Richard Davy

Penetration Tester. CREST CCT | OSCE | OSCP | OSWP

[Richard Davy @rd_pentest]

Bypassing AMSI in Office 365 x64 x86 - https://t.co/UFjgeFzCTX

[Richard Davy @rd_pentest]

@peter_levy Please have a look at this piece in HDM, worth picking up for Look North. Good wholesome news
‘I was the classic binge drinker’ – Man who had his first hangover at 14 now on a mission to grow ‘Alcohull Free’ sober movement for Hull - Hull Live

[ZOYA ✪ @HeyZoyaKhan]

Microsoft is Offering FREE Azure 2025 Certification Courses!

No Fee, Completely Free

These 20 Courses Includes Video Tutorials, Hand's on Labs and Notes.

Don't miss these courses if you want to make your career in 2025:

[Mindset Machine  @mindsetmachine]

Powerful technique to quickly improve how you speak

[Richard Davy @rd_pentest]

I got asked to put a quick demo together after a recent engagement to show how easy it is to abuse disconnected RDP sessions from local admin. Thought I’d share in case useful

https://t.co/KqfW3cAvrL

[Cobalt Strike @_CobaltStrike]

Curious about Cobalt Strike's #UDRL capabilities? Get a walkthrough on how to easily develop custom loaders.
https://t.co/iETQQw9AEq

[Richard Davy @rd_pentest]

serviceui.exe - a useful lolbin I came across on a pentest a while back that I thought I'd share.
https://t.co/XTqJpdgOpp

@Oddvarmoe #lolbas #lolbin

[Aurélien Chalot @Defte_]

DonPAPI users I have pushed quite a few things lately! Hopefully you'll like it and here is a recap (1/x)

[0xor0ne @0xor0ne]

Intro for beginners to embedded devices reverse engineering

Ghidra setup: https://t.co/Nwwtah9Aco
Tools: https://t.co/CVbjCFB57Y
Firmware extraction: https://t.co/Dnz3Xr7WJa

Credits @voidstarsec

#reverseengineering #infosec

[Denis Laskov 🇮🇱 @it4sec]

Windows Internals Crash Course (62 minutes from the creator of x64dbg) - because you’ll find Windows in cars, robots, and manufacturing IoT. 😎💻🛠

Course: https://t.co/P344UOknC0
Slides: https://t.co/xqiLVV3CVK
Materials: https://t.co/5NXZxwKV92

[Clandestine @akaclandestine]

Microsoft Copilot: From Prompt Injection to Exfiltration of Personal Information · Embrace The Red https://t.co/nmWfVU5RPb

[PoliticsJOE @PoliticsJOE_UK]

“I am a very innocent man” - Donald Trump

[Marshall';--🐼🍌 @MJHallenbeck]

🚨 #NetExec v1.2.0 (codename "ItsAlwaysDNS") has been OFFICIALLY released.
There are too many amazing features, modules, and bugfixes to talk about all of them (just look at the notes 🤯https://t.co/qceGGpRKSi), but the codename is because you can now specify a DNS server!

[Winslow @senzee1984]

My new article revisits classic technique Reflective Loading, and explains my tool InflativeLoading.

https://t.co/qVgBI2bsZO

Thank @0xBoku @MalDevAcademy @stephenfewer @hasherezade and all other authors(and their articles/tools/projects) for the inspiration and help

[Andrew Oliveau @AndrewOliveau]

This is a great blog by @Tw1sm

Tldr; Compromise workstations by coercing machine account HTTP authentications and relaying them to LDAP to set shadow credentials on the computer object. Then extract the NT hash, create a silver ticket, move laterally 🔥

https://t.co/PJWolaL5VL

[Richard Davy @rd_pentest]

@axainsurance You guys alright over there? I know prices are going up, but with 0 claims that's taking the p*ss. Even with you £131 loyalty discount 🤣

[Nicolas Krassas @Dinosn]

Buffer Overflow in TP-Link Tapo C100 Home Security Camera https://t.co/MlUuLu1agw

[EchelonFront @EchelonFront]

Don’t rely on motivation.

[Luke Kavanagh @LJKavster]

I've used Evilginx plenty of times for engagements and unfortunatly have seen it abused in the wild.
Decided to make a post on how to protect against modern phishing attacks using different methods - inspired by @merill
https://t.co/eJmww2mI73