@Crypt0s

Application security guy who dabbles in radios, networking, protocols…pretty much anything anyone puts in front of me to hack!

 Maryland, USA
github.com/Crypt0s
Joined July 2009
  • Tweets9K
  • Following896
  • Followers2.1K
424Media
1/12 It has been confirmed that the #Taurus interception was done via “a non-secure line”. Below is my opinion of one way in which it *might* have been done, taking into account the situation and #Russia's previous history. Essentially it involves using #SS7 interception. 🧵
10
100
20
325
120,086
Lenovo X1 Carbon Bitlocker Key Sniffing any% Speedrun (42.9 seconds)
59
788
90
4,147
555,020
Crypt0s retweeted
an0n@an0n_r029 Dec 2023
OST cannot be stopped. Here is a technique we tested internally 9 months ago: blocking EDR telemetry by leveraging the Windows Filtering Platform. Considered it so evil that we didn't publish it that time. It was pointless, now here it is by @netero_1010: github.com/netero1010/EDRSil…

GitHub - netero1010/EDRSilencer: A tool uses Windows Filtering Platform (WFP) to block Endpoint...

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server. - netero1010/EDRSilencer

github.com
11
263
7
860
125,762
Crypt0s retweeted
s1zz
@s1zzzz2 Feb 2024
Discovered and exploited an arbitrary file delete vulnerability that lead to SYSTEM level privileges. Thanks to the goat @filip_dragovic.
7
28
3
153
21,066
interesting recent UAC bypass method zcgonvh.com/post/Advanced_Wi…
2
68
211
41,406
Crypt0s retweeted
dragosr
@dragosr7 Jul 2023
Red, Blue, and Purple LDAP Queries. Quite useful. politoinc.com/post/ldap-quer…

LDAP Queries for Offensive and Defensive Operations

The intention of this post is to provide basic queries for targeted AD DS information gathering used in penetration testing. The reader can

politoinc.com
4
9
1,644
New blog: Obtaining Domain Admin from Azure AD by abusing Cloud Kerberos Trust I teased this a bit during my Windows Hello talks, now found some time to write about this interesting technique. Also contains defenses and detection opportunities. dirkjanm.io/obtaining-domain…

Obtaining Domain Admin from Azure AD by abusing Cloud Kerberos Trust

Many modern enterprises operate in a hybrid environment, where Active Directory is used together with Azure Active Directory. In most cases, identities will be synchronized from the on-premises...

dirkjanm.io
8
328
5
770
90,698
27
838
62
7,141
538,470
Replying to @cybergibbons
I'd be pretty interested see how it fares with my new SDR Bluetooth sniffer and a bladeRF. Can it perform all-channel sniffing in real time? Benchmark with ice9-bluetooth -s -f /dev/urandom github.com/mikeryan/ice9-blu…

GitHub - mikeryan/ice9-bluetooth-sniffer: Wireshark-compatible all-channel BLE sniffer for bladeRF,...

Wireshark-compatible all-channel BLE sniffer for bladeRF, with wideband Bluetooth sniffing for HackRF and USRP - mikeryan/ice9-bluetooth-sniffer

github.com
1
1
3
168
Clean Windows using Linux 😛
34
115
13
997
60,400
Crypt0s retweeted
KF
@d0tslash5 May 2023
"Espressif ESP32: Bypassing Encrypted Secure Boot (CVE-2020-13629)" raelize.com/blog/espressif-e…

Espressif ESP32: Bypassing Encrypted Secure Boot (CVE-2020-13629)

Bypassing the ESP32's encrypted Secure Boot and Flash Encryption with a single EM glitch to extract plain-text flash, abusing SRAM persistence (CVE-2020-13629).

raelize.com
2
3
6
858
I hacked into a @Bing CMS that allowed me to alter search results and take over millions of @Office365 accounts. How did I do it? Well, it all started with a simple click in @Azure… 👀 This is the story of #BingBang 🧵⬇️
253
3,126
567
14,525
3,210,310
Join @Netragard's, Noah Tongate, tonight at 8p at @CDMDePaul on topics such as red team attack vectors and how to prepare for the upcoming Collegiate Cyber Defense Competition. He now actively serves as red team member for the competition #ccdc #redteam #CyberSecurity
1
1
151
all this talk about signals I feel out of the loop
12
164
17
1,692
98,451
Crypt0s retweeted
NA@N4k3dTurtl321 Feb 2023
New post and Impacket improvement from @Icebreaker_Team's @Crypt0s icebreaker.team/blogs/dumpin…
14
17
1,670
Replying to @Faytuks @ignis_fatum
@Faytuks @ignis_fatum
4
14
2
222
23,271
phish fans are the worst
𝗛𝟯𝗞𝗧l𝗖
@H3KTlC25 Jan 2023
gm I just failed another phish test hows your day going
1
1
500
Replying to @bckgpne
Recent (since mid last month) .one files have been embedding naughty files: .vbs .bat .exe .wsf .hta that have been dropping #asyncrat and #xworm
2
6
37
4,555
We've just created a 116kb WASM build of Blink that lets you run x86_64 Linux binaries in the browser. It supports 500 instructions and 130 system calls. github.com/jart/blink/issues…
37
456
75
2,736
388,512
Crypt0s retweeted
CircleCI@CircleCI5 Jan 2023
CircleCI Security Alert [4 Jan. 2023] We strongly recommend all CircleCI customers rotate secrets stored on our system. Read more: circleci.com/blog/january-4-…
16
546
146
575
407,622
Load more