François Reynaud retweeted
🎙 La conférence @_leHACK_ se tiendra du 27 -29/06 à @citedessciences #leHACK
🛡 Retrouvez les talks de nos 3 collaborateurs ⤵
🔸 vendredi @Defte_ de 14h à 14h45 et Geoffrey Sauvageot Berland de 17h15 à 18h
🔸 samedi @d3lb3_ de 10h45 à 11h30
👉 ow.ly/pxEm50WfTjN
François Reynaud retweeted
Made some improvements to Impacket's version enumeration for Windows. Now you have a much better idea of which Windows versions you are dealing with.
Already available in NetExec, PR to the Fortra repository is open.
Here is a before and after example:
François Reynaud retweeted
Are you new or getting started in pentesting?
Is it hard to come by AD environments to practice on except when on an engagement?
Check out:
Game of Active Directory (GOAD): A vulnerable Active Directory environment for penetration testing practice.
(link below)
François Reynaud retweeted
🎁 JEU CONCOURS 🎁
C'est l'événement à ne pas rater 🔥 Vous avez envie d'y participer ? Tentez de gagner 2️⃣ places pour vivre les Jeux Olympiques de Paris 2024 🤩
Pour participer :
✅ Follow @energiedusport
✅ RT ce tweet
Today I learned: Javascript was designed in just 10 days. Not sure if I'm more impressed or horrified
François Reynaud retweeted
Major GOAD refactor and update today 🥳
Add RDP bot user
Add Webdav support
Ansible inventory was refactored, you can now find it on the lab folder (ad/sevenkingdoms.local/inventory).
And now you can easily build your own lab from the template : github.com/Orange-Cyberdefen…
François Reynaud retweeted
Hacking misconceptions: Hacking is way easier and harder than you think.
It’s insane how even many infosec professionals have no idea how hard or easy it is to hack something (a thread)
François Reynaud retweeted
Execute commands as another user w/t dumping LSASS or touching the ADCS server ? Thanks to @Defte_ a new module has been added to CrackMapExec 🚀
The module will impersonate any logged on user to exec command as "this" user (system, domain user etc) 🔥
François Reynaud retweeted
We worked together with @_zblurx to pull this new feature on CME ! CrackMapExec can now authenticate using kerberos with login/pass/nthash/aeskey without the need of a KRB5CCNAME ticket env 🚀
But wait there is more! by adding this feature we can now mimic kerbrute features 🔥🫡
François Reynaud retweeted
The image in this tweet displays its own MD5 hash.
You can download and hash it yourself, and it should still match - 1337e2ef42b9bee8de06a4d223a51337
I think this is the first PNG/MD5 hashquine.
François Reynaud retweeted
TIL whenever you see an SSL certificate error and the browser doesn't let you continue - even on your own risk, you can just type 'thisisunsafe' to bypass the protection
cybercafe.dev/thisisunsafe-b…






























