Red Cursor

Red Cursor Your Point for Security

[Red Cursor @RedCursorSec]

@nullenc0de Also I am pretty sure this will work on an internal pen test without responder if you name your computer autodiscover because it will register with internal DNS. So any client looking for autodiscover will send you their creds.

[Red Cursor @RedCursorSec]

@nullenc0de Nice! out of curiosity do you get a connection only when an email client sets up a new email account profile or is it every time the email client is used?

[Red Cursor @RedCursorSec]

@PS5Stockcomau Already gone in less than 2 minutes

[Red Cursor @RedCursorSec]

@AlannahGuo @BSidesCbr @ACTHealth MVP

[Red Cursor @RedCursorSec]

@AlannahGuo try this
https://t.co/X51shzqqmM

[Red Cursor @RedCursorSec]

Check out our new blog bypassing crowdstrike https://t.co/zbJk31m2FP

[Red Cursor @RedCursorSec]

Women in Cybersecurity don't forget you can still get tickets (free) to attend the talks @0xCC_sh here https://t.co/M0rT4Cekyz

[0xCC @0xcc]

Not that we need a special day to celebrate all the awesome women in our lives but #IWD2020 is a great excuse to give praise! 🎉🎊

We'll start!
#InternationalWomensDay #InternationalWomensDay2020

[Red Cursor @RedCursorSec]

For International Women's Day Red Cursor are sponsoring @0xCC_sh a free training course for all women in infosec/cyber security.
We are proud to support and empower women to follow their passion, whatever that may be.
https://t.co/VXX3BhDBuf show your support

[0xCC @0xcc]

We’re ecstatic to announce
@RedCursorSec
as our latest Gold sponsor!

They’re passionate about breaking down barriers to foster a more positive and empowering environment for women in cyber security and we’re so glad to have their support!

More info: https://t.co/pcPJcCbbCL

[Red Cursor @RedCursorSec]

Remote Code Execution on Exchange due to static encryption key. https://t.co/wBhPYKJgp8

[Red Cursor @RedCursorSec]

Michael has put together a working #PoC for CVE-2020-0668 that allows privilege escalation on all versions of Windows up until the Feb 2020 patch Tuesday. Check it out here: https://t.co/roxERItx9X #netsec

[Tavis Ormandy @taviso]

This is a big deal. Just answering a call from an attacker could completely compromise WhatsApp.

[Red Cursor @RedCursorSec]

Another bypass https://t.co/ntwVuwFMnM

[r0lan @yeyint_mth]

#rednote ProtocolHandler are also work with obf
rundll32 url.dll,OpenURL http://^2^8^9^9^9^0^9^3^8^0^/
rundll32 url.dll,OpenURL file://^C^:^/^W^i^n^d^o^w^s^/^s^y^s^t^e^m^3^2^/^c^a^l^c^.^e^x^e #redteam

[Red Cursor @RedCursorSec]

Interesting AppLocker bypass https://t.co/Elzy6rH8Vh

[bohops @bohops]

Interesting way to call a COM CLSID:

rundll32.exe -sta {CLSID}
rundll32.exe /sta {CLSID}

Use this with @subTee's #squiblydoo COM Hijack method for a default AppLocker Bypass

Haven't found any sec-related resources with -sta (single threaded apartment)

Anyone seen this before?

[Red Cursor @RedCursorSec]

Today I learned https://t.co/rYC6K7TJOJ

[r0lan @yeyint_mth]

sometime we forgot native ftp.exe client in windows that can execute system cmd without direct access to cmd.exe #redteam #rednote

[Red Cursor @RedCursorSec]

Adding this one to the toolbox https://t.co/ckQTmYm5l6

[Red Cursor @RedCursorSec]

Very useful proof of concept for demonstrating misconfigured CORS policies https://t.co/XCZoSvigPu

[Red Cursor @RedCursorSec]

By pass locked windows 10 machine just by asking Cortana. https://t.co/ErugA2anrr

[Red Cursor @RedCursorSec]

Good Read!! Pen tester's NTFS tricks https://t.co/ke4kaI4lSB