gibdeon retweeted
🔐 I’m now maintaining the asleap fork, keeping this classic security tool working on modern Linux and OpenSSL versions.
Parrot is considering it, but Kali needs more community adoption. I need your help! 🙏please give it a ⭐ and share!
github.com/OscarAkaElvis/asl…
#asleap #hacking
gibdeon retweeted
🚀 airgeddon v12.01 is out!
✅ More stable Evil Twin
✅ Better Ctrl+C interruption handling
✅ WPS fixes & improvements
✅ Dynamic WPA3 plugin menus
✅ NEW WPA3 MFP status analysis
✅ Band info added across multiple modules
📥 github.com/v1s1t0r1sh3r3/air…
#airgeddon #WiFi #hacking
gibdeon retweeted
🎉 airgeddon 12.0 released!
The 10th Anniversary Edition is here 👽
✅ Partial 6GHz support
✅ Evil Twin improvements
✅ Multiple fixes & hardening & more
Thanks to everyone supporting the project over the last 10 years ❤️
Sponsor: github.com/sponsors/v1s1t0r1…
#wifi #linux #hacking
gibdeon retweeted
So here is new local privilege escalation zero-day I discovered, not patched yet too :).
In simple terms, if you have a service like RDP that exposes an RPC server, there many system services running as SYSTEM connect to it as RPC clients. If that service is turned off (RDP is off by default), it seems that any other process in Windows can expose the same RPC server using the same endpoint.
Now all the RPC calls from that SYSTEM processes will come to this fake server and If the process that deployed the server has SeImpersonatePrivilege, it can escalate to SYSTEM by impersonate the RPC client.
In the white paper below, I describe five exploit paths you can abuse.
However it's architecture problem and maybe there are more. It's Not A Potato
securelist.com/phantomrpc-rp…
gibdeon retweeted
Thanks to Azox, it is now possible to use psexecsvc (github.com/sensepost/susinte…) through a socks proxy like ntlmrelayx allowing executing system commands via a trusted service, as NT System, and evading EDR's. Also thanks to @HackAndDo for his fixes :D
gibdeon retweeted
![[NN2ed] s4ur0n (@NN2ed_s4ur0n) profile picture](https://pbs.twimg.com/profile_images/2012464407930900480/5i0P7zfp_400x400.jpg)
Algo me dice que mañana empieza la @rootedcon cargada de muchas cosas interesantes con la orga, colegas, patros, público, networking y mucho más. No te pierdas mi charla el sábado 7 de 13-14 h. en la sala 25 analizando la DGT 3.0 con muchas cosas "chulas" #SeVienenCositas
![Image from [NN2ed] s4ur0n (@NN2ed_s4ur0n)](https://pbs.twimg.com/media/HCly52bW0AACCVQ.jpg?name=orig)
![Image from [NN2ed] s4ur0n (@NN2ed_s4ur0n)](https://pbs.twimg.com/media/HClzR4wW8AAIjsI.jpg?name=orig)
gibdeon retweeted
DumpGuard
On the latest versions of Windows, mimikatz becomes useless when you try to dump LSASS. This happens because there is no longer anything valuable left in LSASS. All secrets are stored in a separate protected process, lsaiso.exe. This protection mechanism is called Credential Guard, and it is enabled by default starting with Windows 22H2 / Windows Server 2025.
But there is a “bypass” that abuses Remote Credential Guard, which is normally used during RDP sessions to avoid sending credentials to a remote server, and retrieve all NTLMv1 hashes despite the protection being enabled
github.com/bytewreck/DumpGua…
#dfir #blueteam #redteam #Pentesting #ThreatHunting
gibdeon retweeted
Próximo viernes 6 de febrero imparto mi taller Wireless Blue Team en la hc0n 😄 @h_c0n #hc0n2026 h-c0n.com/p/talleres2026.htm… nos vemos pronto!! #blueteam #wireless
gibdeon retweeted
🛠️Hemos aumentado el aforo de todos nuestros talleres y volvemos a tener entradas disponibles:
Talleres: h-c0n.com/p/talleres2026.htm…
🗓️Fecha: 5 y 6 de febrero
🗺️Lugar: Hotel Exe Madrid Norte 4*
🎫Entradas: entradium.com/events/h-c0n-2…
gibdeon retweeted
Lo estabais esperando y ya lo tenéis como es habitual por estas fechas... xmas2026.s4ur0n.com/ No seáis brut@s... pensad con la cabeza, pasadlo bien, disfrutad la Navidad y que el Grinch no os la estropee con el CTF... 😅😅😅 Merry XMAS!
![Image from [NN2ed] s4ur0n (@NN2ed_s4ur0n)](https://pbs.twimg.com/media/G82SMbQXYAAdala.jpg?name=orig)
gibdeon retweeted
🎉 yaraast 0.7 is out!
✅ 100% parsing success (31,463 rules tested)
✅ Auto dialect detection (YARA/YARA-L/YARA-X)
✅ pe.exports(/regex/) support
✅ ~1,800 rules/sec performance
✅ 337 tests passing
pip install --upgrade yaraast
#YARA #Cybersecurity #MalwareAnalysis
github.com/seifreed/yaraast
gibdeon retweeted
Quick Linux Trick:
Server load so high you can’t even SSH in?
👉 Use this command;
ssh -o ConnectTimeout=1 -o ConnectionAttempts=1 user@host "nice -n -20 bash"
It gets you a high-priority shell when nothing else works.
gibdeon retweeted
Viernes 6 de febrero impartiré un taller: “Perímetro inalámbrico seguro: taller blue team con Kismet y Nzyme” en @h_c0n h-c0n.com/p/talleres2026.htm… no te lo pierdas!! 😁 #wifi #Ciberseguridad #hc0n2026
gibdeon retweeted
Whether you’re creating your first agent or refining an existing one, our new Mythic for Developers series, hosted by @its_a_feature_ breaks down development from an operator’s point of view.
👀 Dive into the playlist and send us your feature requests: ghst.ly/mythic-dev
gibdeon retweeted
🚨¡Atención! en 4 horas y con el comienzo del #CyberMonday abriremos la venta de entradas de #hc0n2026 con una tirada especial de entradas generales con un badge electrónico de obsequio muy especial... #CTF gracias a @therealdreg
⏰Sólo los 50 más rápidos: 1 de diciembre 0:00h
gibdeon retweeted
🚀H-C0N returns in 2026! Abierto CFP
Los próximos 6 y 7 de febrero en Madrid volvemos con una nueva edición de H-C0N.
¿Quieres impartir una charla o taller y convertirte en uno de los ponentes de esta sexta edición? No lo dudes y mándanos tu propuesta a docs.google.com/forms/d/e/1F…
gibdeon retweeted
Weaponize DLL hijacking easily. Backdoor any function in any DLL.
github.com/Print3M/DllShimme…
