Daniel Stewart

Hacker and Brazilian JiuJitsu enthusiast

[Daniel Stewart @pentestdan]

@_xpn_ @MDSecLabs Charley did this research in 2020 😜

https://t.co/jVkAFvNSxp

[Daniel Stewart @pentestdan]

My sister was diagnosed with Breast Cancer early this year.
I’m doing the Three Peaks to help raise funds. Any donations or shares would be REALLY appreciated! #fuckcancer https://t.co/leFzIVbBez

[Daniel Stewart @pentestdan]

Epic release by @The_Keeb here 👍🙏

[LRQA Cyber Labs @LRQA_Cyber_Labs]

Introducing MalSCCM!

Today, we are releasing MalSCCM, a .NET tool by @The_Keeb which enhances PowerSCCM functionality and makes it easier to use over command and control channels.

https://t.co/InO8p0syFj

[Jonny Johnson @JonnyJohnson_]

As I continue my road down token research, I thought I would document some cool findings.

Here is a writeup if you are interested!
https://t.co/v2u73IVRLX

[T3nb3w @T3nb3w]

I made a blog about research I did recently on learning COM objects internal.
https://t.co/ChtmpKjBye
I learned a lot of interesting things along the way and I'd like take it further.
Special Thanks to: @MrUn1k0d3r @waldoirc @trickster012 @chiragsavla94 @KLINIX5 @tiraniddo.

[5pider @C5pider]

Wrote my own reflective loader called KaynLdr. It uses RX Memory, direct syscalls (TartarusGate), and it erases the DOS and NT headers to make it look less suspicious in memory. Going to publish it soon.

[Ben Turner 🇬🇧 @benpturner]

A follow up to the user-land hooking post I wrote a while back - https://t.co/jjFdjFvhNk @b4ggio_su

[LRQA Cyber Labs @LRQA_Cyber_Labs]

Calling all red teamers 🚨

Introducing RunPE. Avoid detection by running vanilla unmanaged binaries from your implant without spawning new processes. Tool and whitepaper available now!

By @m0rv4i and @benpturner. #redteam

https://t.co/RqnzmaTChC

[Daniel Stewart @pentestdan]

@cornerpirate @danjconn @ghostinthecable @deepybee @DoddsyLTD @WH_Y @notdan @BjoernVoitel @Stokie_Bloke08 @FaythesDaddy @cr1mesc3ne1

[Grzegorz Tworek @0gtweet]

Do you call CreateProcess() directly? Or rely on a nice wrapping function overchoice Microsoft gives us?
#ILoveWindowsAPI 😅🤯
_execl()
_execle()
_execlp()
_execlpe()
_execv()
_execve()
_execvp()
_execvpe()
_spawnl()
_spawnle()
_spawnlp()
_spawnlpe()
_spawnv()
_spawnve()

1/3

[Daniel Stewart @pentestdan]

Excited to be the 15,830th 😎 on @BackerKit for Flipper Zero — Tamagochi for Hackers. Thanks @flipper_net https://t.co/lMNx0m7NMy

[Daniel Stewart @pentestdan]

@DrFedDC This feels like the Rocky approach to cyber security 😂 Let them punches in!

[Daniel Stewart @pentestdan]

@ZephrFish @Ka0sKl0wN I wish I had this many monitors 😂 Looks like we can be pals though

[Daniel Stewart @pentestdan]

@cornerpirate @ZephrFish Thanks guys 🙏 Tune in if you’re having trouble sleeping 😂

[Jason Lang @curi0usJack]

This is beautiful. Easy execution of the RBCD attack in very handy impacket wrapper.

https://t.co/bok8WfAaCn

[Rob Maslen @rbmaslen]

SharpView, if you've run it on a machine have a look in %TEMP%\ba9ea7344a4a5f591d6e5dc32a13494b you might find a nasty surprise.....

[TrustedSec @TrustedSec]

Ever wanted to exploit that Group Policy modify access you have? Get a crash course on practical #redteam GPO client-side extension abuse in this #security #blog from @curi0usJack

https://t.co/3Hqyl84Doj

[SEKTOR7 Institute @SEKTOR7net]

Excellent piece of "offensive" research by @FSecureLabs
That's exactly what every #redteam should research.

Your edge, as an attacker, doesn't come from a new shiny tool. It comes from knowing something the other side doesn't know that you know, ya'know?

https://t.co/fnYgLWfxP5

[Roberto Rodriguez 🇵🇪 @Cyb3rWard0g]

I started to document Win RPC interfaces & their respective methods 📋& ended up using @GHIDRA_RE for the 1st time, integrating code from @_xpn_ & @Sektor7Net research 😅 and using @ProjectJupyter notebooks & #GraphFrames 🔗 to analyze the results 🍻 https://t.co/Va3ZZxMggE

[Overflow @oooverflow]

Want to hone your skills 🧙‍♂️🧙‍♀️ in time for #DC28CTF (or level up 🍄 to qualify next year)?

Check out: https://t.co/TlMb4ZVl3v where you can hack on @defcon
CTF challenges from 2019 and 2020!

gr33tz to @jac_arc of the order for creating the archive!

cc @thedarktangent