Keelyn

Current RedTeamer... Avid hunter of all digital malice. Developing tools of the trade & blogging.

[HackGit @hack_git]

SMShell

PoC for an SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers.

https://t.co/jqTimNsAtE

#cybersecurity #infosec #pentesting

[LakeShowYo @LakeShowYo]

RETWEET IF YOU LOVE RUI HACHIMURA

[freddy @falsneg]

Load your DLL payload with a MS-signed executable; deploymentcsphelper.exe, by setting %windir% to C:\dummy and planting your lib as dbghelp.dll under system32 of that dummy folder #lolbin #lolbas

[Obscurity Labs @ObscurityLabs]

A successful conference at @BSidesAugusta, great talks, amazing time meeting new people and seeing great companies like @FortyNorthSec, @SpecterOps, @elastic, @sansforensics , @securityonion, and others!

[Keelyn @real_slacker007]

@Klitz_Playhouse God damn you sexy AF black queen

[Keelyn @real_slacker007]

@JoyTaylorTalks @JoyTaylorTalks you my crush

[Keelyn @real_slacker007]

@elonmusk Pat Tillman RIP

[Keelyn @real_slacker007]

@fdiskyou Congratulations

[hacker.house @hackerfantastic]

CVE-2020-14871 - well that was easy, SSH pre-auth RCE on Solaris through libpam. As a PoC trigger you need to ensure the remote host is using keyboard-interactive and then reach the vulnerable code path by specifying a blank username to get PAM to hit the vulnerable function.

[Keelyn @real_slacker007]

@SFY @sfy Lavar Arrington, what you were describing during the show is called “forced attrition”

[Keelyn @real_slacker007]

Found a really cool story about a kid who’s trying to raise money to buy herself a service dog. Check it out https://t.co/ddLzFp04UV

[Keelyn @real_slacker007]

@hacks4pancakes 👌🏽👌🏽🔥

[Keelyn @real_slacker007]

Thanks.. Glad you found it useful!! https://t.co/u3BIWtov9W

[Keelyn @real_slacker007]

Great Announcement by Obscurity Labs https://t.co/Xgpyiu8VG0 👌🏽👌🏽

[Obscurity Labs @ObscurityLabs]

We are pleased to announce Obscurity Labs is opening its doors! Please the press release for more information on the launch: https://t.co/TGtKhPFMQ9

[Keelyn @real_slacker007]

Any & All support &/or donations help!

[Andy Robbins @_wald0]

Folks, this cause is extremely important to me. Muscular Dystrophy killed my mother and is now killing my sister. This year we want to raise $50,000 to fight this terrible disease. Please donate and share this link: https://t.co/VrF0bgwxj6

[Keelyn @real_slacker007]

@MalwareJake 😂😂😂

[Keelyn @real_slacker007]

Thanks.. Glad you found it useful!! https://t.co/u3BIWtov9W

[Antonio Quina @st3r30byt3]

I had somehow missed this awesome project by @Killswitch_GUI and @real_slacker007

https://t.co/8Cn2No4xXj

[Jeff McJunkin @jeffmcjunkin]

"Non-root can't bind to ports <1024"? Not since Linux 4.11 in May 2017:

$ nc -nvlp 1
nc: Permission denied
$ echo 0 | sudo tee /proc/sys/net/ipv4/ip_unprivileged_port_start
0
$ nc -nvlp 1
Listening on [0.0.0.0] (family 0, port 1)

(Ctrl-F "port_start" in https://t.co/vOTLqTdzVF)

[Keelyn @real_slacker007]

😍😍 https://t.co/yVNQw0zvwL

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

CredSSP with "Default Credentials Delegation" keeps passwords in client memory, but you must *also* secure the target🙃
Impersonation/Admin/System/Tickets (Golden or not...) lets a standard user (or...) to get its password🤪
Not in #mimikatz, try #kekeo - https://t.co/LkNLbK2GEC

[Harley Lebeau @r3dQu1nn]

Persistence, Persistence everywhere. Oldie but goodie.
https://t.co/6nsY9ORUMi