Jonás RopCas

Red Team, Pwntest, Research, Exploiting
| Pos ya tu sabes... | Málaga |
@ihacklabs

[Empire @EmpireC2Project]

Interested in all the features that #EmpireC2Project has to offer? Check out our docs to stay up-to-date!
https://t.co/rR7JV1C55s

[Juan C. Montes @jcmontes_tec]

Después de más de tres años... hoy publicamos Sylvaron 2049.

https://t.co/R0XJx7MLZt

[an0n @an0n_r0]

#mimikatz forever! combination of (obfuscated) NetLoader + BetterSafetyKatz from @Flangvik (+some ssh tunneling for http inspection bypass on firewalls) is still performing well against some endpoint protection :)

[Oliver Lyak @ly4k_]

Certipy just received a major upgrade. The new version includes BloodHound integration, 5 new domain privilege escalation techniques, Shadow Credentials, Golden Certificates, and more.

https://t.co/J9Wr7dzQMR

[☠ Román Medina-Heigl Hernández @roman_soft]

Interesting "universal" exploitation method for PHP LFI in Nginx (aka abusing client body cache files in Nginx to get RCE): https://t.co/qCYePP8lig

[Wietze @Wietze]

The #LOLBAS project ♥️ MITRE ATT&CK!

As of today, take advantage of the following:
🆕 All LOLBAS entries have been mapped to ATT&CK v10
🆕 On the updated website, ATT&CK is more visible, searchable, and links to the @MITREattack website

Check it out!
👉 https://t.co/riaKgw8Ma3

[bohops @bohops]

My favorite Cobalt Strike BOF is @anthemtotheego 's
InlineExecute-Assembly. Check out the tool here:

https://t.co/0UoXAkCqu9

[X-C3LL @TheXC3LL]

He visto por ahí el indice del libro de "Hacking Windows". Hace meses @eloypgz publicó este recurso gratuito que parece bastante más completo y útil en cuanto a Active Directory (y con una miríada de enlaces para seguir ampliando) https://t.co/kctMjo6A4k

[Łukasz @maldr0id]

We have publicly released details of 30 preinstalled vulnerabilities!

https://t.co/KeEuYeyaT1

[☠️ Brandon @__mez0__]

I spent yesterday using the WinRM C++ API, getting it to work as a Reflective DLL, and wrapping it up into an Agressor Script. It was a fun one! The code is available on GitHub: https://t.co/5jtq7q2tro

[Chetan Nayak (Brute Ratel C4 Author) @NinjaParanoid]

Usually, you never know which EDR you are going to face during red team engagements. So, this got me thinking that most people patch AMSI, but what happens when an EDR vendor ships their own amsi.dll, or a DLL which hooks against WINAPIS? (1/4) #BRc4

[Cobalt Strike @_CobaltStrike]

Our series on reversing and #exploiting with free tools by @ricnar456 continues with part 10:
https://t.co/7OAENct7LY

[Cn33liz @Cneelis]

Wrote a tool called Shredder 😎 It's an CobaltStrike version of the #printnightmare CopyFiles (0day) exploit /cc: @gentilkiwi. Tool can be used to deploy a local or remote "Evil" printer and enables you to connect from any user beacon to gain SYSTEM privileges.

[hackplayers @hackplayers]

Pivoting off Phishing Domain https://t.co/VKl5TMeJvG

[OVHcloud UK @OVHcloud_UK]

We are delighted to welcome video game & #cybersecurity focused @threatia to the @OVHcloudStartup Program! 🎉 Threatia provides security training using cutting-edge #gamification. Watch out for the team's latest video game #Sylvarcon, coming soon! 🎮 #Startups

[Cube0x0 @cube0x0]

C# port of Mimikatz/Pypykatz minidump parser released, shoutout to @SkelSec @gentilkiwi @b4rtik

https://t.co/smxo6RQDU2

[Charlie Bromberg « Shutdown » @_nwodtuhs]

Active Directory ACEs abuse mindmap

[Sergio de los Santos @ssantosv]

Otro fallo un poco loco en Windows. Desde la versión 1809, se les ha colado un permiso de lectura de usuario en el fichero SAM y en los archivos que representan las ramas del registro SYSTEM y SECURITY. ¿Qué significa? Si te pasa lo que en la imagen en amarillo, preocúpate. Hilo¬

[Spiros Fraganastasis @m3g9tr0n]

SysWhispers2: The usage is almost identical to SysWhispers1 but you don't have to specify which versions of Windows to support. Most of the changes are under the hood. https://t.co/2nwTe8vHOs

[ippsec @ippsec]

HackTheBox Atom Video is up! A pretty fun box based around analyzing an electron app. But my favorite part is the unintended where I walk through PrintNightmare and some basic troubleshooting with it to get a reverse shell https://t.co/Coom4M5uRq