Mayuresh 🇮🇳

degradable

[roddux @roddux]

New Qualys blog is, once again, excellent: https://t.co/9ivExUTxRc

[Mayuresh 🇮🇳 @pentestit]

@SimoKohonen Hi Simo, what is this likelihood based on?

[Mayuresh 🇮🇳 @pentestit]

@SwiftOnSecurity @HuntressLabs ^

[Mayuresh 🇮🇳 @pentestit]

@dmcxblue https://t.co/WDe7l0gCti

[Mayuresh 🇮🇳 @pentestit]

Does anyone know if the following #Microsoft #mitigation has been released - https://t.co/CzyczyD0M2? I see the registry hive, but does not do anything against POCs on my Windows 11.

[Mayuresh 🇮🇳 @pentestit]

@censysio, is the PoC listed on https://t.co/UCqrRgIbT1 legitimate? :)

[Mayuresh 🇮🇳 @pentestit]

@nostarch Same goes coffee stained teeth. ಡ_ಡ

[Comet @Cometml]

💥 ANNOUNCEMENT: Opik v1.2 is released! 💥

Opik is an open source LLM evaluation framework for:

🔥 Implementing LLM-based metrics
🪲 Logging/debugging LLM traces
💯 Scoring, annotating, and versioning LLM data

And so much more. Check out the repo below.

[Traceix @usetraceix]

Today we are releasing our FREE educational course: "Intro to Exploit Dev"!

This course is perfect for those trying to start exploit dev and covers:
- Tooling
- Fuzzing
- Exploitation techniques
- And more!

You can take the course here: https://t.co/kejXkinsGR

[The Haag™ @M_haggis]

🎯 Introducing AD-ThreatHunting: ⚡ Supercharge Your AD Threat Hunting!

🛡️ Just Released: A comprehensive Active Directory PowerShell threat hunting tool that makes detecting suspicious activities easier than ever!

✨ Key Features:
• Real-time attack detection
• Advanced timing analysis
• Pattern recognition
• Multi-format reporting (CSV/JSON/HTML)
• Built-in attack simulation

🔍 Detects:
• Password spray attacks
• Brute force attempts
• Account lockouts
• Off-hours activity
• Geographically impossible logins
• Service account misuse
• Admin account abuse

⚡ Smart Analysis:
• Time-based attack correlation
• Activity pattern matching
• User behavior analysis
• Configurable business hours
• Customizable thresholds

🧪 Includes Test Framework:
• Simulate various attack scenarios
• Validate detection capabilities
• Test environment readiness
• Verify audit policies

🚀 Get started: https://t.co/VGfASkzzox

Made with ❤️ by defenders for defenders
Hunt smarter, hunt harder

#ActiveDirectory #InfoSec #BlueTeam #ThreatHunting #CyberSecurity

[Mayuresh 🇮🇳 @pentestit]

Fake exploits for the BeyondTrust Remote Support CVE are surfacing - https://t.co/6psxIFgQAZ

[Artem I. Baranov @artem_i_baranov]

hfiref0x has rewritten the formerly industry-wide and old-school tool Dependency Walker, making it capable of running on Win11 and enhancing it with other useful features. It is designed to build a tree diagram of all an executable's dependent modules.
https://t.co/smYriUqOVv

[Fabian Bader @fabian_bader]

Do you know the Azure IP Ranges site by @derdanu ?

It's a great tool to filter IP ranges by service and even download them in different formats.

https://t.co/TTTGxae415

[Andrea P @decoder_it]

M'm glad to release the tool I have been working hard on the last month: #KrbRelayEx
A Kerberos relay & forwarder for MiTM attacks!
>Relays Kerberos AP-REQ tickets
>Manages multiple SMB consoles
>Works on Win& Linux with .NET 8.0
>...
GitHub: https://t.co/zoN2fX6Hsc

[Yehuda Smirnov @yudasm_]

Excited to share a tool I've been working on - ShadowHound.
ShadowHound is a PowerShell alternative to SharpHound for Active Directory enumeration, using native PowerShell or ADModule (ADWS). As a bonus I also talk about some MDI detections and how to avoid them

[Mickey Jin @patch1t]

As promised, I just dropped a dozen new sandbox escape vulnerabilities at #POC2024
If you missed the talk, here is the blog post:

https://t.co/zTcENNrZun

Slides:
https://t.co/sWztf0ygM4

Enjoy and find your own bugs 😎

[ATT&CK @MITREattack]

A Happy Halloween from the MITRE ATT&CK team with a special treat: ATT&CK v16.0, including new spooky behaviors and ghoulish groups, as well as revisions and contributions, to satisfy your every #infosec need! Check out @supremrobertson’s release blog at https://t.co/qn9JwhDsko

[Traceix @usetraceix]

Introducing DOMHash.

DOMHash is a completely self sustainable fuzzy hashing algorithm to compare DOM content from websites.

It provides a similarity score in order to determine how similar two sites are to one another and is completely FREE and opensource.

Thread👇

[Mayuresh 🇮🇳 @pentestit]

@xillwillx @DarkCoderSc Beautiful! Thank you! Did not know that you had these.

[Mayuresh 🇮🇳 @pentestit]

@xillwillx @DarkCoderSc Any chance of releasing the code to this stuff or did you have to give it all up?