@cpl3h

Intelligence - 1 Wisdom - 1 Charisma - 1 Persistence - 10 Luck - 10

 Canada
ijustwannared.team
Joined July 2018
  • Tweets349
  • Following142
  • Followers1.3K
26Media
Just got done the Advanced .NET Exploitation course with @SinSinology. Great up-to-date content with tons of labs. I would definitely recommend.
1
1
16
5,856
Learn Cybersecurity Defense! xitter.cf/i/broadcasts/1lDxLzqwy…
0:00

John Hammond

Learn Cybersecurity Defense!

5
36
3
245
20,344
good to know: if having write access on the userAccountRestrictions property set of a computer, it does not matter if it is disabled. the property set includes userAccountControl also, so by modifying it we are allowed to reenable the computer account even if it was disabled.🧵👇
3
42
204
13,990
New blog: Lateral movement and on-prem NT hash dumping with Microsoft Entra Temporary Access Passes. Some tips and tricks on abusing TAPs for Windows Hello persistence and NT hash recovery over Cloud Kerberos Trust. dirkjanm.io/lateral-movement…

Lateral movement and on-prem NT hash dumping with Microsoft Entra Temporary Access Passes

Temporary Access Passes are a method for Microsoft Entra ID (formerly Azure AD) administrators to configure a temporary password for user accounts, which will also satisfy Multi Factor Authentication...

dirkjanm.io
6
246
7
514
55,083
Sad to see the creation of new free M365 dev tenants going away. Read this post for details: devblogs.microsoft.com/micro… If this impacts you please join the Research panel and help shape the future of the M365 dev program. ux.microsoft.com/Panel/M365D…
42
54
22
154
56,079
Launching this week!
Anton
@Antonlovesdnb9 Dec 2023
Something cool coming January 2024 👀
5
22
5,126
Got a new blog out today co-written with our super talented lead solutions engineer about Linux visibility and logging, check it out! sumologic.com/blog/enhanced-…

Enhanced linux visibility with Sumo Logic

Sumo Logic provides best-in-class cloud monitoring, log management, Cloud SIEM tools, and real-time insights for web and SaaS based apps.

sumologic.com
8
18
2,064
[Blog] Abusing .NET Core CLR Diagnostic Features (+ CVE-2023-33127) - Analysis of .NET diagnostic features and tradecraft - Walkthrough of a .NET Cross-Session Local Priv Esc (LPE) - Defensive Recommendations bohops.com/2023/11/27/abusin…

Abusing .NET Core CLR Diagnostic Features (+ CVE-2023-33127)

Introduction Background .NET is an ecosystem of frameworks, runtimes, and languages for building and running a wide range of applications on a variety of platforms and devices. The .NET Framework w…

bohops.com
3
84
2
207
46,645
Replying to @moo_hax
@moo_hax and I have been building this together and I'm incredibly stoked to work with him again. We're already making awesome stuff to share and I think this next chapter will be great. Let's see what some real hackers can do with AI.
dreadnode
@dreadnode3 Nov 2023
We're live! Dreadnode is all about AI red teaming and offensive ML. Founders are @moo_hax and @monoxgas. Follow us for research, tooling, evals, and challenges. dreadnode.io Let the real hacking begin.
1
8
30
2,817
RCE via Java Derserialization - 0day disclosure in Thorn SFTP
Praetorian
@praetorianlabs2 Nov 2023
Our researchers were at it again, this time uncovering a Java deserialization vuln that led to unauthenticated RCE in the Thorn SFTP Gateway Admin portal. Check out the blog to learn how they did it: hubs.ly/Q027xtpp0 #rce #vulnerabilityresearch #thornsftp #securityexperts
4
24
6,491
I've approved a new version of YSoSerial.Net. Thanks to all contributors especially @chudyPB for so many new gadgets! 📃See @chudyPB🤯"130 page" research: github.com/thezdi/presentati… 📽️Video here: youtube.com/watch?v=5UyX7Hp2… at @hexacon_fr #AppSec #DotNet #Deserialization
3
29
116
19,142
Due to some very unexpected layoffs at Bishop Fox today, I am now looking for a new career opportunity. I'd appreciate any re-tweets, connections or opportunities you can send my way. Thanks in advance!
3
101
3
109
35,349
Just pushed a new #AADInternals version to #PowerShell Gallery and GitHub! Full change log at: aadinternals.com/aadinternal…
2
35
1
103
15,469
We izz back at it again! For the third year in a row the "Windows Instrumentation with Frida" training will be available at #BHUSA (in-person). Grab your 💻, brew some ☕️ and pull up a 🪑 Aug 5-6 - blackhat.com/us-23/training/… Aug 7-8 - blackhat.com/us-23/training/…
3
14
62
18,341
PRINT THIS OUT AND GIVE IT TO YOUR IT STAFF reddit.com/r/sysadmin/commen…

From the sysadmin community on Reddit: Microsoft Ticking Timebombs - February 2023 Edition

Explore this post and more from the sysadmin community

reddit.com
12
109
5
422
74,801
This is a real team.
88
570
161
6,300
624,682
Which teammates would be on your Family Feud team? 😭
55
153
82
1,903
YSoSerial.Net now has another gadget which is capable of loading code rather than running command to avoid easy detection: `DataSetOldBehaviourFromFile` Thanks to @steventseeley & @mwulftange for the 🦈 This release also has 1 new derived gadget just for fun!
2
35
1
106
Today I am releasing part 2 of my 3-part browser exploitation series on Chrome! In part 2, we take a deep dive into the V8 compiler pipeline by understanding what happens under the hood in Ignition, Sparkplug, and TurboFan! Enjoy! jhalon.github.io/chrome-brow…

Chrome Browser Exploitation, Part 2: Introduction to Ignition, Sparkplug and JIT Compilation via...

In my previous post “Chrome Browser Exploitation, Part 1: Introduction to V8 and JavaScript Internals”, we took our first deep dive into the world of browser exploitation by covering a few complex...

jhalon.github.io
4
168
3
593
Load more