Nicholas Charron

Pentester & Red Teamer. Breaking things. Hockey. Fishing. Outdoors. Not always in that order.

[Nicholas Charron @n_charron]

@HackingLZ And if you do spend the time doing the research, you can also up your OPSEC game by blending in with the admins. To continue on the previous example, if you can find out how that web portal resets anyone's password ( service account or script etc) then you might have a privesc 😁

[Nicholas Charron @n_charron]

@HackingLZ Clearly you are not Canadian 🇨🇦 😂

[Nicholas Charron @n_charron]

@HackingLZ I've started to use reNgine to do some of the heavy lifting for me. I am deep in the code at the moment as I try to tune the engine to my process:
https://t.co/K2jUfqgewd

[Nicholas Charron @n_charron]

@HackingLZ Wooooow…you’ve got everyone coming out of the woodwork for this one.

[Katie🌻Moussouris (she/her/she-ra/she-hulk) 🪷 @k8em0]

Curious as to the origin story of the Microsoft bug bounty?

Read the @LutaSecurity blog about the beginning of Microsoft’s #bugbounty, now all grown up:

https://t.co/GukyXOsgYe

Thanks for the official recognition on the @msftsecresponse 10 year anniversary blog @nchlgpt 🙌🏼✨

[Nicholas Charron @n_charron]

@UK_Daniel_Card Is it just me or are you only getting 0.14 tries (roughly) per second? It seems like from your screenshot it took 1m40seconds to try 14 passwords. Is that correct? If so I’m not too worried about people bruteforcing the VPN if it employs a sufficiently strong password.

[Nicholas Charron @n_charron]

@wvuuuuuuuuuuuuu Java is a language that no payload one liner would ever fit in a tweet 🤣

[Nicholas Charron @n_charron]

@wvuuuuuuuuuuuuu This is a longer conversation than twitter can handle hahaha it starts to be a rabbit hole real quick. DM if you want more info.

[Nicholas Charron @n_charron]

@wvuuuuuuuuuuuuu Or red team initial payloads? Those I’ve got a few of :)

[Nicholas Charron @n_charron]

@wvuuuuuuuuuuuuu I think it depends on your case for Java. Like Java app or user clicking on something? I’ve had to do one recently with Java in multiple forms.

[Nic Losby @Blurbdust]

First and foremost, I would like to thank https://t.co/hyDNtvcbHU and @toorcon for their DES cracking service over the years.
I am in absolutely no way trying to remove a revenue stream or cut into their profits.

[Nicholas Charron @n_charron]

@MarcMethot3 @DrJacobsRad My internet is ALWAYS on regardless of power outage. I battery backup that thing on top of a generator when needed. Let me know if you need help debugging that!

[Nicholas Charron @n_charron]

@HackingDave This honestly applies to way more than just health. Sound advice all around for life :)

[Jonas Vestberg @bugch3ck]

Disclosed today at @Disobey_fi - psexec from #impacket expose the target system for authenticated command execution as SYSTEM. That means any user that can authenticate over the network (usually Domain Users) can run code as SYSTEM over the network.

[Cybersecurity and Infrastructure Security Agency @CISAgov]

🚨We released an ESXiArgs ransomware recovery script on GitHub to allow organizations to attempt recovery of virtual machines affected by the ESXiArgs ransomware attacks: https://t.co/cXpP1m03yw #StopRansomware

[Nicholas Charron @n_charron]

@lpha3ch0 If you don't have admin access or any access to the machines, I scripted something to run PetitPotam on a target list while running responder in --lm mode and parse the responder.log for NTLMv1 hits...

[Nicholas Charron @n_charron]

@vysecurity Nope just did this last week and grabbed over a dozen. DM me and I can go into details

[Nicholas Charron @n_charron]

@LinuxHandbook chmod -R 777 /