watchdog

| Hacker | CTF Player | OSCP | PT1 | Specter Ops ATRTO | studying for HTB CAPE and ZeroPoint CRTO

[Clandestine @akaclandestine]

GitHub - portbuster1337/Atlas: Cross-platform network execution toolkit (SMB/Kerberos/WMI/LDAP/DCSync) built on TrustedSec's Titanis - NetExec-style workflow in C# · GitHub https://t.co/9BPNMgKhoi

[Tom Dörr @tom_doerr]

Draws network diagrams with a drag-and-drop editor and exports them as code or images.

https://t.co/1T5pa9wvoU

[Smukx.E @5mukx]

DLL Sideloading and Proxying in Red Team Operations

TLDR: Find sideloadable DLLs with ProcMon and x64dbg, then build proxy DLL that forwards every export to the real library while the implant runs behind it.

Blog:- https://t.co/I9voBCYtdk

[SEKTOR7 Institute @SEKTOR7net]

Intercept Windows Named Pipes comms with HTTP proxy.

pipe-intercept - a tool by Gabriel Sztejnworcel (@sztejnworcel)

Source: https://t.co/XG9kA48GVC

#redteam #blueteam #maldev #malwaredevelopment

[Fady Moheb @N1NJ10_]

Tools like Snaffler are great, but crawling SMB shares creates a telemetry nightmare. You instantly light up the SIEM with :

- 5140 / 5145 (Network Share Access)
- 4656 / 4663 (Object & File Access)

So I built Invoke-WindowsSearch to query the native Windows Search DB (OLE DB) directly via WinRM/RPC, It extracts the targets without touching the actual files, completely bypassing the 4663 and 5145 detection footprint.

Trade-offs: Requires the WSearch service (disabled by default on Server OS) and lacks complex regex capabilities. Know your environment before execution.

#RedTeam #ActiveDirectory #OPSEC #ThreatHunting #PowerShell

[Nicolas Krassas @Dinosn]

Helping AI Agent become an awesome practical hacker! https://t.co/wBMV0jmdMK

[Pingiskok @pingiskok]

Every JWT writeup online covers 2–3 attacks and stops.
I got tired of jumping between 40 blog posts, so I wrote the whole thing. All in one place.
https://t.co/iCSzQ4GjcS

#infosec #appsec #bugbounty #websec #jwt

[Bad Sector Labs @badsectorlabs]

Gone are the days of risking a Rubeus monitor run (even via the amazing BOF[.]NET by @_EthicalChaos_ ) in your conquest beacon. @virtualloc is crushing it!

https://t.co/CckrSvvv43

[Swissky @pentest_swissky]

The 13-Stage Scan Pipeline Inside Defender - @HackingLZ

A complete reverse engineering breakdown of mpengine.dll — the monolithic engine behind Windows Defender. Every file scanned on a Windows machine flows through this single 14.3 MB binary.

https://t.co/zAkRoOJj9S

[Aurélien Chalot @Defte_]

Thanks to Azox, it is now possible to use psexecsvc (https://t.co/GcOcNJGraD) through a socks proxy like ntlmrelayx allowing executing system commands via a trusted service, as NT System, and evading EDR's. Also thanks to @HackAndDo for his fixes :D

[SEKTOR7 Institute @SEKTOR7net]

SockTail - connecting target via a Tailscale network

Red Team Operators should find it useful.
A tool by @Yeeb_

Source: https://t.co/PCVitHGRTJ

#redteam #blueteam #maldev #malwaredevelopment

[Swissky @pentest_swissky]

MSSQL Silver Tickets and Token Privileges - @xct_de
https://t.co/nRczlCmvgS

[mthcht @mthcht2]

LOLFSAAS

Living off Free SaaS

Hundreds of SaaS platforms with free tiers, documenting abuse surface, opsec risks, authent methods, C2 framework mappings, and operational limits.

https://t.co/w6NdZ7eA8C

[watchdog @w4tchdog2000]

@nikhil_mitt I’ve had my eye on your courses a while! Just never found one that works for my schedule.

[Nikhil Mittal @nikhil_mitt]

Giveaway - Our instructor-led advanced bootcamps for sharpening your Red Team skills start this weekend.

Attacking and Defending Active Directory - Advanced Edition (CRTE) starts this Friday.

Advanced Windows Tradecraft - Evasion Techniques for Red Teams (CETP) starts this Saturday.

I am giving away one seat for each of the bootcamps. To participate, please Follow @nikhil_mitt and @AlteredSecurity, Like, Comment and Repost.

We will announce the random winners on Wednesday.

https://t.co/Kd0RNoINWc

#RedTeam #Evasion

[Init1Security @init1security]

227 tips dedicated to red teaming, OPSEC, infrastructure, payloads, etc.

https://t.co/zx7vUzR4Qv

[Arun @dazzyddos]

Releasing PrivHound — Bloodhound collector to model Windows local Privilege Escalation as a graph.

Still early — bugs and PRs welcome.

https://t.co/9MkcK3QdgE

[/r/netsec @_r_netsec]

we at codeant found a bug in pac4j-jwt (auth bypass) https://t.co/APpRAAuCUW

[Mehmet Ergene @Cyb3rMonk]

🔥 https://t.co/7qAqL3Tb2P

[Clandestine @akaclandestine]

Offensive DPAPI With Nemesis - SpecterOps https://t.co/4vlOAkzP99