Mike Brown

[John Hammond @_JohnHammond]

Introducing: https://t.co/FOcfQGdxtg ! 🛜🤖😂

A free prompt injection wargame to troubleshoot your local network with an AI assistant; and a challenge to have it leak some secrets!

Brought to you by @JustHackingHQ, @_ContinuumCon_, @d1gitalandrew Andrew Bellini & Eva Benn.

[Vivek | Cybersecurity @VivekIntel]

Anthropic just open-sourced a reference framework for AI-powered vulnerability discovery and remediation 🤖💀

The workflow:

Recon → Find → Verify → Triage → Report → Patch

Features:
• Threat modeling
• Autonomous vulnerability hunting
• Crash verification
• Finding deduplication
• Exploitability analysis
• AI-generated patches with validation

Built around Claude Code and sandboxed agents using gVisor.

🔗 https://t.co/ZFOtXZPEn8

Interesting signal: AI is moving beyond code generation into autonomous security research and vulnerability management.

#CyberSecurity #AppSec #AI #LLM #VulnerabilityManagement #DevSecOps #ClaudeAI

[kernullist @kernullist]

Cleaned up my old ETW notes from Obsidian and put them into one post.
No new research here.
Just a practical map of the parts I keep coming back to, providers, sessions, kernel loggers, ETWTI, tampering, and detection.

https://t.co/e068LAH8p7

[Andrew @4ndr3w6S]

Round two!

Yesterday was one report, here’s another: an unpatched NTLM coercion via the Windows Search (search-ms://) URI handler.

Same questions about how it got handled. It’s all in the writeup, timeline included.

https://t.co/eMbyEGbx8b

[DirectoryRanger @DirectoryRanger]

Active Directory Hardening Series
Part 1 Disabling NTLMv1 https://t.co/9gla1vtQ18
Part 2 Removing SMBv1 https://t.co/KOqpamarcW
Part 3 Enforcing LDAP Signing https://t.co/oW2Ymvu1ZW
Part 4 Enforcing AES for Kerberos https://t.co/iENjEPBOFD

[incendiumrocks @incendiumrockz]

It's been a while since I wrote a blog post. My new post writes about some cool updates to the MS-RPC-Fuzzer for recursively fuzzing complex structures, logging using ETW, and we found a way to escalate to nt\authority system!

https://t.co/Guxzx0gu2J

[DirectoryRanger @DirectoryRanger]

AD CS LOLBAS Toolkit, by @ZephrFish
https://t.co/rs3MK7zKFh

[TrustedSec @TrustedSec]

How well do you really understand what's happening inside a #Kerberos exchange? In our latest blog, @codewhisperer84 breaks down the full authentication flow and demonstrates how to interact with every stage using the #Titanis toolset. Read it now! https://t.co/QfvnCt9C0T

[Vivek | Cybersecurity @VivekIntel]

🛡️ Windows Analysis and Research Toolkit

Full-stack Windows inspection — user + kernel mode.

• Processes, ETW, network, registry
• SSDT, callbacks, drivers, memory R/W
• Detect hooks, hollowing, hidden processes
• Remote analysis via WinSysServer

⚠️ Kernel driver → lab use only

🔗 https://t.co/5wb38nG6Am

#DFIR #MalwareAnalysis #WindowsInternals #CyberSecurity

[Jacob Paullus @psycep_]

gopacket is live! Check it out, it is intended to be a full reimplementation of Impacket in Go (it is in beta please send me bug reports) https://t.co/9XjTickbyA

[James Kettle @albinowax]

I'm thrilled to announce "Can AI Do Novel Security Research? Meet the HTTP Terminator" will premiere at @BlackHatEvents #BHUSA! Check out the abstract:

[BriPwn @BriPwn]

Your EDR just coerced itself. 🫠
Drop a crafted LNK → MsSense.exe makes a CreateFile call → machine account hands over its Net-NTLMv2 hash over WebDAV → relay to LDAP → Shadow Credentials or RBCD.

No user interaction. No exotic exploit. Just vibes and a shortcut file.

If you're running Microsoft Defender for Endpoint, this one is literally about you. 👀
Full attack + detection breakdown 👇 https://t.co/wUsR1cHuZP

#purpleteam #MDE #NTLMcoercion #detectionengineering

[Florian Hansemann @CyberWarship]

''GitHub - mertdas/PrivKit: PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.''

#infosec #pentest #redteam #blueteam
https://t.co/QbAawZyRaG

[CVE @CVEnew]

CVE-2024-46062 Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerability when installed outside the user's home directory. During installation,… https://t.co/VTCVHkpzWX

[CVE @CVEnew]

CVE-2024-46060 Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability when installed outside the user's home directory. During installation, … https://t.co/0fL0mqTWqw

[HAHWUL @hahwul]

RedTeam-Tools: https://t.co/O1LEWpv6au

[Panos Gkatziroulis 🦄 @ipurple]

DumpGuard - Proof-of-Concept tool for extracting NTLMv1 hashes from sessions on modern Windows systems https://t.co/eSmGZltUtw

[Panos Gkatziroulis 🦄 @ipurple]

Redirect any Windows TCP and UDP traffic to HTTP/Socks5 proxy https://t.co/mrfJ5yt5SE

[Panos Gkatziroulis 🦄 @ipurple]

Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does https://t.co/HBNpU2LOIp

[Panos Gkatziroulis 🦄 @ipurple]

Swiss Army Knife for payload encryption, obfuscation, and conversion to byte arrays https://t.co/vnUpZvCovC