SirFIS

trying to be a little less bad at red teaming than I was yesterday he/him

[TrustedSec @TrustedSec]

#5 Full Disclosure: A Look at a Recently Patched Microsoft Graph Logging Bypass – GraphNinja by @nyxgeek https://t.co/ksed6rmizd

[Patrick Wardle @patrickwardle]

A side effect of 🍎's privacy mindset: in-memory payloads remain largely invisible/inaccessible to macOS security/3rd-party tools

Apple nuked their reflective code loading APIs - but was that enough? 🫣

From #OBTS v7:
"Restoring Reflective Code Loading"
https://t.co/VtREKszXN4

[SirFIS @sir_FIS]

@patrickwardle What issue did you have using the chained fixups?

[SirFIS @sir_FIS]

@__invictus_ @malcomvetter One objective is just the “avoid eviction” where post DA you deliberately trigger an alert and the team needs to evict you completely

[SirFIS @sir_FIS]

@TheXC3LL AWESOME DUDE. 🔥🔥🔥

[Rich Warren @buffaloverflow]

Today, we're releasing NachoVPN, our VPN client exploitation tool, as presented at SANS #HackfestHollywood 2024 🌮🔒

Find the details on the @AmberWolfSec blog, along with the individual advisories, including a not-yet-fully fixed PaloAlto GlobalProtect client RCE👀

[SirFIS @sir_FIS]

@filip_dragovic Never said it was first try 😂😭

[SirFIS @sir_FIS]

Is there a word for the sweet satisfaction of a poc working immediately followed by the dread of having to fully implement said poc ?

[SirFIS @sir_FIS]

@offensiveninja

[mRr3b00t @UK_Daniel_Card]

chrome://net-export/

[Lefteris Panos @lefterispan]

Wrote a small C# tool that is able to make a network token using a certificate. Comes handy in RTs ;) https://t.co/XZOfbamxMv

[ali 🕷️ @offensiveninja]

This is super handy for generating nginx configs on the fly, another reason not to use apache 😂https://t.co/GPPKfHlnuR

[Dominic Chell 👻 @domchell]

Here's a sneak peak of a new feature we have coming up in the next #Nighthawk release https://t.co/JrNk0kph5b
@peterwintrsmith
#goodbyeyara

[Outflank @OutflankNL]

🚀 We're hiring a DevOps/Cloud Engineer at Outflank!

Join us to build and manage complex Azure environments that deliver our OST toolkit.

Skills: Kubernetes (AKS), GitOps, IaC, Tekton, Python💻 It's NOT an offensive role!

Based in NL or a time zone-friendly region? Let's chat!

[SANS Offensive Operations @SANSOffensive]

.@buffaloverflow & @johnnyspandex are discussing how to exploit corporate VPN clients for remote root & SYSTEM shells. Join to see live demos on Windows & macOS vulnerabilities & how attackers gain control w/ just one click.

Register Free: https://t.co/keBn9S7HNK

#SANSHackFest

[Cube0x0 @cube0x0]

Don't we all get to the point where all you want to do is capture and relay NTLM and Kerberos authentications in a BOF?

It's just faster to write a capture & relaying framework in C for ntlm, kerberos, dcom, smb, http, mssql with native Windows support than fixing impacket.
Available for 0xC2 clients in the coming update

[SirFIS @sir_FIS]

@offensiveninja 🔥🔥🔥🔥

[SirFIS @sir_FIS]

@x86matthew @MDSecLabs @elastic It’s been great working with you man ! Best of luck I know you’re gonna smash it 💪🏽

[SirFIS @sir_FIS]

@matteomalvica @OutflankNL @MDSecLabs It’s always great to see you dude! Wish we had more time to catch up

[SirFIS @sir_FIS]

@max__grim @c3c Karaoke was pretty rad too @passthehashbrwn

[SirFIS @sir_FIS]

Hands down the best offensive security conference. Free exchange of tactics , findings and awesome ideas. Always come away full of inspiration but this one was on a whole new level

[Marc Smeets @MarcOverIP]

And thats a wrap of #RedTreat 2024

2 days of hardcore red teaming research and meeting other rt researchers and operators. Mind still 🤯 processing some of the discussions!

Thanks to all the attendees and speakers for being present at our little conf! /c @MDSecLabs @OutflankNL

[SirFIS @sir_FIS]

Obligatory shout out @max__grim and @c3c for the awesome badges. #mamamia