parzel

Hacker based in Berlin | Working at @mod0 | | he/him

[parzel @parzel2]

I will try to move to bsky permanently from now on. A lot of #itsec people are showing up there recently, and I am positive that finally, it will be possible to leave the toxic site Twitter has become. You can find me at https://t.co/YNwqq8MiP3, happy to connect there!

[TrustedSec @TrustedSec]

During a recent engagement, @Bandrel discovered how an attacker can craft a CSR by using default system certificates. After finding out this method was novel, the team kept digging. Read what they found in our new #blog! https://t.co/YMTahv2GYX

[Justin Bollinger @Bandrel]

I did not approve of the timing of this release but here it is. Blog coming soon.

https://t.co/tCqWpaIlnZ

[Andrea P @decoder_it]

Following up on my earlier tweet (https://t.co/hTBzbcXcxD) regarding Kerberos relay with SMB server, I've uploaded my quick & dirty version. It's far from perfect, so feel free to improve it! https://t.co/Pi0sfpTbc7

[parzel @parzel2]

During a #redteam at @mod0 we discovered a limited but neat bypass for #printnightmare. I talked to @itm4n about it and he had an indepth look. Read about it here:
https://t.co/2NGYFPbhSh
#itsec

[cts🌸 @gf_256]

The entire disclosure seems to have been leaked online

https://t.co/N3ms4CkA9J

Here is the report and POC

[BSides Berlin @SidesBer]

A big thank you to our Review Committee
@BalthasarMartin @parzel2 @vinulium, Luca Melette and Diana Janetzky. We now have an amazing schedule featuring their favourite talks which you can check out here: https://t.co/ygNVnUlW7e

#BSidesBerlin #appsec #infosec #BSides

[BSides Berlin @SidesBer]

#BSidesBerlin is back! Will you be joining us this year at @Festsaal on Saturday 26.10?

Our CFP is open until 16.08 👉https://t.co/3XgzQorwP0

Early Bird Tickets are available until end of July 👉 https://t.co/ygNVnUlW7e

@SecurityBSides @cfp_time

[Balthasar @BalthasarMartin]

Today at #Troopers24 we released Certiception – the ADCS honeypot we always wanted to have.

Blog: https://t.co/2NCzLTtItc
Source code: https://t.co/WLSMq2Bl8m
Slide deck, including our guide to deception strategy: https://t.co/xEAUPhqaGR

[Gareth Heyes \u2028 @garethheyes]

Lovely to see the Email RFCs abused to embed a command injection payload in the local-part of the address! Nice work Michael Imfeld & @parzel2
https://t.co/W62GHIVjd0

[parzel @parzel2]

@garethheyes That's a big compliment coming from you, thanks! :)

[@[email protected] @mod0]

Shells at midnight: Exploiting the flexibility of Email addresses for offensive purposes.

Today we are publishing a new blog post about our disclosure report on #MailCleaner #CVE-2024-3191: https://t.co/XGOqYaGJbo

@[email protected] will also present at @a41con today.

[BSides Berlin @SidesBer]

🎟️📢Don't miss your chance to attend or present at BSides Berlin on October 26 in Festsaal Kreuzberg.

Ticket sales and the Call for Papers are NOW OPEN!! https://t.co/kJPlqQJlHa

[@[email protected] @mod0]

We identified critical vulnerabilities in MailCleaner. A command injection vulnerability can be exploited by sending an Email. Our report can be found here: https://t.co/UbjGuZEvCW

Kudos to https://t.co/2sZjAckbdt and https://t.co/ap3QfuqatP #MailCleaner #CVE-2024-3191 #Infosec

[CODE WHITE GmbH @codewhitesec]

Struggeling to get those precious certificates with #certipy and AD CS instances that do not support web enrollment and do not expose CertSvc via RPC? @qtc_de has you covered and added functionality to use DCOM instead of good old RPC #redteaming https://t.co/uyeXu8XeBQ

[Dlive @D1iv3]

We can relay back to the same machine using Kerberos relay instead of NTLM relay. I discovered this attack vector more than a year ago. I will describe it in detail in upcoming Black Hat Asia 2024 https://t.co/zz9z3n6t0h and introduce more interesting attacks.

[Aleksandar Milenkoski @milenkowski]

🇷🇺 Doppelgänger | Russia-Aligned Influence Operation Targets Germany

We have been tracking the activities of the suspected Russia-aligned influence operation network Doppelgänger since late November 2023. Here is what we found... 🧵

https://t.co/Gg0rLIMdPM

#threatintel

[安坂星海 Azaka || VTuber @AzakaSekai_]

#threatintel
someone just leaked a bunch of internal Chinese government documents on GitHub
https://t.co/BO8N64A7kF

[James Forshaw @tiraniddo]

I try an avoid this hellsite, but I did a quick dive into sudo in Windows and here are my initial findings. https://t.co/Q1k1KAUlmB

The main take away is, writing Rust won't save you from logical bugs :)

[parzel @parzel2]

Today we release the proof-of-concept exploits for the vulnerabilities we identified in HP #Poly VoIP devices. At the #37C3 we presented how these issues allow an attacker with network access to gain RCE and transform your devices into wiretaps.

https://t.co/iDKna43HUC