Hexninja 🇮🇳🇬🇧

Security Researcher | Future Red Teamer ;)

[Hexninja 🇮🇳🇬🇧 @hexachordanu]

@inn0c3ntd3v1L @FaberIndia So what? We don’t care. Don’t tag us!

[Hexninja 🇮🇳🇬🇧 @hexachordanu]

@inn0c3ntd3v1L @Hopcharge @Tataev Sorry, the offer is available to new users only🤣🤣

[Hexninja 🇮🇳🇬🇧 @hexachordanu]

@OctopusEnergy Worth mentioning the octopus customer support Conner has been very helpful in resolving this, the issue was from the Tesla side and they fixed it based on the RCA given by Octopus. Very happy! Kudos 🤘🏽 @OctopusEnergy

[Hexninja 🇮🇳🇬🇧 @hexachordanu]

⁦@OctopusEnergy⁩ I am so frustrated with this. Unable to onboard my Tesla even after granting the permissions required by the app. I have also sent you email but still no response.

[Hexninja 🇮🇳🇬🇧 @hexachordanu]

@OctopusEnergy @OctopusEnergy your reply doesnt help, can you look into it?

[Hexninja 🇮🇳🇬🇧 @hexachordanu]

@OctopusEnergy Sent you the details, waiting for an answer in my dm !

[Hexninja 🇮🇳🇬🇧 @hexachordanu]

@BladeRNR2O49 She was taking time to read the teleprompter

[Hexninja 🇮🇳🇬🇧 @hexachordanu]

@ashu048 She was reading from the teleprompter 😃

[Hexninja 🇮🇳🇬🇧 @hexachordanu]

@ApplesUpdate @saxboatsec @grok is this true?

[Tavis Ormandy @taviso]

You can now jailbreak your AMD CPU! 🔥We've just released a full microcode toolchain, with source code and tutorials. https://t.co/4NYerRuFo1

[Tavis Ormandy @taviso]

This strange tweet got >25k retweets. The author sounds confident, and he uses lots of hex and jargon. There are red flags though... like what's up with the DEI stuff, and who says "stack trace dump"? Let's take a closer look... 🧵1/n

[Daniel Bradley @DanielatOCN]

You have just finished remediating your last machine impacted by #crowdStrike #bluescreen, but now you have no idea who can access all the BitLocker keys you just exported! 𝐓𝐢𝐦𝐞 𝐭𝐨 𝐑𝐨𝐭𝐚𝐭𝐞 𝐲𝐨𝐮𝐫 𝐁𝐢𝐭𝐋𝐨𝐜𝐤𝐞𝐫 𝐤𝐞𝐲𝐬!

The full article along with device action reporting options (including getting all devices) > https://t.co/lQZf2b2kah ⚡

Luckily for you, if you are using Microsoft Intune and storing your BitLocker keys in Entra, you can use this super simple script to queue a key rotation job on each device. When the device next checks in, the key will be rotated!

I have seen various iterations of this type of thing over the last 24 hours, all seem to use custom app registrations, secret keys and certificates. This is a one-off job you should run in the 𝐝𝐞𝐥𝐞𝐠𝐚𝐭𝐞𝐝 𝐜𝐨𝐧𝐭𝐞𝐱𝐭, please don't necessarily open your org to additional risk! This is something I cover in my book "Microsoft Graph PowerShell for Administrators".

#intune #entra #graph #bsod

[rootsecdev @rootsecdev]

My new blog has arrived. A lot of what is in here mimics APT29 (Midnight Blizzard) Tradecraft. Some good nuggets also on using Evilginx development mode for phishlet development if you don’t want to expose a VPS. Enforcing cloud native in Entra ID? I got you covered with a bypass. Stay tuned for part 2.

Weaponization of Token Theft – A Red Team Perspective

https://t.co/uT9KUyX5z2

[Harsh Jaiswal @rootxharsh]

Here’s a new writeup! I go over attempts trying to find a 0day. It took a few attempts but pwned Apple again and netted total bounties of $40k.

[Rhino Security Labs @RhinoSecurity]

New Pacu module & two-part blog post: Attacking AWS Cognito with Pacu

Part 1: https://t.co/RY5SeOVl4N
Part 2: https://t.co/Z6htnHTbSU

[Adam Chester 🏴‍☠️ @_xpn_]

Waiting for Red Teamers to figure out that this allows dumping keychain items…

[Jean-Michel Besnard @jmbesnard_maz]

Happy to share a new Active Directory audit tool to the cybersecurity community :
AD Miner (aka #Bloodhound on steroids) can help you:
⏩Check more than 40 attack vectors or weaknesses
⏩Uncover most risky control paths
⏩Prioritize and track mitigations efforts
https://t.co/d5j2OWWGSo

AD Miner basically plugs into an already-populated neo4j BH database, runs a series of cypher queries and produces a report where all results are nicely presented with graphs, listing, etc.

Enjoy and feel free to send feedback or to open issues on our github.

[ISRO @isro]

Chandrayaan-3 Mission:
🔍What's new here?

Pragyan rover roams around Shiv Shakti Point in pursuit of lunar secrets at the South Pole 🌗!

[ISRO @isro]

Chandrayaan-3 Mission:
'India🇮🇳,
I reached my destination
and you too!'
: Chandrayaan-3

Chandrayaan-3 has successfully
soft-landed on the moon 🌖!.

Congratulations, India🇮🇳!

#Chandrayaan_3
#Ch3

[Rasta Mouse @_RastaMouse]

I wanted to give the new VS BOF template a go, so I've implemented @tiraniddo's SCMUACBypass into the Elevate Kit. You just need a suitable Kerberos ticket in your cache (from whatever attack chain you like) and it takes care of the LPE for you.