Jean-Michel Besnard (@jmbesnard_maz) header
Jean-Michel Besnard (@jmbesnard_maz) profile picture

Partner - Cybersecurity Audit & Advisory - Grant Thornton France https://teapawt.net/t.co/gQmAQTHcLe

Joined March 2018
Photo by Jean-Michel Besnard (@jmbesnard_maz)Photo by Jean-Michel Besnard (@jmbesnard_maz)Photo by Jean-Michel Besnard (@jmbesnard_maz)Photo by Jean-Michel Besnard (@jmbesnard_maz)Photo by Jean-Michel Besnard (@jmbesnard_maz)Photo by Jean-Michel Besnard (@jmbesnard_maz)Photo by Jean-Michel Besnard (@jmbesnard_maz)Photo by Jean-Michel Besnard (@jmbesnard_maz)Photo by Jean-Michel Besnard (@jmbesnard_maz)
Jean-Michel Besnard retweeted
Bypassing LDAP signing🔥 Thanks to @snowpeacock, NetExec's enum_cve module now has a check for the patches that fix the LDAP signing bypass. If the DC isn't patched, even enforcing signing does not prevent a relay. Link to the blog post by @GrayHatKiller: specterops.io/blog/2026/10/2…
3
59
2
222
7,165
Jean-Michel Besnard retweeted
You Don't Need Mimikatz for DCSync Anymore (SharpDCSync) Credit/Resource: lsecqt.github.io/Red-Teaming…
4
71
343
18,969
If you are in Las Vegas attending #BlackHatUSA do not miss the presentation of #ADMiner this morning by Clément at #Arsenal 10:10am-11:10am ( Arsenal Station 5, Business Hall )
144
AD Miner is coming to Las Vegas for Black Hat USA ! If you are around, meet @snowpeacock on the Arsenal floor tomorrow morning as he will be showcasing #ADMiner #BlackHatUSA
1
3
153
Watched #Canadair firefighting planes scooping water from the #Seine this morning in #Chartrettes, right by my home — heading straight to the massive wildfire ravaging the #Fontainebleau forest. Incredible and heartbreaking to see at the same time. 🔥🌲 #SeineetMarne
1
559
Jean-Michel Besnard retweeted
🚨New podcast episode! Real life Active Directory attack paths, from real life internal pentests. We talk: - how to find them - how they can be abused - how to fix them offsec.blog/episode-186-real…
1
41
228
11,104
Jean-Michel Besnard retweeted
Le challenge est up : sstic.org/2026/challenge
1
9
19
1,965
Jean-Michel Besnard retweeted
🔓 URH-NG is in beta; Universal Radio Hacker, Next Generation -> github.com/PentHertz/urh-ng 327 protocols. 23 automotive ciphers. New Signal Analyzer. New SDR hardware. And it plugs directly into RF Swift.
5
45
1
232
14,838
Jean-Michel Besnard retweeted
Think your guest Wi-Fi is isolated from your main network? Think again. AirSnitch (NDSS'26) breaks client isolation on every router tested: from home APs to enterprise WPA2/3-Enterprise. Full MitM in seconds, sometimes leaking WPA2 traffic in plaintext. Technique breakdown & tool usage: 🔗 community.penthertz.com/t/ai…
4
66
1
343
33,026
If you like BloodHound and AD Hacking let me introduce you to BloodBash No web front end No neo4j No complexity Collect your AD artifacts with Sharphound Run `BloodBash ./pathToSharphoundOutput` That's it! github.com/DotNetRussell/Blo…
6
49
3
245
29,609
Jean-Michel Besnard retweeted
How to mask masks from your cracked passwords with PACK github.com/Hydraze/pack # Get the passwords from your pot file. For simplicity I skip the HEX passwords (which have a : in them). awk -F ':' '{print $NF}' ~/.hashcat/hashcat.potfile > /tmp/pot.plain # Make a CSV file, you can use any plaintext password file as input, like rockyou. python3 statsgen.py --hiderare --maxlength=14 -o pot.csv /tmp/pot.plain # Make the mask from the CSV file. pps = passwords per second, you can also leave this out. -t / --targettime is time in seconds, 86400 is 1 day. Minlenght is minimal length you want the masks. python3 maskgen.py -t 86400 -o pot_min8.hcmask --pps=100000000000 --minlength=8 pot.csv # You can also generate masks with policygen. Set a policy like minimal 1 special in the masks, max 4 digits and length. The following will create a huge mask file: python3 policygen.py -o generated_masks.hcmask --minlength=8 --maxlength=12 --mindigit=1 --maxdigit=4 --minlower=1 --minupper=1 --minspecial=1
1
3
12
1,035
Jean-Michel Besnard retweeted
🇫🇷🎙️ Nouvel épisode du podcast Hack'n Speak ! On lance une série spéciale de 4 épisodes sur les différents labs AD créés pour @_leHACK_ et @_barbhack_ 🔥 Préparez-vous à plonger dans l'AD ! Le premier épisode sera dédié au workshop LeHack 2024 🛡️ creators.spotify.com/pod/pro…
1
4
7
1,891
Jean-Michel Besnard retweeted
If you want to extend #BloodHound a little bit and use it for other stuff such as passwordaudits, choke point detection and remediation tracking, increase your session data again etc, than this one's for you. luemmelsec.github.io/Whos-a-… NO OpenGraph extension - sorry fan boys
1
15
55
5,873
Jean-Michel Besnard retweeted
NAT
1
1
8
602
Jean-Michel Besnard retweeted
Hosts running the WebClient service are prime targets for NTLM relay attacks, and it may be possible to start the service remotely as a low-privileged user. @0xthirteen breaks down the service startup mechanics, plus the protocols and technologies. ghst.ly/41QT7GW
59
2
173
21,293
Jean-Michel Besnard retweeted
dMSA are now supported by impacket (thanks fulc2um!), so its time for badsuccessordumper.py ! github.com/fortra/impacket/p…
Why're we still doing the Impacket thing when @skelsec's stuff is so sick? gist.github.com/snovvcrash/a… (just kidding ofc, Impacket is forever in our hearts)
73
1
193
21,300
Jean-Michel Besnard retweeted
I publish two blog posts today! 📝🐫  The first dives into how we're improving the way BloodHound models attack paths through AD trusts: specterops.io/blog/2025/06/2…  The second covers an attack technique I came across while exploring AD trust abuse: specterops.io/blog/2025/06/2…
4
71
155
12,077