👹 [ snovvcrash, sn🥶vvcr💥sh ]

Have been playing around with Domain Fronting via Fastly and discovered that you actually do not need to confirm the domain name ownership (by adding a CNAME) for the traffic to flow towards your IP. A bug or feature? 🤔

🐥 [ tweet ]

игрались тут с @Acrono с домен фронтингом и вот такую фичу интересную нашли

😈 [ gregdarwin, Greg Darwin ]

New Cobalt Strike blog post - this one is the first in a series on UDRL development and accompanies a new addition to the Arsenal Kit: The UDRL-VS. We're aiming to lower the barrier to entry for developing UDRLs with this series.
https://t.co/4EfCfuLT9G

🔗 https://www.cobaltstrike.com/blog/revisiting-the-udrl-part-1-simplifying-development/

🐥 [ tweet ]

продолжаем учиться писать URDL для кобы

Не проверял, но похоже на правду ⤵️

🔗 https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY

UPD. И еще один PoC на поше ⤵️

🔗 https://github.com/api0cradle/CVE-2023-23397-POC-Powershell

Привет, а можешь на гист залить zzz_exploit ?
https://twitter.com/snovvcrash/status/1636406137510666242

😈 [ nodauf, nodauf ]

New PPL Bypass with the poc by @itm4n :
https://t.co/6uHwTaE59y
https://t.co/NQOO2BsxPP

🔗 https://blog.scrt.ch/2023/03/17/bypassing-ppl-in-userland-again/
🔗 https://github.com/itm4n/PPLmedic

🐥 [ tweet ]

😈 [ ZeroMemoryEx, V2 ]

a kernel mode driver that can replace a process token with the system token for elevating Process privileges, check it out .
https://t.co/XFbHcTc1JX

🔗 https://github.com/ZeroMemoryEx/Tokenizer

🐥 [ tweet ]

😈 [ AnubisOnSec, anubis ]

Ayy, we did the thing. Here's a small blog on how we worked with @chvancooten to help provide some detections before the release of NimPlant 💪

https://t.co/0ToKqp58bj

🔗 https://developer.nvidia.com/blog/detecting-malware-with-purple-team-collaboration/

🐥 [ tweet ]

⚠️ Тут это, говорят, сервера ложатся от дцсинка сикретсдампом (2012R2, 2016, 2019). Когда есть возможность, не реплицируйте вслепую весь нтдс – лсасс не выдерживает.

https://github.com/fortra/impacket/issues/1436#issuecomment-1476996085

😈 [ passthehashbrwn, Josh ]

Here's a short blog on using Frida to write and bypass detections for your TTPs. We can use good ol' userland hooking + JavaScript bindings to avoid writing complex kernel code, which lets us quickly develop test cases and improve our techniques.

https://t.co/IxixfRmG67

🔗 https://passthehashbrowns.github.io/using-frida-for-rapid-detection-testing

🐥 [ tweet ]

😈 [ _EthicalChaos_, CCob🏴󠁧󠁢󠁷󠁬󠁳󠁿 ]

@mpgn_x64 @twosevenzero I've just had a look at the WinDbg crash log. LSASS is crashing with 0xC0000005 access violation with an invalid read. Doesn't really matter how impacket has implemented MS-DRSR, this is a CVE. At minimum a DoS but potentially RCE under the right conditions.

🐥 [ tweet ]

хихик

😈 [ _0pr_, ChaofanXU ]

Read @0xTriboulet 's blog https://t.co/FTGXcJD4e3 is like an addiction. Teaches you how to become a good "shellcode smuggler". And, Sektor7 is a must go too.

🔗 https://steve-s.gitbook.io/0xtriboulet/

🐥 [ tweet ]

😈 [ an0n_r0, an0n ]

Played with Outlook CVE-2023-23397. Made a simple PoC email builder & sender featuring malicious reminder (just a Msg, no need to use a Task or Cal. Ev.).

Critical 0-click account takeover on internal networks even after MS patch, no need to open the message on the victim side.

🐥 [ tweet ]

😈 [ mpgn_x64, mpgn ]

I've just tested a new feature developed by @MJHallenbeck and I must say that even myself I was not ready for this ... 🫣

You will soon be able to chain multiple modules on CrackMapExec and gain so much time 🔥💪

Coming in a few days for sponsors on @porchetta_ind 🪂

🐥 [ tweet ]

😈 [ pdiscoveryio, ProjectDiscovery.io ]

Introducing AIx, A simple CLI tool for interacting with Large Language Models (LLM) APIs! With AIx, you can easily query OpenAI's LLM APIs to ask about anything and get the answers straight to your CLI.

GitHub Project - https://t.co/XGGgzTPbEo

#AI #LLM #CLI #OpenAI #Opensource

🔗 https://github.com/projectdiscovery/aix

🐥 [ tweet ]

Иногда бывают ситуации, когда нет возможности изменить время на рабочей машине с *NIX-ами (например, отключить синхронизацию часов ВМ с хостом в VBox можно только предварительно потушив виртуалку), а помучить Керберос нада здесь и сейчас.

Для таких случаев сподручно пользоваться faketime (ставится через apt) – утилитой для изменения времени ОС в контексте одной команды. Сие работает перехватом системных вызовов и подменой истинного значения времени на то, что нужно пользователю для того или иного действия:

~$ ntpdate -q $DC
~$ ntpdate -q $DC | awk -F. '{print $1}'
~$ faketime "`ntpdate -q $DC | awk -F. '{print $1}'`" /bin/date