Sam██ Pok█ar█l

Offensive Security Consultant

[Sam██ Pok█ar█l @maskop9]

You are not bored.
You're terrified of being alone with yourself in your own head.

[Sam██ Pok█ar█l @maskop9]

@mrexodia I tried this approach but ran into some compilation issues with MingW. I should revisit it, as it's much simpler to follow and would fit well in the blog. I used the stubs to automate the build process effectively.

[Sam██ Pok█ar█l @maskop9]

Published a new blog on phantom DLL hijacking and proxy DLL development.
Tool:
https://t.co/4g0jfoX19O
Read here:
https://t.co/sfaC7BhmmF

#CyberSecurity #RedTeam #WindowsInternals #DLLHijacking #OffensiveSecurity

[Smukx.E @5mukx]

Dear @github @Microsoft and @MsftSecIntel .

Thank you for your service. I have lost all hopes from you guys. As a Windows security researcher whose intent was to help the beginners and contribute to open source security tooling, and i had so much respect towards @Microsoft , that thought was changed today and i am leaving.

I have left the enough evidence in the ticket session. I would be better if a security researcher from GitHub might actually take a look at these.

Thank you and bye to the community.....

Here after you will not see posts about GitHub issues.

Ticket ID: #4440743

#github #msft #defense #unlawful

[Sam██ Pok█ar█l @maskop9]

Published a new blog on Applocker & WDAC evasion techniques.

This article covers practical application control bypass concepts, modern tradeoffs, and realistic execution paths in hardened environments.

Read here:
https://t.co/ns7A4LYkNM

[impulsive @weezerOSINT]

North Korean Lazarus Group has weaponized this exact class of Microsoft-signed kernel driver.
It is sitting on MILLIONS of Windows PCs right now.
It gives any local process full control from the deepest level of Windows.

5 lines of code. Zero validation.
Your antivirus can’t stop what runs below the OS.

[Sam██ Pok█ar█l @maskop9]

I just solved SSOS on Hack The Box! Totally learnt something new with this!!! https://t.co/koZ4DhrOwA #HackTheBox #HTB #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[Sam██ Pok█ar█l @maskop9]

I just solved Overwatch on Hack The Box! https://t.co/PvRoKSXHMt #HackTheBox #HTB #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[Martin Mielke @xct_de]

I was looking a bit onto why OPENROWSET is able to read privileged files (like the root flag on Signed @hackthebox_eu) when using Silver tickets on MSSQL. Turns out you can get SYSTEM access without potatoes by recovering the full token. https://t.co/cd47HQLXF0

[X-C3LL @TheXC3LL]

A small rant:

The State of Art in Red Team is whatever you want to believe
https://t.co/ZihtNl8WEF

[Sam██ Pok█ar█l @maskop9]

I just pwned Outdated on Hack The Box! https://t.co/c1QEtt0tbl #HackTheBox #HTB #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[Dear Son. @DearS_o_n]

RULE NUMBER 1: Envy no man. For whatever you see, he paid the price

[flux @0xfluxsec]

I have uploaded a proof of concept MVP for Hells Hollow (removing the bloat from my previous project it was part of).

You can find it here: https://t.co/NInXHhCoE4

#maldev #malware #cyber #infosec #rootkit #hellshollow #cybersecurity #osint #vulnerability #bypass

[Sam██ Pok█ar█l @maskop9]

I just pwned WhiteRabbit on Hack The Box! https://t.co/1NWAdGYe6F #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[Sam██ Pok█ar█l @maskop9]

@milannshrestga No way around brother 🍻

[Sam██ Pok█ar█l @maskop9]

I just pwned ArtificialUniversity on Hack The Box!
This literally gave me some sleepless nights!
https://t.co/XiAx8b2j4M #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[nafiez @zeifan]

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)

https://t.co/j2N7AQlO7Z

[Sam██ Pok█ar█l @maskop9]

I just pwned Editorial in Hack The Box! https://t.co/RUdLTlxrMR #hackthebox #htb #cybersecurity

[Sam██ Pok█ar█l @maskop9]

I just pwned Axlle in Hack The Box!
Phish -> initial shell.
Trick a program -> exec shell for priv esc.
AD Perms -> escalate further.
Windows Kits ****Runner -> admin.
https://t.co/4snXVHQBxW #hackthebox #htb #cybersecurity

[Sam██ Pok█ar█l @maskop9]

I just pwned PermX in Hack The Box!
Enum -> CVE -> Shell -> User -> Root!!!
https://t.co/Ji11ODSbr6 #hackthebox #htb #cybersecurity