KrisB

Penetration Tester | OSEP | eCPPTv2 |constantly learning | my comments are my own and not related to my employer

[MDSec @MDSecLabs]

This week we launched our Offensive Security Accelerator - a fast track training programme for those looking to start their cyber security careers... if you're in the UK and a graduate or looking to pivot in to offensive security, here's how... https://t.co/CZ2463KqW3

[KrisB @krisbowe]

@UK_Daniel_Card Enjoyed it so much I have completed it 3 times. Looking forward to next steps

[KrisB @krisbowe]

@ToddAtLarge_ Felt the same when my FOR508 arrived…shit got real.

[KrisB @krisbowe]

@jonasLyk @sygnia_labs Autocorrected to Samir, apologies I meant Tamir

[KrisB @krisbowe]

@jonasLyk @sygnia_labs Guy or Samir someone need to bring this researcher into your response team for Europe.

[Jonas L @jonasLyk]

The attack also works on physical machines- use a usb to com cable- get one that dont require its driver to download.

It works all the way back to windows xp.

I have no azure account-but I think that the emm driver is auto loaded even in not RE there.
You can then without logging in still dump any process to none encrypted drive.
ps. booting in safe mode dont trigger tpmlock but downgrade lsaiso to just ppl.
pps. without login can also kill ppl process like defender.
3 times it stop starting again.

[Jonas L @jonasLyk]

https://t.co/AeIdwj23cp

[KrisB @krisbowe]

@jonasLyk Thanks for sharing!

[Norbert Tihanyi, PhD @TihanyiNorbert]

🔥 Just dropped a NEW PowerShell reverse shell in the PSSW100AVB repository!

✅ 100% AV bypass (June 2026)
✅ Ready for red team operations
👇Act fast — 2-5 days before this gets flagged too.
https://t.co/7DKdNSvBRv

#Powershell #RedTeam #AVBypass #ReverseShell

[mRr3b00t @UK_Daniel_Card]

👀👀👀👀

[chompie @chompie1337]

This guy sucks. At my first Pwn2Own he asked me over and over if it was my first CVE. I said no but he kept insisting, in front of everyone, he’d never seen my name credited before. Turns out he was confusing me with another woman in infosec. In charge of security research engagement for MSRC btw

[d3d aka dead (dead, мёртв, 死了) @deadvolvo]

I am adding a comic book for each attack I write about... from the victims point of view to go along with the covers I have for each paper. If you want to stop using Github for your novel offensive research, come to MG as an author and I will help you do the same. 😈🤣

[KrisB @krisbowe]

@ThePrimeagen Sandman Slim series by Richard Kadrey

[Rasta Mouse @_RastaMouse]

https://t.co/66vtthyDoR

[Fady Moheb @N1NJ10_]

Concept inspired by @wunderwuzzi23:
https://t.co/LtmqlhXmsZ

Code:
https://t.co/KGrXqMxjoQ

Full Methodology:
https://t.co/sLcybo3YF1

[International Cyber Digest @IntCyberDigest]

❗️🚨 BREAKING: Security researchers are now handing Nightmare-Eclipse vulnerabilities for free, in what looks like both a show of support and a reaction to how Microsoft treats researchers. First up: "Bitskrieg," violates Secure Boot trust and fully bypasses BitLocker.

It seems aimed squarely at Microsoft's recent blog, where the company said its Digital Crimes Unit would bring cases against threat actors "and those that enable their criminal activity," language many researchers read as a threat pointed at them.

[KrisB @krisbowe]

@Gruntpa Project NOMAD?

[cje @caseyjohnellis]

ok, so this talk from @aaronportnoy from @ekoparty is absolutely phenomenal... my neck hurts from nodding

my tldr takeaway: defenders need to start listening *really carefully* to actual, economically rational attackers

the cadence of the OODA loop that we've grown used to over the years is now *way* too tight

https://t.co/KKzjifhQkS

[KrisB @krisbowe]

@elonmusk Why not ASM?