Julian Catrambone

Red Teamer and Security Enthusiast

[Julian Catrambone @n0pe_sled]

Today I am releasing Part IV of my FreeIPA series. It details a root privilege escalation and HBAC rule bypass which was ultimately assigned CVE 2020-10747.

https://t.co/vEnEdBgu9D

[SpecterOps @SpecterOps]

Deciding whether to attend SO-CON training in-person or remote?

Check out the benefits of joining us live in Arlington, VA, March 11-15! ⤵️

Learn more: https://t.co/zFToHexcjB

[Julian Catrambone @n0pe_sled]

@424f424f See you at the next meeting 😎

[Julian Catrambone @n0pe_sled]

@DebugPrivilege Found a custom web application that had a function called power shell executor… unauthenticated power shell executed through web application as DA

[Michael Maltsev @m417z]

Did you know that unlike most processes, Firefox doesn't crash if you create a thread with an invalid start address for it? Both OpenProcess and CreateRemoteThread on the screenshot don't return an error. What's going on here? Turns out Firefox does something interesting >>>

[Will Schroeder @harmj0y]

Tomorrow I'm releasing my second "Learning Machine Learning" post and Jupyter notebooks on attacking white box machine learning models. Excited to share!

[Julian Catrambone @n0pe_sled]

Second attempt at OSEP today, any last second tips and tricks?

[Will Schroeder @harmj0y]

I've been working on machine learning for a while now. After two years, I think I'm finally starting to (maybe) emerge from the "Valley of Despair". Should have some fun stuff coming out soon!

[George Takei @GeorgeTakei]

Call me when they acquit a 17 year old Black defendant who was armed with an AR-15 and who killed two people at a Trump rally in "self-defense."

Until then, sorry if it's hard to believe there is anything close to a level justice field.

[Julian Catrambone @n0pe_sled]

@Cyb3rMonk Any advanced adversary with budget and time can enumerate out detections of various EDR products and bypass them.

[Julian Catrambone @n0pe_sled]

@Cyb3rMonk EDR is extremely good at detecting “known/knowns” or previously known and released tradecraft. It is absolutely possible to have an entire attack chain not be caught by an EDR product and it happens all the time. EDR is not an end all be all solution.

[Julian Catrambone @n0pe_sled]

@_xpn_ I’ve been seriously considering it but having to get rid of all my VM’s has stopped me for the moment… what are your thoughts?

[Julian Catrambone @n0pe_sled]

@s0lst1c3 What bike is that?

[Julian Catrambone @n0pe_sled]

The year is 2021 and VMware fusion still cannot realiably copy and paste between host and guest...

[Marc Benioff @Benioff]

Ohana if you want to move we’ll help you exit TX. Your choice.❤️
https://t.co/y5IKpm5fNs

[Julian Catrambone @n0pe_sled]

@s0lst1c3 Super duties are nice

[Julian Catrambone @n0pe_sled]

@s0lst1c3 Lishi tools make lock picking a breeze 👌can grab them from here https://t.co/Z3y2Df8Yce

[Julian Catrambone @n0pe_sled]

@s0lst1c3 I would start with OSCP! That’s what really trained me to think in the right mindset, also heard great things since the update 👍

[Julian Catrambone @n0pe_sled]

@AmazonHelp When that is done I will put my info into the ticket.

[Julian Catrambone @n0pe_sled]

@AmazonHelp please tell me the right way to cancel my prime membership. I have cancelled it twice via the website, and once through a direct call with support. Each time 5 days later my refund is retracted and you bill me for another month. Is this even legal?

[Julian Catrambone @n0pe_sled]

@AmazonHelp Yeah I’m canceling this again to get my refund that keeps getting taken back. This time I am removing all my payment cards so even if you renew it I won’t be billed…