Scriptmonkey_

Tester of Pens, Ex-Teamer of Red things, now with a more purpley shade. Biker and Recovering Eve-Online Addict. o7

Astro Instagram:

[Scriptmonkey_ @scriptmonkey_]

Bang on Iain! As much as the example in the blog post works, getting c2 over any form of filesystem, is the real gem here.

Even locally for privesc, get a system shell without worrying about proxies for example.

Looking forward to see what folk come up with use case wise.

[@[email protected] @strawp]

This is such a cool C2 channel technique. Use network file share, RDP mapped drives and anywhere else more than one host sees the same filesystem as a C2 channel which really doesn't get logged. Simple but effective!

[Scriptmonkey_ @scriptmonkey_]

@UK_Daniel_Card Does it compute? It's a computer.

If Katherine Johnson is a computer... everything is computer.

[Scriptmonkey_ @scriptmonkey_]

@UK_Daniel_Card People know how to take care of physical things. People suck at taking care of intangible things.

To quote an author I used to watch talking about books: "It requires no batteries, doesn't take time to boot up and if you spill your diet mountain dew on it, all it'll get is wet."

[Scriptmonkey_ @scriptmonkey_]

@Steel_Con Happy Yorkshire day!!! 😊

[Scriptmonkey_ @scriptmonkey_]

@UK_Daniel_Card I have seen defensive AI convinced something was benign when it was not, more often than offensive AI being used imo. That's possibly the bigger threat right now.

[Scriptmonkey_ @scriptmonkey_]

Sadly I didn't make it to the after party so couldn't give my AI Karaoke entry a shot but shared a bit here as its bloody good imo (context: I lead an internal purple/red team) a stonking conf once again, lush seeing so many familiar faces, hope to see you all again next year!

[Scriptmonkey_ @scriptmonkey_]

Another year another cracking @steelcon honestly love this conference so much. Outstanding talks, and doom played via a 4g modem acting as a webcam over LTE - thats a new life goal for sure :)

[Scriptmonkey_ @scriptmonkey_]

@UK_Daniel_Card Literally having to do "cyber training" around the threat posed exclusively by smart glasses by Meta. meanwhile, i'm walking around the office with my phone out looking like i'm texting, recording all the keyboards and all the screens. 😅

[Lefteris Panos @lefterispan]

Was recently tinkering with DPAPI and CREDHIST and managed to find a way to extract hashes for old passwords and recover them in a new module written for hashcat. Blog -> https://t.co/iX9mn4DdUd

[Scriptmonkey_ @scriptmonkey_]

@rvrsh3ll @T3chFalcon This has "Anything is a sex toy if you try hard enough" vibes.

DLP isn't going to stop you if you intend to exfil. It will prevent accidental derps, it will hamper illegitimate efforts, but it won't prevent a determined individual from achieving it.

[Scriptmonkey_ @scriptmonkey_]

@0xTib3rius @WifiRumHam May I offer you a name suggestion for your merger? The Cyber Reconnaissance and Autonomous Penetration Suite for Heuristic Offensive Operations and Testing #CRAPSHOOT

[Florian Roth ⚡️ @cyb3rops]

This is bad.
Putty level bad.
https://t.co/3w1C8YiBu8

[Scriptmonkey_ @scriptmonkey_]

@TNHillbillyHack @domchell Which ethically brings it back to assume breach. Humans will fold under the right pressure, if you want to simulate the coercion of someone. You read them in and use them as your foothold. I don't need to bribe a call center employee, they just have to follow my instruction.

[Scriptmonkey_ @scriptmonkey_]

@a4ds5t @JackRhysider @ProtonMail Seems silly raising this as a counter point when it doesn't account for 99% of your email traffic.

[Scriptmonkey_ @scriptmonkey_]

@Officialwhyte22 D. As you asked - most likely. The chance my mate's wifi is being targeted is low and ET will generally affect other devices and is usually accompanied by deauths. So they're targeting my device only, but at my mates? Nah.

It's D or E. My mates being a dick and fucking with me.

[Scriptmonkey_ @scriptmonkey_]

@kanavtwt If its an ancient HP ILO it's USERID.

[Scriptmonkey_ @scriptmonkey_]

@UK_Daniel_Card I don't get the need for rage. Surely it's...

From ffmpeg: "you're welcome to submit a pull request".

From sec researcher it's: "I've given <project> all the time I'm willing to. Time for a CVE."

From user it's: "ffmpeg has a vulnerability we do not like, we'll switch to xyz"

[Scriptmonkey_ @scriptmonkey_]

@supersat @Disneyland The arrowhead logo denotes property of HMG.

https://t.co/WNhkIydRHe

[Scriptmonkey_ @scriptmonkey_]

"OpSec is hard" if you think this and you've only worked on an external team.

Just wait until you work for an internal one. 😅

[Scriptmonkey_ @scriptmonkey_]

@hakluke Might be too in the weeds but the fact that for some reason it appears the world has happily renamed DLL Hijacking to DLL sideloading despite its specific meaning, and this grinds my gears.