J

Aspiring good human. Red teamer. Security pro. Sports fan.

CRTL | GXPN | OSCP | CISSP etc.

#perpetualprogression
#striveforgreatness

[J @offsecj]

@_RastaMouse Let me guess, offsec?

[v1n @0xv1nx0]

Dropping new LOLBin/LOLBAS inspired project today called LOLGlobs, to document some cool ways of commandline evasion using wildcards and some other obfuscation techniques that go beyond B64 encoding: https://t.co/weesvN45Vd

[J @offsecj]

@0xTib3rius @INSPEKTTOR 😂😂😂

[J @offsecj]

@0xTib3rius @INSPEKTTOR Not true for red teaming.

[J @offsecj]

Apollo postexp capabilities have tested pretty well against Microsoft ATP. Good opsec with Inline assembly, powershell execution etc. Has been an easier time testing compared to Cobalt Strike. WDAC and device hardening included.💻

#Mythic #Apollo #EDR #maldev #cobaltstrike #ATP

[J @offsecj]

Lesson of the day: LOLBins can be an option to get past the execution phase, but are more risky post exploitation. Seeing the likes of excel.exe have a lot more trust from the O/S + Microsoft ATP and are allowed to do a lot more without losing the implant.

#redteam #offsec #c2

[J @offsecj]

@_RastaMouse 😂😂😂

[J @offsecj]

@TrendMicro AV is a piece of cake to bypass and post exploit. Even basic evasions get by just fine. 🦠

#offsec #antivirus #bypass #exploitdev #maldev #redteam

[J @offsecj]

@_RastaMouse Surprised you're not doing that already 😀 jk

[J @offsecj]

@RedTeamTactics Real security work includes completing checklists as well. Have to think about it from client perspective.

[J @offsecj]

Happy Thursday :D

#offsec

[J @offsecj]

@_RastaMouse Can I audition to be co-host? Seriously. I'm dynamite as a presence and have been thinking of doing something similar already. Would be a great link up! 🍀

[J @offsecj]

@_RastaMouse But we want it from you though 😀

[J @offsecj]

@embersunn How many people have you blocked from the replies to this post? 😄

[J @offsecj]

@nickvourd Yes, open source on GitHub. Good to have in the arsenal for network tests. Hint: made by Kevin Robertson. 🙏

[J @offsecj]

Which tool am I using? 🤪
#offsec #netsec #AD

[J @offsecj]

@nickvourd ⛔😀 It's on Windows. Very similar to Responder but a lot more obscure. 😉

[J @offsecj]

@mrgretzky Any hints on when Pro might drop? Is there a waiting list I can get on? 😀

[J @offsecj]

So yesterday I cancel my Malwarebytes account, fully deleted, got no confirmation email. Today my subscription has been renewed. What kind of scam are u running @Malwarebytes? Please reach out.

[J @offsecj]

Hey @BallisKit where can I find information on your upcoming trainings? #offsec