gerbsec (@gerbsec) header
gerbsec (@gerbsec) profile picture

security n stuff | views are my own

home
Joined January 2020
Photo by gerbsec (@gerbsec)Photo by gerbsec (@gerbsec)Photo by gerbsec (@gerbsec)Photo by gerbsec (@gerbsec)Photo by gerbsec (@gerbsec)Photo by gerbsec (@gerbsec)Photo by gerbsec (@gerbsec)Photo by gerbsec (@gerbsec)Photo by gerbsec (@gerbsec)Photo by gerbsec (@gerbsec)
One of you is taking home this $12K MSI MEG PC ๐Ÿ‘€๐Ÿ”ฅ๐Ÿ–ค How to enter: 1๏ธโƒฃ Like this post 2๏ธโƒฃ Follow @brittnaynay3 @msigaming 3๏ธโƒฃ Comment + repost ๐Ÿ” Thatโ€™s it! โœ… ๐ŸŒŽ International where legally permitted. Full Terms & Conditions + extra entry opportunities are linked below in comment โฌ‡๏ธ Good luck ๐Ÿ–ค๐Ÿ”ฅ
20,490
18,825
255
21,488
684,468
gerbsec retweeted
Over a year ago, I left my position at WithSecure to start a new journey, create something new, and do my own thing. Today, I'm excited to publicly announce what I've been working on all this time. Introducing 0xC2, a cross-platform C2 framework targeting Windows, Linux, and MacOS environments: 0xc2.io The first release was back in late 2023, initially only offered to a small circle of red teamers and soon, the registration will be open for new clients who provide threat simulation services. All agents are written as PIC in C to provide better opsec and to allow operators to be more flexible when designing payloads. To make the agents modular and fully customizable, operators can create a user-defined virtual table that can be hooked by the agent. This can be used to change the default behavior of an agent or extend capabilities, from adding internal commands to implementing P2P protocols. More details will be available soon.
60
242
8
1,179
117,246
A new module just got merged into NetExec, which extracts the security Questions for local users ๐Ÿš€ Made by @Adamkadaban If you want to know the details, you can read his blog post here: hackback.zip/2024/05/08/Remoโ€ฆ
1
73
212
18,495
Some words of wisdom: "ู…ู† ู„ุง ุฑุฃูŠ ู„ู‡ุŒ ุฑุฃุณู‡ ูƒู…ู‚ุจุถ ุงู„ุจุงุจ ูŠุณุชุทูŠุน ุฃู† ูŠุฏูŠุฑู‡ ูƒู„ ู…ู† ูŠุดุงุก " "When a person does not have any opinions, his head becomes like a door knob. Whoever desires to turn it can easily do so"
48
1
257
6,690
|๏ฟฃ๏ฟฃ๏ฟฃ๏ฟฃ๏ฟฃ๏ฟฃ๏ฟฃ๏ฟฃ๏ฟฃ๏ฟฃ๏ฟฃ๏ฟฃ๏ฟฃ๏ฟฃ๏ฟฃ๏ฟฃ๏ฟฃ| | Don't Push To Production On Friday | |๏ผฟ๏ผฟ๏ผฟ๏ผฟ๏ผฟ๏ผฟ๏ผฟ๏ผฟ๏ผฟ๏ผฟ๏ผฟ๏ผฟ๏ผฟ๏ผฟ๏ผฟ๏ผฟ๏ผฟ| \ (โ€ขโ—กโ€ข) / \ / โ€”โ€” | | |_ |_
402
15,666
1,259
74,201
2,969,608
#RedTeamTips do your intel and check which orgs are running Crowdstrike
10
91
10
388
59,463
My home private AV scanner,dont submit samples. :)
8
9
58
16,509
There is a very limited pool of donors. The process for getting screened to see if youโ€™re a match is a simple oral swab you can do at home. Please consider signing up at bethematch.org/become-a-donoโ€ฆ Thereโ€™s nothing more important to me than her. It would mean the world to my family.
2
31
33
12,756
Guide to defeating EDR: 1. Have private methods 2. Don't blog about them
2
33
6
184
34,240
gerbsec retweeted
I regularly meet people that tell me how much they want to succeed in various fields and still manage to put in enough hours into video games that it could be classified as a part time job. I'm no stranger to impulse control issues, but if you have limited means
7
11
2
108
13,076
Congratulations to the top 3 finishers in the 2024 Wild Card Event! 1st Place - University of California, Irvine @UCIrvine 2nd Place - Rochester Institute of Technology @RITtigers 3rd Place - University of South Florida @USouthFlorida #WildCard #NCCDC
2
9
3
41
4,073
Congratulations to the top 3 finishers in the 2024 SECCDC Regional! 1st Place - University of Central Florida @UCF 2nd Place - University of South Florida @USouthFlorida 3rd Place - Clemson University @ClemsonUniv #SECCDC #NCCDC
14
1
31
3,557
Congratulations to the #USF CyberHerd team on their 1st place finish at the NCAE Cyber Games SE Regional competition! ๐Ÿ† Learn more about CyberHerd & their success๐Ÿ‘‡ ow.ly/8Hia50QSvXT
2
2
16
1,623
Yea yea, EDR bypass this, VEH that, but have you every ran mimikatz while surfing in 1.6.? ๐Ÿ˜Ž๐Ÿ˜Ž
6
63
7
309
27,555
gerbsec retweeted
Next beacon name be like :
This is utter crap for AV advice from Microsoft It's bad enough that Teams still runs in a user-writable location (AppData), but lets combine that with AV exclusions AND not specify path based vs process based exclusions I would highly advise against path based exclusions here
2
35
5
156
44,269
I had the chance to speak with @k3nundrum about some red teaming experience for @HackSpaceCon and @HackRedCon. youtu.be/WTWGa_zFbuM?featureโ€ฆ Thanks for the oportunity and please excuse my french.
9
29
3,256