Init1Security

Elevating security with expert offensive strategies

[Init1Security @init1security]

Adrian Novoa a Red Team Operator here at Init1Security, talking about Initial Access in 2026, has presented at LayerOne Security in Pasadena CA.
https://t.co/PiS3KOZPSj
#redteam

[Init1Security @init1security]

@XavierRiveraX Thank you, very solid information we will have to start taking a look onto this!

[Init1Security @init1security]

@domchell There is no nothing wrong with doing this, with MSRC infamy of blaming researchers and not even awarding them with reputation or even financially I see no moral ethics being crossed with researchers, consulting agencies holding onto 0days for engagements/ business related jobs.

[Init1Security @init1security]

@LeighGi66657535 I don’t doubt it. It’s been a great method for us.

[Init1Security @init1security]

@mqst_ Now this is a great checklist to consider when tackling Linux on CTF or real engagements, HackTricks always has great resources!

[Init1Security @init1security]

@_RastaMouse Exciting news and eager to learn on the latest and greatest for Cobalt Strike!

[Init1Security @init1security]

With VSCode Extensions, old becoming new again, remember the "vsix" file type is a file NOT blocked by email filters. 😉😉

[Adam Chester 🏴‍☠️ @_xpn_]

Everyone losing their minds over the Visual Studio Code payload hitting GitHub. The research was published on @MDSecLabs site in 2023! Red Teams have used this on assessments for ages!! Microsoft knows all of this and didn't bother to fix it!!! IT'S BEEN IN INITIAL-ACCESS FRAMEWORKS FOR YEARS!!!! https://t.co/ifTXR9N7Ur

[Init1Security @init1security]

More true words couldn't have been said, we as offensive security researchers take research to the next level, OPSEC, in-memory techniques, BOFs, stack spoofing, creative injections and payload development, EDR evasion, but sometimes the best answer for APTs is just creativity and social engineering.

[vx-underground @vxunderground]

Get it? The joke is that malware doesn't need kernel mode access to ruin your life. It can be a..

- Steam game
- Video game mod
- E-mail appointment reminder
- VSCode solution
- VSCode plugin
- Windows Office Word File
- PowerPoint presentation
- Microsoft Excel File
- File installation script
- Outdated computer program
- E-mail attachment
- Compromised program installers
- Compromised PyPi's
- Compromised RubyGems
- Compromised npm's
- ISO files
- OneNote notebooks
- CHM help files
- Malicious .reg files
...

BUT DO NOT TRUST AN ANTI CHEAT. IT COULD BE MALWARE

[Init1Security @init1security]

Nothing but fire being released, excited to jump on this new training and try to sharpen my EDR evasion capabilities, but a custom EDR?? That sounds quite interesting approach personally we've worked on custom tools to evade EDR but the approach is mostly blackbox but if we have a custom one to learn in depth, I'm excited and congratulations on the new release!!

[Init1Security @init1security]

@Snow_Wo1f A great technique to be used, especially seeing how Excel has vast options for Initial Access, unfortunately no longer working in Office 365 but we also have to consider not everyone is running the latest and greatest!!. Great blog

[Init1Security @init1security]

@cyber_rekk *Wireless, oops a slip of the fingers

[Init1Security @init1security]

We offer Adversary Simulations and Emulations, Red Team Engagements, Penetration Testing and Witeless Testing, we focus and Azure and Active Directory, currently we are building training dedicated the Offensive/ Red Team capabilities and we try to offer live training in the US and Mexico, we also offer CTF style training currently available we have an Ai CTF that you are welcomed to try, since we are fine-tuning it still:
https://t.co/3bBrZ4pth6

[Init1Security @init1security]

@SenhorZiborro This is a very nice project, is their a GitHub repository or a private tool?

[Init1Security @init1security]

@n7runr IN that jumping moment from Lady Butterfly we recommend the Shuriken get a ton, throw them, easy hits!

[Init1Security @init1security]

@Dinosn @antv I am wondering where is this trend of npm packcages being compromised, I remember it being python and now npm.

[Init1Security @init1security]

@vxunderground Just wondering is the trend become npm packages and why so?

[Init1Security @init1security]

@vxunderground Another game to the list?, I will keep it retro it's not like my Virtual Boy Advanced has malware... 😅