Unhandled0xD

Standalone Machine | Offensive Security Researcher, Interested in physics and neuroscience

[vx-underground @vxunderground]

Just found a zero day

If you right click on an executable on Windows, select run as administrator, it will run as administrator

I'm calling it Program2Shell

[Thomas Seigneuret @_zblurx]

Little upgrade on NetExec WMI protocol 🚀

Now NetExec supports SAM, LSA and NTDS dump using only WMI. Thanks a lot to @al3x_n3ff for all the help on this PR (and all the work on NetExec overall, you rock bro 🫶)

[Panos Gkatziroulis 🦄 @ipurple]

Another proof of concept using a Microsoft-signed DLL (rdpbase.dll) to encrypt implants.

✅ No memory patching
✅ no build-specific offsets

https://t.co/HdQyXncoBQ

[0x12 Dark Development @Salsa12__]

Finding Kernel Physical Read/Write Vulnerabilities

New Medium post, in this one I’ll show you how to identify a driver vulnerability that allows reading and writing arbitrary physical memory, without naming the specific driver

https://t.co/OqoIpBg1k5

[0x12 Dark Development @Salsa12__]

Added alternatives to OpenProcess, OpenThread and SuspendProcess!

https://t.co/DZ8kbMy1YY

[Pavel Yosifovich @zodiacon]

New video: basic reversing of a Windows kernel driver.

WESP, the new endpoint security driver in Insider builds, has no device objects and no dispatch routines. Its imports tell you how it really talks to user mode: a filter communication port.

Full write-up: https://t.co/ZWtza7feUt

[Pavel Yosifovich @zodiacon]

Some reflections on coding with AI
https://t.co/JShAxUR9Sw

[Mohammed Ali @CTRLMoh]

"Google it"

جملة قد لا نسمعها بعد الآن...

[Unhandled0xD @trap_handler]

This is sad

[nop @thenopcode]

well...

[Alex Neff @al3x_n3ff]

The AD Grave: Tombstoned objects🪦

If the AD Recycle Bin is enabled, objects are moved to the "Deleted Objects" container if they are "deleted". With the new "tombstone" NetExec module, you can query and restore such objects (given you have the privs).
Made by Fabrizzio🚀

[Stephen Sims @Steph3nSims]

Breaking Windows: Exploring Security Through Kernel Drivers https://t.co/R4TRIYtRtC

[Jonny Johnson @JonnyJohnson_]

Super excited to see WESP land in public preview. I spent the past couple of days reverse engineering wesp.sys and espclient.dll, along with building a consumer POC.

Here is a writeup on my initial analysis: https://t.co/Dmke0xpUx3

GitHub POC: https://t.co/FEb5YTSxwb

[shenetworks @shenetworks]

How it feels watching everyone at DEF CON.

[0xBB @bb_hacks]

Game cheat devs are way ahead of most red team operators

[Unhandled0xD @trap_handler]

@inversecos @DebugPrivilege

[5pider @C5pider]

Had a blast talking with @Teach2Breach about offsec topics :D Take a look!
Especially enjoyed sharing my experience and the amazing people I learned from.

[🕳 @sekurlsa_pw]

scp.exe -S "cmd /c c:\windows\system32\calc.exe" . localhost:.

Or instead of -S use
-o ProxyCommand=

[Unhandled0xD @trap_handler]

https://t.co/oMTqXPQuXc

[Unhandled0xD @trap_handler]

I only need a bug on GitHub that gives me access to modify any repo code and i can takeover the world.

[eversinc33 🤍🔪 @eversinc33]

Had a lot of fun presenting at BotConf! Talk is already available on YouTube :)

https://t.co/j9quOv6oOC

[inversecos @inversecos]

NEW XINTRA COURSE!!!🥳
Windows Kernel: Offensive, Defensive & Reverse Engineering by @Idov31

https://t.co/3qiJyib7ro

Build an EDR and rootkits from scratch while mastering the Windows kernel.

Over 70 videos and labs covering:
> Build your own EDR (detection + prevention)
> Rootkits & offensive tradecraft
> Reversing Windows kernel & drivers
> Kernel callbacks, ETW, minifilter and more

There are preview videos too if you wanna see some snippets of the course content ;)

This course is instructed by Ido Veltzman (@Idov31), a senior security researcher specializing in reverse engineering, operating system internals, vulnerability research, and exploit development.

His work spans UEFI, hypervisors, kernel, and user mode, where he has developed advanced evasion, persistence, and injection techniques.

@XintraOrg