mindsflee

Ethical Hacker | Pentester | VM Creator

[☣ KitPloit - Hacker Tools @KitPloit]

WinFlesher — Automated attack surface assessment framework for Active Directory and local infrastructures, correlating vulnerabilities with attack... https://t.co/IggtorspOK

[mindsflee @mindsflee]

Like PingCastle went out for drinks with Bloodhound, and they actually decided to get some work done. 🍷

WinFlesher 2.0 automates vulnerability discovery and critical path correlation within Active Directory and local infrastructures.

https://t.co/Iqh6npUwLz

[Pentester Academy @SecurityTube]

Congratulations to @mindsflee for clearing our Certified Red Team Professional exam! #ADLab #CRTP #PentesterAcademy cc @nikhil_mitt https://t.co/gUx9gbXHsq

[HackMyVM @HackMyVm]

[New VM] Opacity | Enjoy #hacking tonight this VM made by our brother @mindsflee

#hackmyvm #CyberSec #pentesting #infosec #infosecurity

https://t.co/yUp3Bh8E9U

[HackMyVM @HackMyVm]

[New VM] Cachalot | Enjoy #hacking this machine as much as I have enjoyed testing it, made by our brother @mindsflee

#hackmyvm #linux #pentesting #infosec #cybersecurity

https://t.co/yUp3Bhqfyu

[mindsflee @mindsflee]

Invoke-WinFlesher is a post exploitation framework for windows, written in powershell.
It was created by adapting the exploitation techniques to MITRE and it was meant to be modular.

https://t.co/Iqh6npCVmZ

[mindsflee @mindsflee]

I just disclosed two insecure folder permissions vulnerabilities on two open source software applications:

https://t.co/DxaySoLnYc
https://t.co/ShLgH9EnOv

CVE-2021-37363
CVE-2021-37364

I also published two proofs of concepts which you can find on exploit-db.

[CVE.report @CVEreport]

CVE-2021-37364 : OpenClinic GA 5.194.18 is affected by Insecure Permissions. By default the Authenticated Users group has the modify permission to openclinic folders/files. A low privilege account is able to rename mysqld.exe or tomcat8.... https://t.co/ndBsXfUBdM

[mindsflee @mindsflee]

@lahilabs nice!

[mindsflee @mindsflee]

@Rishavmehraa @lahilabs @offsectraining one shot, one kill.

[mindsflee @mindsflee]

@lahilabs @offsectraining

[OffSec @offsectraining]

Mindsflee had this to share about his VM, Synapse: "Enumeration definition is the act or process of making or stating a list of things one after another. Don't underestimate the basics."

Submit your VM, and get compensated if it meets our criteria: https://t.co/0z1c2HBOvy

[mindsflee @mindsflee]

"INFERNO" SI OUT!
https://t.co/DOylAl7BZV

[Pentesting Made Simple @PentestSimple]

La live della settimana scorsa è saltata causa problemi tecnici, ma da questa settimana riprenderemo con una intervista molto interessante @mindsflee

STAY TUNED

#pentestingmadesimple

[mindsflee @mindsflee]

Thank you @0x7B9
Nice Writeup!
https://t.co/CzBUvI42uG

[Vuln Hub @VulnHub]

[Brand new VM!] "Inferno: 1" by mindsflee ~ https://t.co/mGnIQfW2Q4

[Roel @roelvb79]

✅ Root @ '𝗠𝟴𝟳'. An easy VM from @VulnHub made by @mindsflee. #CTF #hacking #linux 👨‍💻

[#BLY 𓆩𓆪 @bertrandlorente]

Nice box!! @mindsflee @VulnHub