@ExAndroidDev

Ex android developer, pentester, red teaming enthusiast

exandroid.dev/
Joined March 2021
  • Tweets513
  • Following129
  • Followers452
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Check out my new blog post about the rtlo attack: exandroid.dev/2022/03/21/ini…
12
27
Felt like writing something, so here is my new blog post. A story about how I have dumped the credentials from the antivirus and still didn't own the domain. exandroid.dev/2021/11/20/pen…

Pentest tale - Dumping cleartext credentials from antivirus

I have nothing “mind blown” to share, so let me tell you a story.

exandroid.dev
5
27
1
97
Replying to @mrd0x
Thanks. Nice share too. You focused on google I focused on o365 :)
2
Replying to @AviOz7 @gentilkiwi @topotam77
It's not yet merged, there is an active pull request. You can use my forked version. github.com/SecureAuthCorp/im…
1
1
7
Replying to @Hexacorn
In theory, you can use any AV that registers as AMSI provider. Then just pass your bin to AmsiScanBuffer function and AV should scan it and return a result. To have multiple AVs running you could put them in windows docker container. It's on my todo list to implement this one day
2
Replying to @nikhil_mitt
exandroid.dev/2021/06/23/ad-…

AD CS relay attack - practical guide

Unless you are living under the rock, you have seen that recently @harmj0y and @tifkin_ published their amazing research on Active Directory Certificate Services (AD CS). If you haven’t checked it...

exandroid.dev
1
4
4
Check out my new blog post about AD CS relay attack exandroid.dev/2021/06/23/ad-… #pentest #redteam

AD CS relay attack - practical guide

Unless you are living under the rock, you have seen that recently @harmj0y and @tifkin_ published their amazing research on Active Directory Certificate Services (AD CS). If you haven’t checked it...

exandroid.dev
3
51
2
104
Replying to @testanull
Roses are red, violets are blue, title's in english so the text should be too.
1
3
How to fake meeting invite exandroid.dev/2021/04/24/phi… #phishing #socialengineering #infosec #redteam
2
Load more