU9D

[🕳 @sekurlsa_pw]

Google research created a dataset with rainbow tables for NetNTLMv1 with the 1122334455667788 challenge.
https://t.co/fLBxwTIY2H
Dataset is available for download at:
▪️https://t.co/mCt6R7y5Pk [Login required]
▪️gs://net-ntlmv1-tables

[Lefteris Panos @lefterispan]

Stumbled across a legacy .NET Remoting service during a red team gig — turned out to be a critical unauth RCE (CVE-2025-5333 - CVSS 9.5) in Broadcom Altiris 😅
Details at https://t.co/1eRcZc5vko

[trickster0 @trickster012]

This is my research project in creating read, write and allocate primitives that can be turned into an injection in order to evade certain telemetry which I presented last year in RedTreat. I hope everyone likes it \m/.
https://t.co/GY37MMfCGl

[LRQA Cyber Labs @LRQA_Cyber_Labs]

🦝 Introducing Raccoon - a C# tool developed by LRQA's @eks_perience for extending the screenshot functionality of Command and Control (C2) frameworks, even capturing minimised windows.

Check it out on GitHub and in our latest Labs article below.

[LRQA Cyber Labs @LRQA_Cyber_Labs]

Today we are releasing TokenCert, a C# tool that will create a network token using a provided certificate via PKINIT, by @lefterispan

This is useful for Red Teams giving make-token functionality with certificates instead of passwords.

https://t.co/TvCLIq87t5

[Lefteris Panos @lefterispan]

Wrote a small C# tool that is able to make a network token using a certificate. Comes handy in RTs ;) https://t.co/XZOfbamxMv

[Lefteris Panos @lefterispan]

Recently discovered an insecure DCOM deserialization on Dell Power Manager <= 3.15.0 and prior, allowing elevation to SYSTEM. The vulnerability was reported to Dell who assigned CVE-2024-39576 - CVSS 8.8. @tiraniddo's work relevant seven years later and many years ahead 🤯

[LRQA Cyber Labs @LRQA_Cyber_Labs]

🚨 CVE-2024-20356: Command Injection in Cisco's CIMC, discovered by LRQA Nettitude's @thackeraaron.

Full technical details and exploit toolkit are included in our latest Labs article below.

#CVE #Cisco #Exploit

https://t.co/xzWJPth7FG

[LRQA Cyber Labs @LRQA_Cyber_Labs]

Introducing SharpConflux, a .NET tool built to facilitate Confluence exploration during Red Team engagements.

Find out more and download SharpConflux in our latest LRQA Nettitude Labs article.

https://t.co/d3AXL4jdhH

[LRQA Cyber Labs @LRQA_Cyber_Labs]

Calling all Red Teamers 🚨

Today we are introducing Tartarus-TpAllocInject, a new OPSEC-safe loader and technique for bypassing EDR solutions, by @trickster012

https://t.co/mEWnIvU3c7

[Marc Smeets @MarcOverIP]

A TLP RED conference for red teamers.

👌 quality content, some of the best red team firms present, and a group sized small enough so you can speak to everybody and discuss your ideas.

This is 🔥af and what we think confs should be like. We need more like this. #redtreat23

[Michael Koczwara @MichalKoczwara]

Hunting Posh C2 🎯

You can fingerprint Threat Actors infra even when they change default certs 🤷‍♂️

Hunting rule 👇

https://t.co/drvTQhHPv6

[LRQA Cyber Labs @LRQA_Cyber_Labs]

Introducing ETWHash!

ETWHash is a new method and tool by @lefterispan for consuming SMB events from Event Tracing for Windows (ETW) and extracting NetNTLMv2 hashes for cracking offline.

https://t.co/wLmsQf71J8

[Lefteris Panos @lefterispan]

Released a small tool that is able to dump crackable hashes from user DPAPI keys https://t.co/KioCIQ4mGg

[Daniel Stewart @pentestdan]

My sister was diagnosed with Breast Cancer early this year.
I’m doing the Three Peaks to help raise funds. Any donations or shares would be REALLY appreciated! #fuckcancer https://t.co/leFzIVbBez