Bitmap

Security Researcher | Red teamer | Bug Bounty hunter

[Tracehunt @TraceHuntLabs]

We've all done it: upload a webshell, get code execution and move on. But what if your target is being monitored ?
In our latest blog post, we tackle webshell tradecraft in monitored networks including disk activity, process context, and HTTP patterns.

https://t.co/X4Ob3khaUP

[Tracehunt @TraceHuntLabs]

SSH access to a system ?

🎯 Red teamers: Avoid interactive sessions to prevent entries in the `last` log. Run commands with `notty` by appending your cmd to the SSH command.

🛡️ Defenders: Monitor unexpected origin IP's in the `last` log and modifications to `/var/log/wtmp`

[Tracehunt @TraceHuntLabs]

SNMP enum in legacy/OT networks:

🎯 Red teamers: use specific MIB's that contain useful info such as `HOST-RESOURCES-MIB::hrSWRunParameters` instead of cycling the entire MIB range with snmpwalk

🛡️Defenders: Flag snmpwalk packets starting with 0x30 and containing 0xA1 or 0xA5

[Tracehunt @TraceHuntLabs]

Just published a breakdown of 3 easy red team mistakes SOC or threat hunters spot instantly.

Noisy recon, weird process chains, offensive infra misconfigurations, ... (+TraceHunt shots 👀)

If you’re in red/blue teaming or threat hunting, Check it out👇

https://t.co/zalIWgVymc

[Tracehunt @TraceHuntLabs]

If you’ve ever done an engagement and thought “wow, that command was loud,” this one’s for you.

I wrote about the OPSEC gap in current offensive trainings and how we’re tackling it with TraceHunt.

If you want your ops to be cleaner than your `/tmp/`:

https://t.co/KvmRKt0W2D

[Bitmap @real_bitmap]

@MattiBijnens @intigriti @IntelSecurity @arneswinnen Congrats! 🔥

[Bitmap @real_bitmap]

@intidc Proficiat!

[Bitmap @real_bitmap]

@bpauwels @intidc Initial entry is quasi altijd een succes als tijd geen limiterende factor is voor de aanvaller. Snelheid van detectie en isolatie/damage control van threats zijn de zaken die het verschil maken in dit soort scenario’s

[Bitmap @real_bitmap]

@honoki Maybe something is going wrong with PoE ? Hard to tell if it’s this random 😅

[Bitmap @real_bitmap]

I’m so grateful to be invited to the #1337up0822 LHE hosted by @intigriti and @TheParanoids. I’ve met a lot of new faces and had a blast throughout the entire event. Cherry on top was today’s visit to the BelgianGP F1 race 🏎 Congrats to the winners and see you next time ✌️

[Bitmap @real_bitmap]

@renniepak @honoki @MrTuxracer @plenumlab @hgreal1 @bug_dutch @kapytein @arneswinnen @p4fg @ITSecurityguard @MiguelSantareno @RobinZekerNiet @securibee @Kuromatae666 @StanFaas @BitK_ @aroly @SanderWind @marcolivermunz Thank you! 🔥

[Bitmap @real_bitmap]

@intidc @HLN_BE Inderdaad. Alleen al de spanningen in de privésfeer die dit stuk kunnen veroorzaken. Ik ben ook geen voorstander 😖

[Bitmap @real_bitmap]

@MattiBijnens @intigriti @arneswinnen @honoki Congrats! 💰💰

[Bitmap @real_bitmap]

@StanFaas @intigriti Happy hunting!

[Bitmap @real_bitmap]

@intidc Gps heeft enkel “routes via beschaving” aanstaan denk ik

[Bitmap @real_bitmap]

See you next year! 🔥🔥

[iQimpz @iqimpz]

I’ve had a amazing time meeting all of these amazing people! Truly a great group!
@jellemulck @renniepak @SanderWind @real_bitmap @holme_sec @0xJeti @jerreljosee @p4fg @bug_dutch @YanZaX @Z3r0day0x41 @m_milux @0xkasper @GrumpinouT @StanFaas @plenumlab @Kuromatae666 @BitK_

[Stan🦉 @StanFaas]

At the Hacker Mansion with @jellemulck @renniepak @SanderWind @real_bitmap @holme_sec @0xJeti @jerreljosee @p4fg @bug_dutch @YanZaX @Z3r0day0x41 @m_milux @0xkasper @GrumpinouT @iqimpz @plenumlab @Kuromatae666 @BitK_

Powered by @intigriti

[Bitmap @real_bitmap]

@renniepak @pxmme1337 and @Kuromatae666 will take care of the baguettes

[Bitmap @real_bitmap]

Already looking ⏩ to see you guys 🍻🔥

[Youssef Sammouda (sam0) @samm0uda]

Multiple bugs chained to takeover Facebook Accounts which uses Gmail. ( $42k )

https://t.co/tdXO3u5ddA