noname

[noname @nonameoffsec]

@nabilsmida86 @dfwpeter_ @0x1Rosy don't worry, is malware. Don't open it

[noname @nonameoffsec]

@0x1Rosy give me the github link in order to check the source code, a file compressed inside a compressed file with password? man, that technique is very old...

[noname @nonameoffsec]

@nabilsmida86 @0x1Rosy it's malware

[noname @nonameoffsec]

@0x1Rosy

[S3cur3Th1sSh1t @ShitSecure]

Just added TLS Callback support to Nim-RunPE:

https://t.co/uxYAdZNlnQ

Didn't even know about those some days ago. This improvement adds support for more different binaries.

[/r/netsec @_r_netsec]

FilelessRemotePE: Loading fileless remote PE from URI to memory https://t.co/rMwFkc2zoK

[mpgn @mpgn_x64]

Spider_plus is a new cme module to dump recursively files from remote SMB servers. By default the module creates a JSON file with the shares structure to avoid excessive dumping.
When you think you found a juicy share, just dump everything and grep 🔥

Thx to Vincd from Github 👏

[Panos Gkatziroulis 🦄 @ipurple]

CursedChrome - Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims. https://t.co/BUI5U4pPrr

[Mauricio Velazco @mvelazco]

releasing the materials (source, slides & lab guide) for the @defcon workshop by @olindoverrillo and I: Writing custom backdoor payloads with c#. Hope you can learn and have fun as much as we did.
https://t.co/tWCYq7ZV2k

[Mauricio Velazco @mvelazco]

playing with token impersonation while in lockdown
https://t.co/Go74fg6CRj

[Jack Halon @jack_halon]

2nd part of my Utilizing Syscalls in C# blog is now live!

In this post we focus on how to write our C# code to execute our syscalls by utilizing everything we learned in part 1!

Enjoy! 😁

https://t.co/SCrbbegZ6n

[Richard Davy @rd_pentest]

A walk-through of bypassing AMSI in VBA via HEAP modification based on the work of Matt Graeber / mattifestation

Blog - https://t.co/SZqzjMzBGJ

Git/POC - https://t.co/sIMjHqVhq5

[Check Point Research @_CPResearch_]

New cyber-crime service aiming to replace packers and crypters: thousands of malicious payloads are loaded directly from well-known cloud drives. Meet #GuLoader.
Read more here:
https://t.co/GeuRBaJAfK

[bohops @bohops]

"GhostBuild" - a collection of simple MSBuild.exe launchers for GhostPack assemblies (and other .NET projects)

https://t.co/FdWZ0stslR

[sshell @sshell_]

Spent today fuzzing AV engines on VirusTotal and rewriting bad VBScript malware in the dumbest ways possible.

The journey to 0 detections was actually a lot of fun, so I wrote about it.

https://t.co/ey32BbpetM

[Paul Seekamp @nullenc0de]

I'm tired of hearing about zoom. I'm gonna go ahead and say this: echo https://t.co/v3XUP3bNyO |getallurls |grep "https://t.co/B8BePiTfUy"

This has always been a thing.🤭

[_leon_jacobs(💥) @leonjza]

A practical blog post where @slazar0 literally owns an Active Directory Domain Controller using a Resource Based Constrained Delegation attack, leveraging multiple tools in this @sensepost blog entry: https://t.co/zCRO6G0Fed

[Florian Hansemann @CyberWarship]

Lateral Movement \
Windows and Active Directory

- great content & very well written, thanks for sharing @dottor_morte

#infosec #pentest #redteam
https://t.co/2fXPegxe5L

[SinSinology @SinSinology]

Some of many ways to Quickly resolve subdomains

#BugBounty #BugBountytips #BugBountyTip #infosec

[Azeria @Fox0x01]

Self-isolated hackers, assemble!

✨ 3 new tutorials and a new VM for you to play around with:

Lab VM 2.0:https://t.co/QVdP0tOo2o

Emulating Router Firmware: https://t.co/oUeEn4EvwO

Stack Overflows: https://t.co/kEe519zV0T

XN Exploit Mitigation and ROP: https://t.co/KVlBMc4MJu