Prem

[Dhruv Rathee @dhruv_rathee]

I was not arrested or detained, I was KIDNAPPED.

Thank you for your support, here's the full story 👇

[Louis Dion-Marcil @ldionmarcil]

idk why I havent thought of this before, but its very easy to hide those "external sender" warnings that get appended to your emails during phishing campaigns 🤔. Email gateways/FW just add HTML at the start/end of emails, simply add CSS to hide it! #RedTeam

See images:

[Elon Musk @elonmusk]

Why forced isolation is bad https://t.co/c2XCcRSx1C

[Riyaz Walikar @riyazwalikar]

We @appseccouk figured we do our bit for all the #pentesters around, during these times.

Very happy to announce our premier Breaking & Pwning Apps (#AWS #Azure) training course. Free & #Opensource

Docs & Labs here - https://t.co/X4Zip74Uyc

#cloudsecurity #Pentesting #appsec

[@[email protected] @1njection]

I wrote some automation around gophish, evilginx2, and postfix for faster phishing deployment. Looking for feedback and pull requests :D
https://t.co/Oz7A6CJTNa
https://t.co/w6ZmqDp5xY

[Pixis @HackAndDo]

Do you struggle to understand #Kerberos in #ActiveDirectory environment ? This new article may help clarify things by simply explaining how Kerberos works. It is the first of a serie of posts about attacking Active Directory. Stay tuned 🙃
https://t.co/kCL6TdyEI5

[Abdulrahman Alqabandi @Qab]

Writeup on how I made $40,000 breaking the new Chromium Edge using essentially two XSS flaws.

https://t.co/VZ3QGbxDF5

[phish 🐟 @dunderhay]

Good talk on RFID research done on the Gallagher card access control system: https://t.co/ditDFT1HiZ (Matt - Kawaiicon 2019)

[Pawel Rzepa @Rzepsky]

Are you looking for #AWS labs focused on security? If so, then check out the Well Architected Labs - documentation and code in the format of hands-on labs, categorized into levels from 100 to 300. https://t.co/5zGEL0npkL

[PentesterLab @PentesterLab]

And our Black Friday Sale is Live: https://t.co/FuZ7cWKbF5 2*13.37% off on the one year subscription!

[Aditya Gujar @fyoorer]

SAML for pentesters:
Part 1 - https://t.co/hCR0huVUTt
Part 2 - https://t.co/lBvH1gzZnv
Part 3 -https://t.co/QNiSRuMVjb

Common attacks - https://t.co/5epJT5hiZe
Case study - https://t.co/l2fuhI8adC

#SAML #BugBounty

[Chris Achard @chrisachard]

Confused by DNS Records? A, CNAME, ALIAS...

Me too 😬

Let's change that! (cheatsheet at the end)

🔥 DNS Record crash course for web developers 👇

[Sølst1c3 @s0lst1c3]

Today I’m kicking off a 4-part series on wireless tradecraft following the past few months of #eaphammer R&D. Pt 1 provides a primer on 802.11 with a focus on features that can be abused by attackers. @specterops

Post: https://t.co/m0lVkpxisf

Tool: https://t.co/uJp4ixalYR

[RIVER @wugeej]

How to bypass Android certificate pinning and intercept SSL traffic

1. install the Burp Suite CA certificate
2. install Frida framework
3. install ADB & Fastboot on Ubuntu systems
4. connection over the network
5. select any installed Android app

https://t.co/BLi9DCkPAO

[Metasploit Project @metasploit]

Today we released a community-developed exploit module PR for #BlueKeep (CVE-2019-0708). We expect to continue refining the exploit over time in collaboration with contributors. Some important notes on exploitation and detection from @busterbcook: https://t.co/1y4TodHDc0

[Phil Venables @philvenables]

Vulnerability Management. A thread.

I don’t see much written on vulnerability management in more holistic terms vs. patch/bug fixing. This might be ok given a lot of vuln. mgmt. should be contextualized into enterprise risk/control. But still worth a short thread.......

1/13

[Ohm-I (Oh My) @mcohmi]

TV shows gotta stop hacking things.

This is way too much. 😂😂😂

[Deadlift_Douche @Deadlift_Douche]

#BloodHound #protip Find unsupported (and potentially vulnerable) Windows OS using this cypher query

MATCH (H:Computer) WHERE H.operatingsystem =~ '(?i).*(2000|2003|2008|xp|vista|me).*' RETURN H

[kúp @s0uthwes]

Save SHSH2 tickets for all devices now. Do not be lazy, make life easier.

futurerestore is supporting latest firmware and devices for now.