hyd3sec

Spider @ SpiderLabs | Appsec Hacker | Offsec Junky | SOF Veteran | Crossfit Bro

[hyd3sec @hyd3sec]

@johnjhacking Thanks bro! Credit also goes to @0xBoku who helped write the original piece!

[hyd3sec @hyd3sec]

@johnjhacking Love this

[hyd3sec @hyd3sec]

@johnjhacking But this has a business justification 😆😆

[Yaniv Nizry @YNizry]

Stay tuned for a blogpost ;)

[hyd3sec @hyd3sec]

@johnjhacking @0xBoku

[Gotham Sharma @GothamJSharma]

CVE-2022-1337: “View Source” affects all known web browsers.

—Description—
When the F12 key is pressed, the browser outputs source code of target website; no patch available, CVSS: 10.

#infosec #cybersecurity #hackers #hacking #hacked #cybercrime #tech

[Bobby Cooke @0xBoku]

I've been developing my own C2 recently and incorporating all the BOFs i've created. Right now its an agent in C/ASM, a python3 Flask REST API (yup, like shad0w😉), and operator commands via curl 😅
Big shoutout to @C5pider @NinjaParanoid @_batsec_!

[Bobby Cooke @0xBoku]

Created my first GUI program thanks to @C5pider! Its pretty terrible right now, but I have big hopes for the future lol

[hyd3sec @hyd3sec]

@johnjhacking @0xBoku Bro what on earth are u talking about! You and @0xBoku are on another level lol

[Bobby Cooke @0xBoku]

Beginners Guide to 0day/CVE AppSec Research blog is up! Walks through finding open-source web apps, environment setup, debugging for vulns, creating a Blind SQL time-based exploit, and publishing to @ExploitDB / MITRE CVE
Shoutout: @hyd3sec @johnjhacking

https://t.co/xfx7AoBk99

[Bobby Cooke @0xBoku]

Azure Outlook Command & Control. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP = Abuse Microsoft Graph API for C2 Operations. Control a compromised Windows Device from your Outlook mailbox.
https://t.co/B1Zc0u2iT4
ShoutOuts too: \1

[hyd3sec @hyd3sec]

Best thing I've heard in my entire offsec career... "Just need a clean result for PCI Audit" is the pentesting equivalent of "Hey man I just need clean pee for this drug screen pls" - @johnjhacking

[Mr.Un1k0d3r @MrUn1k0d3r]

@NinjaParanoid For what it's worth, do it for yourself to learn and improve your skills the reward is much more valuable. It does not matter if there is 100 tools that does it better or already exists. Gaining the knowledge along the way is the true value.

❤

[Bobby Cooke @0xBoku]

Zero to Hero guide for Azure Device Code Phishing for Red Team engagements! Covers everything from creating a malicious Azure phishing infrastructure to achieving Azure Account Take-Over! Secrets to open OWA via Substrate!
Credits: @424f424f @DrAzureAD
https://t.co/3AtIvCjEN5

[hyd3sec @hyd3sec]

Just paid my car off and my credit score dropped 9 points. The logic behind credit scores is hilariously stupid

[hyd3sec @hyd3sec]

A nice tall coffee and a full night of hacking ahead #offsec #bathacks

[Bobby Cooke @0xBoku]

New Cobalt Strike BOF that dumps the Process Environment strings from walking PEB using inline Assembly code!
@TrustedSec did it first ;) , but this one doesn't touch Kernel32.dll or any DLL's :)
https://t.co/iUOomCEwRl

[hyd3sec @hyd3sec]

If you like chocolate milk you'll love this beer

[hyd3sec @hyd3sec]

Them: We don't trust the internet so we can only accept the documents via fax or regular mail. Me: You do realize I'm going to just use an internet service to send you the fax, right? Nobody has fax machines anymore...

[hyd3sec @hyd3sec]

@SecurityTube @nikhil_mitt Thank you to YOU ALL for the awesome content you provide... and at really fair costs.

[Pentester Academy @SecurityTube]

Congratulations to @hyd3sec for clearing our Certified Az Red Team Professional exam! #AzADLab #CARTP #PentesterAcademy cc @nikhil_mitt https://t.co/CbZX0ET7Zp