Oddvar Moe

Red Teamer @TrustedSec | MS MVP | Speaker | Security Researcher | Blogger | Total n00b & always learning | UNC1194 | Tinkerer | Gamer

I try to inspire!

[Oddvar Moe @Oddvarmoe]

Feels incredible to finally be able to talk about this tool and capability. Thanks to everyone that attended the webinar today, much appreciated.

This is a tool that the entire Targeted Ops and Research team at TS has contributed to. I initially wrote the tool, but @freefirex2 took it to new heights.

Additional resources:
Code: https://t.co/UbT9O9qeGC
Wiki: https://t.co/MMmiAPjlC3
Video tutorials: https://t.co/LF26wYmZVO
Discord Specula channel: https://t.co/EDcGciFnBO
Webinar will also be released on the TS Youtube channel shortly.

[TrustedSec @TrustedSec]

Today, TrustedSec is releasing #Specula (our previously internal framework) into the world, which will transform the Outlook email client into a beaconing C2 agent. @oddvarmoe and @freefirex2 walk through how to use Specula in our latest blog! https://t.co/ZcXeCwsGAT

[Alex Neff @al3x_n3ff]

SMB share enumeration via ACLs with NetExec🔥

NetExec now detects share permissions via ACL enumeration, instead of trying to write a file. In addition, we can now detect if a user has indirect access to the share, e.g. by having ACL write permissions!

Made by @PytelJack🚀

[Vivek | Cybersecurity @VivekIntel]

Anthropic just open-sourced a reference framework for AI-powered vulnerability discovery and remediation 🤖💀

The workflow:

Recon → Find → Verify → Triage → Report → Patch

Features:
• Threat modeling
• Autonomous vulnerability hunting
• Crash verification
• Finding deduplication
• Exploitability analysis
• AI-generated patches with validation

Built around Claude Code and sandboxed agents using gVisor.

🔗 https://t.co/ZFOtXZPEn8

Interesting signal: AI is moving beyond code generation into autonomous security research and vulnerability management.

#CyberSecurity #AppSec #AI #LLM #VulnerabilityManagement #DevSecOps #ClaudeAI

[Oddvar Moe @Oddvarmoe]

@curi0usJack @TrungTPhan haha! so true

[Mr.Un1k0d3r @MrUn1k0d3r]

I decided to publish my internal Azure Entra ID tool. There are a lot of these already available, but I've added some interesting features that have made a difference for me over the years. You can capture token through the browser using playwright

https://t.co/xiZaz0PKsC
#Azure

[Melvin langvik @Flangvik]

Had a blast sitting down with John last year, goofy stuff but hopefully somewhat enjoyable 👌🤪

[Justin Elze @HackingLZ]

The lolbin gods delivered

[Jason Lang @curi0usJack]

Prove it.

Reinstate Nightmare Eclipse on GitHub.

[Oddvar Moe @Oddvarmoe]

@_xpn_ Sounds awful!

[DirectoryRanger @DirectoryRanger]

Red Team Gold: Extracting Credentials from MDT Shares, by @Oddvarmoe
https://t.co/I3OqoU4NF6

[Dave Kennedy @HackingDave]

I'm happy to announce that I have officially been promoted to Founder and Chief Executive Officer (CEO) of Binary Defense. With the changes in the industry happening and the shift to artificial intelligence, I have been immersing myself relentlessly on how we innovate and move fast - a complete shift of our entire company. Over the past 12 months we have completely transformed our company to be the most advanced artificial intelligence cyber security company in the world.

We have taken MTTD and MTTR to times never thought possible before. Reduced false positives, increased true positives, and completely changed how we operationalize our MDR and product services as a company, and most importantly protect our customers. This journey was one of the fondest memories of my life, doing this with my team and one that is just getting started.

With these changes in mind, our board approved me as CEO of the company to drive this company even further during this transformational and historic time in cybersecurity. I want to thank the folks over at Invictus Growth Partners for the trust in me, my partner Mike Valentine, and to all of the amazing folks we have @Binary_Defense .

We truly are ahead in this field, innovating everyday, and protecting our customers 24 hours a day, 7 days a week, and 365 days a year.

#BinaryDefense

[Tom Jøran Sønstebyseter Rønning @L1v1ng0ffTh3L4N]

Microsoft Edge loads all your saved passwords into memory in cleartext — even when you’re not using them.

[TrustedSec @TrustedSec]

Join us tomorrow on #Reddit for a live AMA! Director of Technical Services Paul Koblitz, Senior Security Consultants @fir3d0g and Costa Petros will be answering questions on physical penetration testing. Head over to r/cybersecurity to participate! https://t.co/AqraXSDkyc

[Oddvar Moe @Oddvarmoe]

🤣

[TrustedSec @TrustedSec]

Sometimes you don't need to build the nest yourself. In this blog, @Coontzy1 explains how trusted Group Policy UNC paths can be turned into code execution and NTLM relay without building rogue GPO infrastructure or modifying SYSVOL. Read it now!
https://t.co/XF0eadfqPK

[TrustedSec @TrustedSec]

How well do you really understand what's happening inside a #Kerberos exchange? In our latest blog, @codewhisperer84 breaks down the full authentication flow and demonstrates how to interact with every stage using the #Titanis toolset. Read it now! https://t.co/QfvnCt9C0T

[Brian in Pittsburgh @arekfurt]

Huh.
Am I the only one who didn't know that Microsoft makes a tool called EventLogExpert that is supposed to be an improved version of event viewer for IT/helpdesk people?

https://t.co/HzSzG1zSO0

[Oddvar Moe @Oddvarmoe]

sudo for Windows was not on my bingo card. Apparently this has been in the works for a while. Must have missed it

https://t.co/dDfF1qBD2B

[TrustedSec @TrustedSec]

Mythos is impressive, but it doesn't change how most organizations get compromised. In our blog, @HackingLZ examines what #Mythos actually means for most defenders and explains why the "boring" fundamentals still matter more than the hype. Read now! https://t.co/P91lzC3KCL

[Oddvar Moe @Oddvarmoe]

🎉🔥

[TrustedSec @TrustedSec]

Announcing the release of Dungeons & Daemons, TrustedSec’s new cybersecurity #RPG 🎲 A browser-based game that drops you into a “live” engagement. Your mission: prove you’ve got what it takes to be on the #RedTeam. Read our #blog for the game breakdown!
https://t.co/fOqyT5oCTV

[TrustedSec @TrustedSec]

The building's locked. The network's encrypted. The guards don't know you're already inside. Get ready for Dungeons & Daemons! Your mission starts tomorrow—are you in? #TrustedSec @W9HAX