Fred

:joy_cat:

[ringzerø.training && @[email protected] @_ringzer0]

🎩 Learn how to automate your red-teaming tools and extend testing frameworks with @karimnathoo's training, the companion course to the bestselling book "Black Hat Python" by @nostarch is for beginner and seasoned Python programmers alike!

🎟️ https://t.co/RSdU3w0F4H

🧵 11/12

[Xanthus Security @XanthusSecurity]

New post from @louisepowel1 regarding phishing infrastructure tradecraft. Worth the read! You can check it out here:
https://t.co/fzHJZRJlO6

[Fred @thryb]

GJ team @XanthusSecurity!

[Xanthus Security @XanthusSecurity]

Reducing attack surface is a never ending battle. In this instance exposing a management interface to the internet is never a good thing. Patch up for CVE-2020-24384!

https://t.co/rLSVS8BFdt

[Jas502n @jas502n]

Arbitrary File Read vulnerability in VMware vCenter(Unauthenticated)

e.g.
https://t.co/0ostXyxVs2:\ProgramData\VMware\vCenterServer\cfg\vmware-vpx\https://t.co/ElzpY1UFKf
https://t.co/0ostXyxVs2:\Windows\win.ini

Poc from:
https://t.co/sUXgv6zjSN

[Fred @thryb]

Yes please! Amazing work once again!

[Burp Suite @Burp_Suite]

Coming soon, the Burp Suite Inspector!

Easily analyse HTTP/WebSocket messages, manipulate layers of encoding, and apply changes back to the editor.

A feedback welcome.

#Tease

[Fred @thryb]

@A_P_Delchi @rana__khalil So people should just work 100s of hours to make content and certifications as a non-profit organization? You make no sense. Not saying they totally prove your skills but one shouldn’t bash on stuff one can’t even achieve....

[Undev Ninja @0x00dtm]

We all know Sysmon has many great features. But did you know, there is a hidden one that allows you to execute code in the kernel? Here's an example that disables lsass.exe's PPL! Many thanks to @SBousseaden for verifying.

[Clayton Smith @[email protected] @argilo]

Having lots of fun in the ARRL June VHF contest. #hamr

[Rana Khalil 🇵🇸 @rana__khalil]

1/ I'm excited to announce that we will be holding our first remote meetup on June 28th from 1PM - 4PM. Samuel Wong from @XanthusSecurity will walkthrough the solution for the Monteverde Active box.

https://t.co/sCRm3u9MSp

[Xanthus Security @XanthusSecurity]

Check out our new blog, amazing post on creating custom obfuscation to evade Windows Defender.

https://t.co/45r7sI4ygi

[Fred @thryb]

@Burp_Suite Ugh... please yes!

[Burp Suite @Burp_Suite]

How would you like it if @Burp_Suite could render non-printing characters, like this?

Note that this feature would be optional, off-by-default.

[Austin @YouDownWithTTPs]

Today I'm releasing a TTP driven threat hunting exercise/CTF. This was inspired by the RTHVM from @resolvn from last year's DefCon PHV. Big thanks to @Cyb3rWard0g from provide the APT3 Mordor datasets and HELK projects. Check it out here https://t.co/KpFQMRTLkD

[Fred @thryb]

@rana__khalil @schertzt Lol book it!! You got this :)

[Fred @thryb]

@rana__khalil Let’s go!!! So happy to see that “0”. You got this, now book it 😝

[Fred @thryb]

Thanks god!

[Burp Suite @Burp_Suite]

ICYMI, Burp Suite Pro 2020.2 brings back the instant “Do active/passive scan” actions from 1.7.
https://t.co/70MAbeUhDE

[Xanthus Security @XanthusSecurity]

Aren't the days gone where vendors hide credit for #vulnerability disclosures behind customer portals 🙄 *cough* @Tanium *cough*

[Xanthus Security @XanthusSecurity]

Wishing everyone a happy new year!

[Fred @thryb]

@rana__khalil AWAE is on my list too and you’re going to nail OSCP I’m sure of it 😄