Jarno

Red teamer @ Outflank

[Outflank @OutflankNL]

Your MCP server works fine, but the agent can't find a tool, ignores your constraints, or misses key output. Why?
The client decides what the model sees. We dug into Codex and Claude Code to find out what they truncate, change, or drop entirely. https://t.co/d96KampCIB

[Jarno @jmoosdijk]

Ran the Eindhoven #HalfMarathon last Sunday: 6min off my PR 🥳

[Jarno @jmoosdijk]

If you’re going to BlackHat: don’t miss out on these!

[Stan Hegt @StanHacked]

The Outflank and Cobalt Strike researchers will be hosting 15 minute technical lightning talks at our BlackHat USA booth. ⚡️ There's some really good content in there that you don't want to miss.

📍Booth #4422 (Fortra)
🕒 See attached schedule. Limited spots, so come early!

[Kyle Avery @kyleavery]

there are some cool opportunities for automation with public models (gpt-4.1 in this case)

more on training custom models next thursday

[Yuval Gordon @YuG0rd]

🚀 We just released my research on BadSuccessor - a new unpatched Active Directory privilege escalation vulnerability
It allows compromising any user in AD, it works with the default config, and.. Microsoft currently won't fix it 🤷‍♂️
Read Here - https://t.co/c969sNjQH0

[Jarno @jmoosdijk]

Hi @hotelscomhelp, reaching out publicly since, until now, its impossible to escalate a support case in which collected reward nights were wrongfully expired (evidence was supplied), losing 10+ eligible nights. Is this how you want to treat a loyal customer?

[Jarno @jmoosdijk]

Ever wanted to properly fake device compliance to bypass Azure conditional access policies in your red teaming operation? Now you can, with the latest addition to the OST toolkit: ROADtune!

[Outflank @OutflankNL]

We worked with @_dirkjan to get this as an exclusive into Outflank Security Tooling with a new tool called ROADtune.

ROADtune allows red teamers to:
- bypass CAP by faking device compliance registration
- loot secrets from applications pushed to compliant devices

Cool stuff!

[Outflank @OutflankNL]

🚀 We're hiring a DevOps/Cloud Engineer at Outflank!

Join us to build and manage complex Azure environments that deliver our OST toolkit.

Skills: Kubernetes (AKS), GitOps, IaC, Tekton, Python💻 It's NOT an offensive role!

Based in NL or a time zone-friendly region? Let's chat!

[Outflank @OutflankNL]

Who’s the real #GrimResource? Spoiler: It’s us! 😏

Here's our latest blog on using MSC files for initial access: https://t.co/aQ0Of11pU8

Fun fact: @elastic’s post on this technique came from a sample caught by a blue team, originally used by a red team through our OST offering.

[Jarno @jmoosdijk]

With the name update also comes support for native macOS and Linux implants!

[Outflank @OutflankNL]

OST's Stage1 C2 is now Outflank C2, an optimised, OPSEC focused custom C2 framework with:
•Native implants for Windows, macOS and Linux
•Dynamic code exec
•Proxying support
•Peer-to-peer C2 between all three implants
Get more info at https://t.co/UM2DPDBWqM

[Jarno @jmoosdijk]

@maciej_tomasiak @mycolsapp Same here. Not sure if it’s related to the update or just a service outage

[Outflank @OutflankNL]

It's not *always* about Windows--macOS and Linux #EDRs need attention, too! In our latest blog, @kyleavery explains more about the telemetry sources for these under-discussed #endpoint products>

https://t.co/fxA5s7vKUH

[Outflank @OutflankNL]

Initial access to the max!

We just released a new OST tool, using our research and full weaponisation of an obscure file format.

This file format allows shellcode loading with just a double click and is under less MotW scrutiny than most other popular initial access vectors. 💪

[Jarno @jmoosdijk]

Exactly what I was thinking

[rootsecdev @rootsecdev]

I do not agree with @Microsoft limiting access to the dev program. They could do a better job by vetting access with company email addresses and active licensing subscriptions other than visual studio enterprise. While people can pay for a standalone E5 license, my fear is this will continue to hinder legitimate access to development environments and create security risks when people want to learn cloud or test out initiatives in a non production tenant. I know I wouldn’t be where I am today without this Dev program. @satyanadella

https://t.co/DYRuatcKU3

[Outflank @OutflankNL]

With his ability to stealthily get into houses, Santa is a natural red teamer, which is why he’s giving you the gift of offensive security!

Register now for a free training course on Microsoft Office tradecraft, taught by @StanHacked and @ptrpieter

https://t.co/GlPpKCFD2P

[Outflank @OutflankNL]

Let's explore the intricate dance of virtual to physical memory mapping in BYOVD tooling development! 💻

In @c3c's latest blog we delve into resolving addresses using Superfetch, unlocking control over physical memory.

Dive into the details now 👉
https://t.co/gtlKIVRhSk

[Jarno @jmoosdijk]

Looking forward to deception becoming available: next to planting files and cached creds, it looks like this will allow you to inject decoy info into responses to LDAP queries that are performed on a system, neat!

[Matt Zorich @reprise_99]

Anyone that has followed me knows that I love deception tech, especially deception technology that is easy to deploy and manage. In case you missed it with everything else announced at Ignite, deception rules are available in MDE - https://t.co/xnGlIBGnZF

[Outflank @OutflankNL]

OST is tooling and tradecraft.

Our upcoming Tech DeepDive session is with @_dirkjan. He will share OPSEC tricks and private tradecraft on Azure AD attacks. Super useful when red teaming against Azure.

Such sessions are recorded and available to customers in their OST portal.

[Outflank @OutflankNL]

We’ve pushed “RemotePipeList” on our GitHub and released a blog post. The tools is used to list named pipes of remote systems. Useful for remote reconnaissance.

Blog post here https://t.co/d1JXEIQ0YI
C2 Tool Collection here https://t.co/5gnOFv6MOX

[Marc Smeets @MarcOverIP]

A TLP RED conference for red teamers.

👌 quality content, some of the best red team firms present, and a group sized small enough so you can speak to everybody and discuss your ideas.

This is 🔥af and what we think confs should be like. We need more like this. #redtreat23