😈 [ ShitSecure, S3cur3Th1sSh1t ]

After holding the talks at @x33fcon
and @WEareTROOPERS
done, I also finally managed to write down my latest research about userland hook evasion:

🔗 https://s3cur3th1ssh1t.github.io/Cat_Mouse_or_Chess/

🐥 [ tweet ]

😈 [ Lares_, Lares ]

New blog post from Andy Gill of the @Lares_ Labs team: Introducing Slinky Cat - Living off the AD Land. Read it here #Lares #research #security

🔗 https://buff.ly/3puT3Nr

🐥 [ tweet ]

😈 [ Gi7w0rm, Gi7w0rm ]

Just released a new #blogpost, where I analyze the initial stages of a #vbs / #powershell based #GuLoader / #CloudEye infection.
Shoutout to @malware_traffic for being the first to find this sample (which I noticed after analyzing it myself ^^).

1/2

🔗 https://gi7w0rm.medium.com/cloudeye-from-lnk-to-shellcode-4b5f1d6d877

🐥 [ tweet ]

😈 [ washi_dev, Washi ]

I spent my Saturday on a dumb project answering the following question:

What is the smallest #dotnet Hello World binary?

Turns out, this rabbit hole is deeper than you may expect, so I wrote a blog post about it:
👉

#reversing #obfuscation #asmresolver

🔗 https://blog.washi.dev/posts/tinysharp/

🐥 [ tweet ]

😈 [ jsecurity101, Jonny Johnson ]

Do you remember the #blackout driver vulnerability discovered by @ZeroMemoryEx?

Well today I am releasing a blog going over my process of reversing the #blackout driver for which I found you can suspend any thread you want from medium IL.

Blog:

🔗 https://www.binarydefense.com/resources/blog/threadsleeper-suspending-threads-via-gmer64-driver/

🐥 [ tweet ]

😈 [ mariuszbit, mgeeky | Mariusz Banach ]

🔥 Wow, this looks really neat! x64 binary obfuscator, written for uni project.

Can't wait to take it for a spin:

🔗 https://github.com/weak1337/Alcatraz

🐥 [ tweet ]

😈 [ D1rkMtr, D1rkMtr ]

My first publicly released blog, covering in-depth:

- Indirect Dynamic Syscall, API Hashing explained using c & windbg.

Blog link:
🔗 https://lnkd.in/eBgkxR3n

Project link:
🔗 https://lnkd.in/eYZPjYPi

🐥 [ tweet ]

😈 [ 0xdea, raptor@infosec.exchange ]

A Deep Dive into Penetration Testing of #macOS Applications (Part 1)

🔗 https://www.cyberark.com/resources/threat-research-blog/a-deep-dive-into-penetration-testing-of-macos-applications-part-1

🐥 [ tweet ]

😈 [ r1cksec, r1cksec ]

New cheatsheets pushed 🕵️‍♂️

🔗 https://github.com/r1cksec/cheatsheets

Including:

A well written blog post on how to read and parse LSASS memory dumps with PowerShell 🔍

#infosec #cybersecurity #pentesting #redteam #lsass #windows

🔗 https://powerseb.github.io/posts/LSASS-parsing-without-a-cat

🐥 [ tweet ]

😈 [ non_curat_lex, Lex (Claire) ]

The project I've been working on lately is finally public:
Hope you'll learn about industrial protocols you've never heard of before!

🔗 https://github.com/Orange-Cyberdefense/awesome-industrial-protocols

🐥 [ tweet ]

😈 [ SBousseaden, Samir ]

interesting recent UAC bypass method

🔗 https://www.zcgonvh.com/post/Advanced_Windows_Task_Scheduler_Playbook-Part.2_from_COM_to_UAC_bypass_and_get_SYSTEM_dirtectly.html

🐥 [ tweet ]

😈 [ AliceCliment, Alice Climent-Pommeret ]

Finally done!

My latest article introduce the basics of Windows kernel drivers/internals and how to find and exploit process killer drivers using LOLDrivers 🤓

I hope you'll enjoy it!

🔗 https://alice.climent-pommeret.red/posts/process-killer-driver/

🐥 [ tweet ]

😈 [ 0gtweet, Grzegorz Tworek ]

Kerberos tickets dumping in pure PowerShell 😍
I simply love such approach.
So much more beautiful than loading pre-compiled binary blob. And so much harder to detect...

🔗 https://www.linkedin.com/posts/mzhmo_hi-friends-you-can-now-dump-kerberos-tickets-activity-7087136960804212737-u5m3
🔗 https://github.com/MzHmO/PowershellKerberos

🐥 [ tweet ]

я вижу тут одного гангстера @Michaelzhm 😎

😈 [ OtterHacker, OtterHacker ]

Hey ! I published a large part of my notes, and I hope you will find something new to learn in it. It goes from simple #OSCP notes to #Malware development (#COFFLoader, #ModuleStomping, #ReflectiveDLLInjection...).

🔗 https://otterhacker.github.io

🐥 [ tweet ]

😈 [ HackingDave, Dave Kennedy ]

Most folks don’t know that @kevinmitnick remained highly technical even up until the end. I worked with him on a number of pentests through the years and we always helped one another.

I’ve never seen someone so driven and persistent. Kevin loved hacking - to an obsession. He didn’t care if he lost money on an engagement - if he didn’t get in he would spend however long it took to own every aspect of the organization. To this day I’ve never met someone like him on how focused and persistent he was on engagements for his clients.

When he didn’t know something or a new technique came out - he would spend hours or days learning it and trying it out. We worked together on putting multiple things both public and private together for engagements or just curiosity.

He did extremely well in life after all his hardships and he told me the only reason he kept his consulting company open was because he loved hacking so much and that’s all he wanted to do. Didn’t care about the money or credibility- his mind worked in such unique ways.

People who say Mitnick wasn’t technical really had no idea what they were talking about or didn’t know him. He was an incredible hacker until his final days. I mean shit, before he went into ICU, he asked me for some of my password cracking dumps we have because he just got a massive GPU rig and was going to give me access.

We would sit there for hours at times screen sharing and working obstacles together. He recognized where he was weak knowledge wise and brought in friends to help and I was always willing to help. He taught me a lot - not just on social engineering of what people think of him - Kev was a legit hacker and I learned a lot of things from him.

We shared zero days, custom payloads, new research and techniques. Was always a blast and his excited laugh when he would finally get to his objectives and the rush of all of the hard work and culmination he had gone through.

Kev was legit, not that this needed to be said - but seeing him first hand, one of the best mentalities and persistence I’ve ever witnessed. He was elite.

🐥 [ tweet ]

😈 [ dec0ne, Mor Davidovich ]

Watched @ustayready webcast yesterday and decided to try implement the technique myself.
Got it working and as a POC plant DLL in Teams folder to be sideloaded for persistence / code exec. Very cool initial access technique. Amazing work @ustayready
Blog:

🔗 https://shorsec.io/blog/malrdp-implementing-rouge-rdp-manually/

🐥 [ tweet ]

😈 [ securekomodo, Bryan Smith ]

Here is my python-based scanner to find #Citrix RCE. Leverages several fingerprinting techniques to accurately identify a remote Citrix servers version and detect if vulnerable to CVE-2023-3467. This is not an exploit PoC. Happy #bugbounty hunting :)

🔗 https://github.com/securekomodo/citrixInspector/

🐥 [ tweet ]