Max dcb

OSCP|CRTO - Senior Information Security Engineer

[Max dcb @max2cbx]

🕸 OpenShiftGrapher: A graph based tool to map, exploit & secure OpenShift clusters.
Perfect for pentesters to uncover:
🔸 RBAC abuse paths
🔸 Privilege escalation via SCCs
🔸 Risky misconfigs
📝 Read: https://t.co/mM3MaJKN3O
#RedTeam #Pentest #Kubernetes

[SEKTOR7 Institute @SEKTOR7net]

A new life of reflective DLLs - fixing call stacks.

Registering a proper unwinding information from .pdata section with RtlAddFunctionTable() helps fixing the call stack of a function called from within reflective DLL.

Example implementation called DreamWalkers and other details in a post by Max (@max2cbx).

Source: https://t.co/1xMmGEKgKl

#redteam #maldev #malwaredevelopment.

[Max dcb @max2cbx]

@SEKTOR7net Wow, thank you for sharing this — it truly made my week! I'm a great admirer of your work and have learned so much from your various courses. I'm honored that you found interest in my modest contribution.

[Max dcb @max2cbx]

🧪 New technique: DreamWalkers
A reflective shellcode loader that crafts a synthetic, clean call stack.
Achieving stealthy execution from memory-mapped modules.

🔗 https://t.co/kYLmaVkn5Z
#MalwareResearch #RedTeam #WindowsInternals #OffSec

[Max dcb @max2cbx]

@UK_Daniel_Card If you want real risk management I can recommend the book "How to Measure Anything in Cybersecurity Risk" it points out why we need to stop using risk matrix with highs and lows and do the math!

[Max dcb @max2cbx]

@troyhunt Pp

[Max dcb @max2cbx]

@_RastaMouse @C5pider @NetworkChuck What about c++/cli... Fair compromise!

[Max dcb @max2cbx]

@ColeVanlanding1 @C5pider @securityonion Super cool video! Do you know good resources to set up the Security Onion environment, it seems super interesting!

[Max dcb @max2cbx]

@C5pider @Eaga11N Yeah for the windows exploit side but for exemple you could use protobuf to ease the message parsing. I come from a c++ dev background and I see a lot of possibilities in using higher level functionalities. Maybe their are things I don't see..

[Max dcb @max2cbx]

@C5pider @Eaga11N It s seems super cool! For my own culture could you imagine integrate some high level lib in you agent and staticly compiled it ? I don't understand why beacon have to be low level dev? Apart from the loader.

[Max dcb @max2cbx]

@VirtualAllocEx Very cool project, exactly what I was looking for. I am definitely going to try that. Thank you.

[Max dcb @max2cbx]

@VirtualAllocEx Very interesting. Can you use the same technique to execute arbitrary .exe like the execut-assembly function of cobalt strike does ? What would be the manipulation to get the hex of a compiled .exe ?

[Max dcb @max2cbx]

@ippsec @0xdf_ i started my jouney in cybersecurity 7 months ago with online courses and htb, and I passed the oscp in January. My plan to prep was to do as much box of the tjnull list as I could and watch your video afterward ! Your videos are gold mines ! Thanks for the incredible content !