Just on here to follow security shit. Attack & Penetration Consultant, OSCP/GCIA/CRTO/CRTL Holder @redheadsec@infosec.exchange
Texas, USA
Joined April 2018
- Tweets123
- Following243
- Followers62
- Likes441
RedHeadSec retweeted
This… this right here is what defines an amazing leader of great company. Hats off to you @Atredis, you continue to impress me.
RedHeadSec retweeted
Joining Optiv back in 2020, Joey Belans was a huge mentor for me and helped me grow a TON.
I will always be grateful for his kindness. Joey was let go today from Optiv just before starting FMLA, and his family could really use support.
gofund.me/073fa52c
RedHeadSec retweeted
Joey is such a good dude. First time I met him the guy was all smiles and good vibes. You'd haver never known what he was fighting internally. It's pretty unfortunate this situation and he and his family could really use some support right now. Please share for reach.
This Post is from an account that no longer exists. Learn more
RedHeadSec retweeted
Home labs are one of the best tools for researchers & testers. @synzack21 shares a fully customizable #SCCM deployment that you can integrate into your home lab, creating a space for you to recreate SCCM research & probe for vulnerabilities. Read more! ⬇️ ghst.ly/3yNext0
RedHeadSec retweeted
Merged! Thanks again @s1zzzz for the awesome work for the new DPAPI module in SCCMHunter.
github.com/garrettfoster13/s…
MachineAccountQuota = 0, preventing you from grabbing NAA creds remotely?
DPAPI to the rescue!
Ported over NAA Extraction via DPAPI to sccmhunter.
h/t: @agsolino & @clavoillotte for SystemDPAPI.py
RedHeadSec retweeted
Long overdue but SourcePoint v3.0 is out now, with a ton of new features and bug fixes. With these changes, Initial access and Post-Ex activities with CobaltStrike can fly under the radar.
Check it out github.com/Tylous/SourcePoin… !
#redteam #netsec
RedHeadSec retweeted
Nice my talk was accepted! Excited to be coming back to @BSidesPDX to talk about SCCM and SCCMHunter v2
RedHeadSec retweeted
SCCM Site takeover by abusing the AdminService API. In this blog, I walkthrough the discovery process and demonstrate site takeover via credential relaying.
medium.com/specter-ops-posts…
RedHeadSec retweeted
Sharing a tool I wrote to streamline attacking SCCM. Some features include profiling target servers for admin smb relay attacks, site server takeover, http enrollment, and leveraging the adminservice api.
github.com/garrettfoster13/s…
RedHeadSec retweeted
ScareCrow 5.0 is out now, a massive rewrite of the framework with huge new features, IoC's removed & new evasion techniques added. If you are curious take a look at the changelog. Check it out: github.com/optiv/ScareCrow #netsec #redteam #EDR #evasion
RedHeadSec retweeted
SysWhispers3 has been added to Shhhloader! 😎 It should work with all current shellcode injection techniques. Some bug fixes also make this the most stable version yet. More updates to come, and thanks to @KlezVirus for SW3. github.com/icyguider/Shhhloa…
RedHeadSec retweeted
I've had so much fun learning rust. This is an excellent example of the power of rust, no EDR unhooking, patching of ETW, syscalls, or LITCRYPT and it calls home against EDRs. More to come soon #redteam
RedHeadSec retweeted
I’m pleased to release Inline-Execute-PE, a CobaltStrike toolkit enabling users to load and repeatedly run unmanaged Windows exe’s in Beacon memory without dropping to disk or creating a new process each time. github.com/Octoberfest7/Inli…
#redteam #cybersecurity #malware
RedHeadSec retweeted
Talon 3.1 is out today with some new features around password lock-out controls and other bug fixes. Big shoutout to ZerkerEOD for all the hard work.
#netsec #redteam
github.com/optiv/Talon
RedHeadSec retweeted
The Havoc Framework
github.com/HavocFramework/Ha…
