Donkeys (@DonkeysTeam) profile picture

Donkeys

@DonkeysTeam

#CTF team

 Italia
Joined February 2018
  • Tweets116
  • Following26
  • Followers693
12Media
Photo by Donkeys (@DonkeysTeam)Photo by Donkeys (@DonkeysTeam)Photo by Donkeys (@DonkeysTeam)Photo by Donkeys (@DonkeysTeam)Photo by Donkeys (@DonkeysTeam)Photo by Donkeys (@DonkeysTeam)Photo by Donkeys (@DonkeysTeam)Photo by Donkeys (@DonkeysTeam)Photo by Donkeys (@DonkeysTeam)
Replying to @mkolsek @decoder_it @day6reak @padovah4ck
We've updated our public servicing criteria to reflect that the Hyper-V Administrators group should be treated as equivalent to Administrators. aka.ms/windowscriteria
2
1
3
As promised, a short post on Hyper-V admin privesc: decoder.cloud/2020/01/20/fro… /cc @padovah4ck @mkolsek
From Hyper-V Admin to SYSTEM

From Hyper-V Admin to SYSTEM

Another episode of the series: From XXX to SYSTEM ! This time I will show you how it is possible to gain SYSTEM privileges on a Windows machine (a fully patched Win 10 in our case) with HYPER-V ena…

decoder.cloud
3
127
1
247
Mapping Injection - Just another Windows Process Injection github.com/antonioCoco/Mappi…
GitHub - antonioCoco/Mapping-Injection: Just another Windows Process Injection

GitHub - antonioCoco/Mapping-Injection: Just another Windows Process Injection

Just another Windows Process Injection. Contribute to antonioCoco/Mapping-Injection development by creating an account on GitHub.

github.com
1
40
1
70
#Juicypotato knocked to our door and wanted to get listen and ... we kindly answered! From Service Account to SYSTEM again cc @decoder_it 0xea31(@DonkeysTeam) decoder.cloud/2019/12/06/we-…
We thought they were potatoes but they were beans (from Service Account to SYSTEM again)

We thought they were potatoes but they were beans (from Service Account to SYSTEM again)

 This post has been written by me and two friends: @splinter_code and 0xea31This is the “unintended” result of a research we did on Juicypotato exploit in order to find a possible …

decoder.cloud
1
54
1
73
Yay, I was awarded a $250 bounty on @Hacker0x01! hackerone.com/phra #TogetherWeHitHarder
HackerOne profile - phra

HackerOne profile - phra

Ethical Hacker // Red Teamer - https://iwantmore.pizza

hackerone.com
1
1
16
Hey MS MSDN folk, I suggest you to put at least <customErrors mode="RemoteOnly" defaultRedirect="customerror.htm"/> in your web.config
Image from Andrea P (@decoder_it)
4
14
You’ve got mail! Postman will go live 2 November 2019 at 19:00:00 UTC. Haystack will be retired! You still have time to hack your way in at: hackthebox.eu/#join
Image from Hack The Box (@hackthebox_eu)
2
36
2
142
New Feature #Shoutout 📣 Time to redeem your #hacking expertise via #CPEs for your ISC2 Certification! Earn CPE credit via HTB for all owned machines,Pro Labs and challenges. Find full description and details here: hackthebox.eu/press/view/8
Image from Hack The Box (@hackthebox_eu)
12
110
11
281
I have just sent a Pull Request to add support for base64 output in mimikatz `log` command! This will be useful as first step to bypass AV detection when writing the log to disk. Usage: `log mimi /base64:on` github.com/gentilkiwi/mimika… /CC @gentilkiwi
Image from Francesco Soncina (@phraaaaaaa)
10
28
Everyone is unique! Registry will go live 19 October 2019 at 19:00:00 UTC. Ellingson will be retired! You still have time to hack your way in at: hackthebox.eu/#join
Image from Hack The Box (@hackthebox_eu)
3
15
2
88
It was a big surprise when we realized that #UsoSVC was hackable to esclate to SYSTEM from any SERVICE account, since Windows 1803. We suddenly felt back in the 2000s. We actually were not alone! Kudos @gweeperx for first bood on that! portal.msrc.microsoft.com/en… #CVE2019_1322 #EoP
3
19
1
39
Just added a PowerShell version of @tiraniddo's UAC Bypass SilentCleanup to @DonkeysTeam redteam repo: github.com/d0nkeys/redteam/b… Based on: - github.com/juliourena/plaint… - tyranidslair.blogspot.com/20…
Image from Francesco Soncina (@phraaaaaaa)
1
72
1
154
ConPtyShell Released! ConPtyShell is a Fully Interactive Reverse Shell for Windows systems. It uses the new Pseudo Console (ConPty) feature to literally transform your bash in a remote powershell. github.com/antonioCoco/ConPt… #PenTest #Csharp #powershell #shell #conpty #terminal
GitHub - antonioCoco/ConPtyShell: ConPtyShell - Fully Interactive Reverse Shell for Windows

GitHub - antonioCoco/ConPtyShell: ConPtyShell - Fully Interactive Reverse Shell for Windows

ConPtyShell - Fully Interactive Reverse Shell for Windows - antonioCoco/ConPtyShell

github.com
6
8
CVE-2019-10392 — Yet Another 2k19 Authenticated Remote Command Execution in Jenkins read the blog post @ iwantmore.pizza/posts/cve-20… /cc @jenkinsci @TheHackersNews
3
105
5
216
Exfiltrate Like a Pro: Using DNS over HTTPS as a C2 Channel DNS over HTTPS is cool. It increases privacy and security by moving DNS from UDP to HTTP/2 😇.. but are you aware that it can be used as a C2 communication channel? 😼 check out the article @ iwantmore.pizza/posts/dnscat…
Image from Francesco Soncina (@phraaaaaaa)
2
117
1
225
So MS told me that they won't fix in this release the "vulnerability" in the checks of the "SeTokenCanImpersonate" routines, as suggested by me (decoder.cloud/2019/07/04/cre…), maybe in the next releases? Meantime, enjoy ;-)
1
98
197
Focus on the good stuff! Scavenger will go live 17 August 2019 at 19:00:00 UTC. Helpline will be retired! You still have time to hack your way in at: hackthebox.eu/#join
Image from Hack The Box (@hackthebox_eu)
1
13
1
62
Cut off the strings that holds you down! Rope will go live 03 August 2019 at 19:00:00 UTC. Fortune will be retired! You still have time to hack your way in at: hackthebox.eu/#join
Image from Hack The Box (@hackthebox_eu)
6
27
2
100
Bye bye CFT!
Hack The Box (@hackthebox_eu) profile pictureHack The Box
@hackthebox_eu17 Jul 2019
Don't trust everything you see! RE will go live 20 July 2019 at 19:00:00 UTC. CTF will be retired! You still have time to hack your way in at: hackthebox.eu/#join
Image from Hack The Box (@hackthebox_eu)
4
Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool iwantmore.pizza/posts/rustbu…
Image from Francesco Soncina (@phraaaaaaa)
2
113
3
253
Load more