kinako

🇯🇵Redteam Operator @FujitsuOfficial / OSEE, OSCE3

[kinako @kinako_software]

The day has finally come to leave Poland.

I’m truly grateful, and incredibly proud, that my very first conference talk was at @x33fcon.

Thank you for the unforgettable memories. I hope to be back again someday😎

#x33fcon

[Entrypoint @Entrypoint_fr]

Sync different: reverse engineering & weaponizing edge sync for advanced red teaming by @TEMP43487580
Full abstract at : https://t.co/h0rPMG3DYP

[Abdul Mhanni @abdo_mhanni]

You can now coerce HTTP authentication from Windows targets that are running MS-RPRN, using impacket with PR #2361!

The PR added a new opnum from the MS-RPRN spec, OPNUM 88 and an example script to make the process straight forward. Letting you now coerce and relay HTTP authentication from remote machine targets

Shoutout to sudonoodle for the BOF that inspired this and for the technique(at least I think it was them who found it) :3

[kinako @kinako_software]

Amazing research by cirosec.

I was already familiar with some of the techniques covered in this article, but they uncovered so much more. Really impressive work…

https://t.co/PNZytTinHD

[RedTeam Pentesting @RedTeamPT]

🦛🦛🦛Microsoft patched PetitPotam this October: EFSR now only resolves local paths. This means WebDAV to LDAP Coercion is fixed!

Remaining methods for clients are WSP (coercing SMB) and PrinterBug (coercing RPC), but both cannot be relayed to LDAP 💀💀💀

[kinako @kinako_software]

@abdo_mhanni Thanks Abdul, setting up a test VM and writing the whole report is such a pain...
I’m really hoping this isn’t a duplicate 😂

[kinako @kinako_software]

I've finished reporting the exploitable bug with SYSTEM privileges that I found last night.
Now my weekend can finally begin…😅

[kinako @kinako_software]

@ghost1nwires I hope you enjoy our presentation🙂

[kinako @kinako_software]

@abdo_mhanni

[kinako @kinako_software]

I discovered two logic bugs that could potentially lead to LPE, but exploiting them will require me to learn a lot more...

Fingers crossed! 🤞

[kinako @kinako_software]

@abdo_mhanni Congratulations!!

I thought we were about the same age, but you're actually quite young😂
You're incredibly talented!!😆

[kinako @kinako_software]

😂

[kinako @kinako_software]

Had steak with some friends 😋

[Ruslan Sayfiev @cryptopeg]

今まで基本的に招待で登壇させていただいていたのですが、今年初めてCFPを出してみようと思い、とても嬉しいことにCODE BLUE 2026に採択されました。多くの場合、十分にリスクとして認識されていない、長年使ってきたテクニック—端末侵害後の活動の一部でもある「信頼の移植（Pass-the-Device）」についてお話しできればと思います。ペンテスト／Red Teamの方々には永続化や攻撃範囲を広げるネタとして、防御側の方々にはリスクの認知と対策・監視の観点で知ってもらいたいです。
#codeblue_jp #codeblue2026

https://t.co/y8VHlwyY5z

[Abdul Mhanni @abdo_mhanni]

Im incredibly proud, and honestly lost for words, to share that I have been granted the @Microsoft MVP award for the Security and Cloud & Datacenter management categories 🥳

The journey, the learning, the community building and experiences that lead to this moment have no doubt contributed to greatly making me who I am today. And for all of you that have been a part of that, I thank you all from the bottom of my heart.

[kinako @kinako_software]

@mrgretzky I’ll keep pushing myself every day, chasing after you with the dream that someday I might catch up😆

And please come visit Japan again sometime! Poland🇵🇱 absolutely blew me away when I was there for x33fcon. Such a beautiful country!!

[kinako @kinako_software]

ついに30歳になってしまいました笑

7年前、curlコマンドの使い方も分からず人に質問していた頃を、今でも昨日のことのように思い出します😂

そんな私が今や海外カンファレンスで登壇したりと、人生は本当に分かりません!
30代になってもこれまで通りTry harderしていきます…!! https://t.co/SVTyF0FkHg

[Kuba Gretzky @mrgretzky]

My @x33fcon talk about Credential Relay Phishing is finally out!

Watch me struggle through the live Google phishing demo, a day after the pirate ship party, which deprived me of my last few brain cells. 😜

Wrath of demo gods and AI lulz included. 🥳
https://t.co/5M9UwkljZm

[kinako @kinako_software]

@abdo_mhanni Thank you, Abdul!! I’m always inspired by your findings and blog posts.
Wishing you all the best in life too😎

[kinako @kinako_software]

@mrgretzky Thank you, Kuba!
I’ll keep working hard so that one day I can become a hacker like you!

P.S. Yes, Poland was such an amazing country! I’d love to visit again someday!!🇵🇱

[Ruslan Sayfiev @cryptopeg]

Sky社に報告した脆弱性の修正パッチが公開されました！対応が早くて助かります。 対象製品をお使いの環境は早めのパッチ適用を！
https://t.co/u5mFVIiogw
https://t.co/P9jy4eGxOP
国内製品がより強固なものになっていくのは嬉しい〜

[kinako @kinako_software]

なんか添付した画像がリンク切れしてた…
添付してたのはこちらですw↓
(留年してるときにCTFしてた頃のスクショ)