@dbrndjb

Offensive security - Interested in Active Directory, Azure and Blockchain security.

 Paris, France
ctfshellclub.github.io
Joined October 2015
  • Tweets83
  • Following391
  • Followers60
3Media
I've released NAT Slipstreaming, a spooky new technique that allows an attacker to remotely access any TCP/UDP service bound to a victim machine, bypassing the victim’s NAT/firewall, just by the victim visiting a website. samy.pl/slipstream/ Happy Halloween!
142
1,834
434
4,998
Dbrndjb retweeted
s1r1us
@S1r1u5_19 Oct 2020
I created this basic chrome extension to find prototype pollution. You won't believe the applications where PP exist, it's everywhere. I hope you make internet pollution free :xD. github.com/msrkp/PPScan
12
297
3
747
Dbrndjb retweeted
Mayfly@M4yFly17 Sep 2020
My little mindmap to pentest active directory. Full version here : i.ibb.co/TKYNCNP/Pentest-ad.…
16
421
11
1,042
Dbrndjb retweeted
n00py@n00py121 Feb 2020
For pentesting, Add this to your .bashrc file: PS1='[`date +"%d-%b-%y %T"`] > ' test "$(ps -ocommand= -p $PPID | awk '{print $1}')" == 'script' || (script -f $HOME/logs/$(date +"%d-%b-%y_%H-%M-%S")_shell.log) Now you can have a log of everything you did and when you did it.
15
640
32
2,245
Introducing SysWhispers, a tool that helps with AV/EDR evasion by using direct system calls to bypass user-mode API hooks. It works by generating header/ASM pairs supporting all core syscalls from Windows XP to 10. Check it out here with examples: github.com/jthuraisamy/SysWh…

GitHub - jthuraisamy/SysWhispers: AV/EDR evasion via direct system calls.

AV/EDR evasion via direct system calls. Contribute to jthuraisamy/SysWhispers development by creating an account on GitHub.

github.com
9
352
12
684
Dbrndjb retweeted
Sinaei@Intel80x869 Dec 2019
I decided to create a tutorial called "Reversing Windows Internals" and explain about Windows Internals. The first part describes about Handles, Callbacks and Hidden Callbacks and ObjectTypes in Windows Thanks to @Dark_Puzzle for answering my questions. rayanfam.com/topics/reversin…

Reversing Windows Internals (Part 1) - Digging Into Handles, Callbacks & ObjectTypes

We write about Windows Internals, Hypervisors, Linux, and Networks.

rayanfam.com
18
496
15
1,130
New blog post time! This one looking at how we can use AMSI to help automate getting our payloads past AV. medium.com/@two06/amsi-as-a-…

AMSI as a Service — Automating AV Evasion

AMSI, the “AntiMalware Scan Interface”, has been around for some time. In a broad sense, it’s a component of Windows 10 which allows…

medium.com
6
174
3
331
Documentation on how to install Pwnagotchi on any GNU/Linux system is now available pwnagotchi.ai/installation/#…
3
49
1
152
Burp Suite Tips & Tricks Volume 1: link.medium.com/OiOcMihPa0 Volume 2: link.medium.com/Sgc77BkPa0

Burp Suite Tips — Volume 1

Compilation of basic Burp Suite tips to utilize when assessing the security posture of web applications.

link.medium.com
20
55
We are proud to launch our brand new interactive XSS cheatsheet featuring novel vectors from @garethheyes portswigger.net/research/one…

One XSS cheatsheet to rule them all

PortSwigger are proud to launch our brand new XSS cheatsheet. Our objective was to build the most comprehensive bank of information on bypassing HTML filters and WAFs to achieve XSS, and to present th

portswigger.net
10
651
11
1,322
You were eagerly looking forward to it, well, here we are: the qualification week for SIGSEGv2 (which will happen on 11/30) starts next Wednesday (10/02). Time to polish those CTF skills! #sigsegv2 #ctf #quals
1
9
16
Paged Out! #1 is out! (and it's free to download!) pagedout.institute/?page=iss… There are 57 articles in 12 categories: Electronics Programming Assembly Reverse Engineering Sec/Hack Retro File Formats Algorithmics SysAdmin Radio Phreaking OS Internals Enjoy! #PagedOut!

Paged Out!

Deeply technical zine. And it's free.

pagedout.institute
35
906
74
1,786
New blog post exploring Windows RPC internals, reversing with Ghidra, and how we can use Neo4j to find interesting call paths. blog.xpnsec.com/analysing-rp…

@_xpn_ - Analysing RPC With Ghidra and Neo4j

Hunting for new lateral movement techniques or interesting ways to execute code can be a nice way to sink some free time. With Windows spawning numerous RPC services on boot, finding unusual execut...

blog.xpnsec.com
8
259
6
509
Windows Boot Process
18
1,451
39
3,789
On termine 7ème au wargame #lehack19 ! Certains challs nous ont donné des Org'ASM =)
leHACK@_leHACK_7 Jul 2019
Thanks to all participants of #leHACK wargame. Thanks to Hs2.fr, @OVH, Cyberfatale who sponsored the prizes for the winners.
6
8
#HIP19 🙏🙏
Hack In Paris@hackinparis23 May 2019
#CONTESTALERT Want to win two tickets for #HIP19 talks? - Follow @hackinparis - RT with the hashtag #HIP19 The winner will be drawn on the 27th of May at 4 pm (UTC+2) hackinparis.com/data/files/j…
4
Some #wpictf writeups: The best: Remy's Epic Adventure 😍ctfshellclub.github.io/2019/…😍 ctfshellclub.github.io/2019/… ctfshellclub.github.io/2019/… ctfshellclub.github.io/2019/… ctfshellclub.github.io/2019/… ctfshellclub.github.io/2019/… ctfshellclub.github.io/2019/… ctfshellclub.github.io/2019/… ctfshellclub.github.io/2019/… Enjoy
11
1
19
14th place with @ShellClubCTF at #wpictf Amazing challenges ! writeups are coming soon ;)
2
5
Dbrndjb retweeted
Nico@p1ckle_r1k7 Apr 2019
One more writeup of the @HacklabESGI CTF 🤩 Caper ctfshellclub.github.io/2019/… via @ShellClubCTF More to come in the next days 😉 cc: @GlaCiuS_ @maki_chaz @th1b4ud @Lexsek_ @pentest_swissky @_LordRoke @dbrndjb
8
12
Some writeups of the @HacklabESGI CTF 🤩 ctfshellclub.github.io/2018/… ctfshellclub.github.io/2018/… ctfshellclub.github.io/2018/… ctfshellclub.github.io/2018/… More to come in the next days 😉 cc: @GlaCiuS_ @maki_chaz @th1b4ud @Lexsek_ @p1ckle_r1k @_LordRoke @dbrndjb
3
16
47
Load more