
Operator @SpecterOps. Speedskater, hacker. 99% caffeine. @spartan@infosec.exchange. He/him.
NT AUTHORITY\SYSTEM
Joined April 2009
- Tweets2.6K
- Following2K
- Followers3.4K
- Likes4.5K
AtlasReaper enables red teamers to search for secrets and launch targeted social engineering attacks in Confluence and Jira. Use this tool to find passwords and sensitive files, or attach files and embed images to harvest Net-NTLMv1/v2 hashes. ghst.ly/3XupibU
Today I'm releasing AtlasReaper, a .NET tool designed for red teamers to interact with Confluence and Jira via C2 agents.
Discover secrets and launch targeted attacks.
Check out the blogpost for more details:
medium.com/@werdhaihai/7a90b…
Github Repo:
github.com/werdhaihai/AtlasR…
In prepartion for our upcoming webinar on Defining Tier zero with @Jonas_B_K and @elad_shamir, let's ask a question.
Is the Account Operators group in AD considered Tier Zero?
62%Yes
8%No
16%It Depends
14%Not sure
87 votes • Final resultsHappy #Pride Month! We are proud to support the LGBTQ+ community.
It's official! Mythic 3.0 is LIVE! Check out the blog post about it here: posts.specterops.io/c2-and-t…. Highlights include: rpfwds, graph groupings, jupyter notebook, custom webhooks, tags, docker updates, and an entirely new back end!
The #BloodHound Slack is now on the Pro plan!
The FULL history of this Slack is now available. You can easily search:
- 1.5 million messages and
- 1,543 files
Dating back to August 11, 2016.
Get your invite here: bloodhoundgang.herokuapp.com…
We're looking forward to hosting our Adversary Tactics: Red Team Operations training course at @NorthSec_io next month. We hope to see you there! nsec.io/training/2023-specte…
I've long been interested in how EDRs work under the hood and how we can apply a more evidence-based approach to evasion. I'm happy to announce that I've written a book covering these topics with @nostarch which is now available for preorder 🎉
nostarch.com/book-edr
We're excited to announce that we've secured $25M in funding to drive the next phase of expansion across the BloodHound Enterprise and FOSS platforms, security consulting services, research and more.
Read more: ghst.ly/41BZuvf
Replying to @SpecterOps
@SpecterOps will be at NorthSec in full force. @zyn3rgy and @Icemoonhsv will be teaching our Red Team Operations course and @jsecurity101 and I will be teaching our new Malware Morphology for Detection Engineers workshop! We'd love to meet up and chat!
It’s no secret that @SpecterOps has some of the most popular FOSS for OffSec and shares tons of knowledge for free. For a 5th year in a row, we are happy to host one of their most famous training!
🗓️May 23-26
🏛️On site
It sold out last time, so hurry up👉 nsec.io/training/2023-specte…
Interested in bypassing posture checks to access VPNs/federated services? Or want to learn to use patching and hooking techniques for subverting simple client-side controls? I'll be presenting @bsidesaustin on Friday, May 5th at 12pm CST.
Come by if you're in the area!
.@jsecurity101's blog post is a walk-thru on understanding how the Threat-Intelligence ETW provider collects information. Understanding how these events are collected can help defenders use them more effectively. #DetectionEngineering
Read: ghst.ly/3lgZ26c
Some exciting news!
I am officially announcing my NEW training company XINTRA @XintraOrg - with the FIRST COURSE ready for sign-ups:
😈Attacking and Defending Azure/M365😈
The full course is available here:
training.xintra.org
I would love your support and follow <3
We hope you're getting in some relaxation and spending time with loved ones! If, on the other hand, you want to escape for a little bit, you can take a few minutes to register one of our March trainings. You can even blame it on us, it's ok. ghst.ly/march2023
If you're on Mastodon and want to continue to view my very infrequent musings, @spartan@infosec.exchange.
SpecterOps observes Election day as a company holiday. We are closed today to allow our employees every opportunity to cast their ballots.
"Voting is not only our right - it is our power." -Loung Ung
Replying to @JonnyJohnson_
@jsecurity101 and I have started a blogpost series providing a defensive knowledgeable for commonly attacked technologies - we started with the Windows Registry which was released today - check it out over at the @SpecterOps Medium! posts.specterops.io/defender…
I guess I'll give Mastodon a try again. Feel free to ping me here: infosec.exchange/@spartan




















