drm

@AlmondOffSec but mostly shilling for #pywerview

[drm @lowercase_drm]

Choose your poison
🦋 https://t.co/xKbJwJzT8m
🐘 https://t.co/KtIiGxzUzZ

(still posting here too)

[drm @lowercase_drm]

HP Probook 440 G5: TPM sniffed on the BIOS flash (SOIC 8)

[drm @lowercase_drm]

Recently sniff a SPI bus for the first time (with and without PIN) on a Lenovo T470. It's quite fun, event with a DSLogic! s/o @en4rab for SPITkey.

[drm @lowercase_drm]

Dell 7450: VMK sniffed on the WSON flash (UC2), clock is 25Mhz. Added to https://t.co/ORc8akJzSM 🫡

[drm @lowercase_drm]

@en4rab @NoobieDog @iiiikarus « Will be available from July 2026 on select HP G2 commercial PC » TPM is not dead yet imo.

[Stu Kennedy @NoobieDog]

https://t.co/gaALOradj2 Continues to grow!

Loads more laptops added to the repo that are extractable!

Dell Lattitude 5430 and 5440!

@lowercase_drm @en4rab

[drm @lowercase_drm]

@iiiikarus @NoobieDog @en4rab PR submitted, thanks for the idea

[drm @lowercase_drm]

Please, be advised that someone is using a forked repo of my KingCastle python script to spread LUA malware. What a time to be alive.

User: Ramdhankola Repo: KingCastle

🌻

[Nightmare Eclipse @ChaoticEclipse0]

Two more zerodays - https://t.co/kUgSQqq0s8

[drm @lowercase_drm]

@SipeedIO Will it be open sourced ?

[drm @lowercase_drm]

Asked Claude to code a small site for the @NoobieDog repo about TPM sniffing. It was a fun exercice (even with a free tier claude account haha).

https://t.co/ORc8akJzSM

[MDSec @MDSecLabs]

In our latest post, researcher @craigsblackie documents attacks against the Dell UEFI firmware that enable DMA attacks against TPM-only bitlockered devices https://t.co/b835C7rlW4

[Almond OffSec @AlmondOffSec]

A private @Burp_Suite Collaborator instance is an essential for pentesting sensitive environments, but managing TLS for it can be a pain. Today we release a Certbot plugin that automates Let’s Encrypt wildcard certificate renewals for private instances.

https://t.co/UTr8aFlDFd

[drm @lowercase_drm]

Based on prior research by @Jonas_B_K, @harmj0y, @PyroTek3, @_dirkjan, @gentilkiwi and prior work from @SAERXCIT and many impacket contributors!

[Almond OffSec @AlmondOffSec]

Are one-way trusts really one way? @lowercase_drm sums up how the TDO password lets you turn a one-way AD forest trust into bidirectional access, and releases a new tool to remotely extract these secrets.

https://t.co/jh9MRAeHk9

[drm @lowercase_drm]

@vendetce No, problem, it's nothing fancy, but it helps (me, at least 🙂)

[drm @lowercase_drm]

I was bored to type the same commands each time I started a new internal pentest. So here comes KingCastle. This script does not perform any attacks, consider it as a cheat sheet, to quickly see low hanging fruits.

https://t.co/tFUZkzYdXC

[drm @lowercase_drm]

@GiliYankovitch 🏅

[drm @lowercase_drm]

The Sword made its way to France 🗡️ @GiliYankovitch

[drm @lowercase_drm]

@andrewdanis Good catch, thanks

[Almond OffSec @AlmondOffSec]

Team member @sigabrt9 was able to bypass Apache FOP Postscript escaping to reach GhostScript engine.

https://t.co/NW441pszsS

[drm @lowercase_drm]

@al3x_n3ff @Defte_ I have just experienced that behavior with a STATUS_PASSWORD_EXPIRED error