pentestmonkey

[PortcullisLabs @portcullislabs]

New release from the team, @pentestmonkey has ported udp-proto-scanner to Python and given it a bit of a polish: https://t.co/TjQqoyZEnR

[PortcullisLabs @portcullislabs]

We did a thing! It's over 10 years since we started working on this but it's still useful today:

https://t.co/ZZKTxlzsTO

Kudos to @pentestmonkey for porting the Perl bits to a modern language.

#aix #solaris #linux #unix #security

[Kevin Robertson @kevin_robertson]

[Blog] Beyond LLMNR/NBNS Spoofing - Exploiting Active Directory-Integrated DNS https://t.co/WvyIADM1j6
Also, #PowerShell ADIDNS spoofing functions added to Powermad https://t.co/jRJgtnb9Ws

[Dominic Chell 👻 @domchell]

Congrats to @nmonkee @iantshaw @alexjplaskett and all the team at @mwrinfosecurity on their acquisition by @FSecure https://t.co/jGcxb2l8nl

[pentestmonkey @pentestmonkey]

Ben Heck's staring a new youtube channel. I was a huge fan of the Ben Heck Show. https://t.co/ljYyiaER6K

[Wezmaster @wezmaster]

AD ACL Scanner. A tool with GUI used to create reports of access control lists (DACLs) and system access control lists (SACLs) in Active Directory
https://t.co/lBPHJ3D2l6

[Will Schroeder @harmj0y]

So excited - here's my updated "Guide to Attacking Domain Trusts" https://t.co/5S4Bxn9hLM ! Was a blast to write

[x0rz @x0rz]

Getting command execution on MSWord without any Macros 😈 https://t.co/36mNFDDXb2 #windows #maldoc #malware

[sqlmap: Automatic SQLi and DBMS takeover tool @sqlmap]

Happy to announce that the sqlmap project has been sponsored by @netsparker web application security scanner

[NCSC UK @NCSC]

Cyber security community! Opportunity to contribute to the foundations of the future cyber security profession https://t.co/3RWM9Wcnm8

[Niek Timmers @tieknimmers]

Our paper about Escalating Privileges in Linux using Fault Injection is available online: https://t.co/RfHGAxwH91 ! @pulsoid #FDTC17

[Binni Shah @binitamshah]

awesome-windows-domain-hardening : Curated list of awesome Security Hardening techniques for Windows: https://t.co/YZTDmKYosR cc @PaulWebSec

[Hak5 @Hak5]

Our launch event for the #BashBunny will be March 2nd, 8pm. More info and RSVP here! https://t.co/pDLy9iz0r2

[NCC Group plc @NCCGroupplc]

A step by step guide on how to decrypt SCOM “RunAs” Credentials https://t.co/P6VlCykNom

[b33f | 🇺🇦✊ @FuzzySec]

FuzzySec -> Anatomy of UAC Attacks - https://t.co/T4FfvEwcMO

[Chris Nickerson @indi303]

TO ALL in InfoSec who overuse Advanced. "It is in the flawless execution of the basics that we find world class success." - Lombardi

[Florian Roth ⚡️ @cyb3rops]

McAfee SiteList.xml AD privilege escalation
> should be part of every priv esc checklist
> ICYMI like me https://t.co/aDuGSvu8J8

[Piotr Kijewski @piotrkijewski]

Nice set of posts on a threat hunting reference model proposal https://t.co/8e5zcPnGNA https://t.co/O62oLdQj6c https://t.co/CXUzCLcsTR

[WithSecure Labs @FSecureLabs]

Another @metasploit module from @ukstufus, for storing groups, computers and user memberships from AD in a SQLite DB https://t.co/rdBe8nb8Us

[pentestmonkey @pentestmonkey]

View RDP session from pcap (and private key). Amazing work @CTXIS. Thank you for sharing. https://t.co/xWtPfqBUQr