Thomas Hackner

Security Enthusiast / Physical Red Teamer / IT Red Teamer / Social Engineer / Teacher / Public Speaker / Author

[Elliot @ElliotKillick]

Need to go under the radar downloading #mimikatz (and other suspect payloads)? Then newly discovered #lolbin "C:\Windows\System32\Cmdl32.exe" (signed by MS) is for you. It's like a new certutil.exe but absolutely unheard of by any antivirus software!

[Elliot @ElliotKillick]

I found out "C:\Windows\System32\WorkFolders.exe" (signed by MS) can be used to run arbitrary executables in the current working directory with the name control.exe. It's like a new rundll32.exe #lolbin but for EXEs!

[Beau Bullock @dafthack]

Today we are releasing GraphRunner, a post-exploitation toolset for M365 and Entra ID accounts that myself and @424f424f have been building for the last few months.

Read the blog post here: https://t.co/fWKFcLgld5

Code is here: https://t.co/yDhdkhbO7q

[Thomas Hackner @TomHackner]

@jaysonstreet @defcon We bumped into each other twice but never really got the chance to really talk. Wish you all the best and thank you for all your work for the community, people and companies out there!

[Thomas Hackner @TomHackner]

@RedTeamVillage_ @Gabrielle_BGB @penterasec Is it still possible to pick some up tomorrow (Sunday)?

[Thomas Hackner @TomHackner]

@_wald0 @StJudeResearch Nice, are you selling those in combination with the fundraiser at Defcon as well?

[Thomas Hackner @TomHackner]

@MotionMarkus 😎

[Thomas Hackner @TomHackner]

@MotionMarkus @manbi40716711 Then a lot of work would await you with my 66 followers 😄 @MotionMarkus and @manbi40716711
Followed @InvsbleFriends already since the start. Love the project and the vibe!

[Scott Rose (@rprose.bsky.social) @rprose]

A suspect has been detained in yesterday's theft from the Tretyakov Gallery. The man, whom police say has previously been held for drugs possession, walked off with Arkhip Kuindzhi's "Ai-Petri. Crimea" in front of confused visitors
https://t.co/FilXU0YDU4

[Thomas Pfeiffer @hackfleisch_007]

NIS-Gesetz - los gehts https://t.co/XTvLZxNiG3

[Thomas Hackner @TomHackner]

@__phw I think, we have included this issue into every second external pentesting report in the last 5 years. Sometimes it helps, but most new sites do start off with externally included scripts and fonts, again.

[Philipp Winter @__phw]

New study on the reliability and security of open proxies: https://t.co/qca6G4Rd2b As expected, they're wildly insecure. Stay away. Tor is doing better only because @torproject has dedicated volunteers who monitoring the network diligently.

[Thomas Hackner @TomHackner]

@smfurnell Thx for the opportunity to talk at #SSW8 and congrats to the successful event. It's always fun to come over.

[Thomas Hackner @TomHackner]

Added SMBRelay for SMB3 on Windows 2012 Server in conjunction with Responder and Metasploit to this year's #APT6 class

[Thomas Hackner @TomHackner]

#openlocks.at is rocking at #bsidesvienna today.

[Metasploit Project @metasploit]

Today's the day - RIP MsfPayload & MsfEncode, long live MsfVenom: http://t.co/xjDZBbQ2lu

[Thomas Hackner @TomHackner]

Added a full AD environment, RDP PtH and Token Impersonation to the lab to pimp up the #APT6 class ... Looking forward to it!

[Thomas Hackner @TomHackner]

@pdowland Haha, thanks. I have to try that as well. :) Haven't seen anything alike here, yet, though.

[Armin Wolf @ArminWolf]

RT @RazulAllah: "Welche Farbe ist eigentlich 'Hautfarbe'? -”

[Thomas Hackner @TomHackner]

Preparation for #APT6 has begun ...