セキュリティのお仕事やってます。時々趣味で開発も。発言は全て個人のものです。 WebSecurity / cloudsec / JAWS-UG沖縄 / CISSP / OS(CP|WE|EP) / AWS DOP / AZ-500 / CARTP / CAWASP / CRTO / CRTL

Okinawa🌴
Joined January 2012
三ツ矢 retweeted
Time to update the CISSP exam xitter.cf/Polymarket/status/2112…
JUST IN: AI data centers could soon require blast-resistant concrete, anti-drone defenses, & missile protection as attacks on computing infrastructure escalate worldwide. — Financial Times
24
45
6
466
12,511
AD攻撃の知識をレベルアップしたい方におすすめの一冊!
2
145
9
963
49,236
三ツ矢 retweeted
Sodan、Censys終了のお知らせ😇 VTかVT以外か、そう言うことです。 blog.virustotal.com/2026/10/…
1
26
4
189
22,319
三ツ矢 retweeted
Sending From Email Aliases in Exchange Online is now Generally Available! ​ The feature allows users to send email using any alias (proxy address) configured on their mailbox, instead of being limited to the primary SMTP address. ​ Previously, organizations that needed to send email from another address often had to use workarounds, such as shared mailboxes or distribution groups. ​ Sending from Aliases was introduced in 2021 as a Public Preview. After being in preview for five years, the feature is now generally available and allows users to: ​ • Send emails directly from any configured alias using supported Outlook clients. • Reply using an alias when the original message was sent to that address. • Choose which alias to use when sending an email. ​ Note that this feature applies to the entire organization and can't be enabled for individual mailboxes. ​ Learn more: alitajran.com/send-from-alia… ​ #ExchangeOnline #Microsoft365
4
40
4
224
18,413
ゲロテロ
82
5,447
256
90,202
1,636,143
三ツ矢 retweeted
KELA社の脅威インテリジェンスと富士通の脅威ハンティングを組み合わせたサービスを開始しました。能動的なサイバー防御を体現していきましょう! / 企業や組織における能動的サイバー防御の実践を包括的に支援するセキュリティサービスを提供開始 global.fujitsu/ja-JP/pr/news…
1
10
44
3,914
三ツ矢 retweeted
The Evilginx Chrome browser extension is now officially pending review. 🥳 Here's what's coming up in the 1.0.0 release: - View, search, create, edit, copy, and delete cookies. - Inspect and modify Local Storage and Session Storage. - Import and export cookies and page-storage entries as JSON. - Cookie Monitor that records cookies created or updated through Set-Cookie response headers. - Kickstart Evilginx Phishlet 1.0 YAML or Phishlet 2.0 HJSON development using the cookie and hostname records gathered by the monitoring feature. - Cookie Freeze feature allows you to test which of the captured cookies hold session authentication tokens. - Optionally disable Device Bound Session Credentials registration by removing two specifically named DBSC response headers. Once approved, I will release a hands-on tutorial video on YouTube. 🎬 Attaching several screenshots.
2
32
1
176
8,581
Mimic - Frameless Browser‑in‑the‑Browser (BitB) A single‑script Shadow DOM / MutationObserver library for realistic phishing simulations, easily injected via reverse proxy. github.com/0x4meliorate/Mimi…
17
74
3,771
三ツ矢 retweeted
You don't need a USB. You need to look like one. Emulate the device, Windows fetches a signed package off Windows Update and runs vendor code as SYSTEM. Arbitrary code execution, LPE, standard user or empty logon screen. DEF CON 34 talk w/ @Qm9yamFN. Link at the first comment.
17
267
14
1,269
144,484
三ツ矢 retweeted
Cookie theft got harder. Browser hijacking didn't. @KingOfTheNOPs shows how enabling the Chrome DevTools Protocol inside a live Chrome/Edge process can bypass modern cookie protections, plus how to detect it with Sysmon. Check it out! ⤵️ ghst.ly/461sfpi
43
1
119
19,441
三ツ矢 retweeted
Your browser is a C2 agent waiting to happen. @KingOfTheNOPs shows how to silently sideload a Chromium extension, no prompts or GUI, and turn Chrome/Edge into a persistent implant with SOCKS, cookie theft, and OS access. Read more 👇 ghst.ly/4g8AZif
3
103
6
347
17,649
三ツ矢 retweeted
rootsecdev
@rootsecdevAug 6
Published two new tool drops this morning to enhance your cloud hacking privilege escalation game. Enjoy! #Azure #CloudHacking TrustedSec | The Art of Hunting Azure Cloud Secrets trustedsec.com/blog/the-art-…
56
3
173
22,073
三ツ矢 retweeted
I've just updated the M365 2.0 phishlet for Evilginx Pro with full Browser-in-the-Browser compatibility. 🪝🐟 To remove frame-busting code from any website (allowing it to be iframed): - Remove the "Content-Security-Policy" and "X-Frame-Options" HTTP headers. - Find and remove JavaScript that references "top.location" or "self !== top". - Remove "target='_top'" from HTML forms. Let me know if you'd like me to make a hands-on tutorial showing how to identify and remove frame-busting code from the MS sign-in page using Chrome DevTools and Burp Suite.
3
29
195
12,275
三ツ矢 retweeted
New blog Spent way too much time reverse engineering CrowdStrike Falcon. Somewhere along the way, I found a bug. It's low and not practically exploitable... but a bug is a bug :) Publishing soon 0xdbgman.github.io/posts/ins…
15
121
3
490
39,244
三ツ矢 retweeted
本当にプロンプトインジェクションだった
【悲報】AIずんだもん、視聴者による高度なプロンプトインジェクションにより、壊れてしまう…
70
2
743
333,631
三ツ矢 retweeted
Microsoft Entra ID will retire support for custom CSS positioning properties in company branding! To align with Microsoft's Secure Future Initiative (SFI) and its focus on identity security and phishing resistance, Microsoft is enhancing Microsoft Entra custom branding to support more secure, reliable, and consistent sign-in experiences. This update helps further reduce opportunities for deceptive or misleading sign in page layouts and supports trusted sign in experiences that better protect users from phishing attacks while maintaining brand customization capabilities. 𝗪𝗵𝗲𝗻 𝘄𝗶𝗹𝗹 𝘁𝗵𝗶𝘀 𝗵𝗮𝗽𝗽𝗲𝗻: July 21, 2026: Microsoft Entra ID tenants not using custom CSS positioning properties before July 21, 2026, will not be able to configure them going forward. October 26, 2026: Microsoft Entra ID will retire custom CSS positioning properties globally. Later in 2027: Microsoft Entra plans to move towards full custom CSS retirement, with advance notice provided. 𝗔𝗰𝘁𝗶𝗼𝗻 𝗿𝗲𝗾𝘂𝗶𝗿𝗲𝗱: Microsoft recommends removing the following custom CSS positioning properties from your configuration if your organization uses any of them: • position (including top, right, bottom, left, and z-index) • margin (including margin-top, margin-bottom, margin-left, and margin-right) • transform • opacity • overflow • filter • pointer-events • clip-path • mix-blend-mode • translate Learn more: learn.microsoft.com/en-us/en… #EntraID #Microsoft365 #Cybersecurity
10
62
6,807
三ツ矢 retweeted
Need to do an NTLM relay over C2 but local priv-esc isn't possible? @_logangoins new post walks through relaying NTLM auth out of a network and back in through red team infra to bypass traditional relay controls, plus how defenders actually stop it. specterops.io/blog/2026/07/1…
1
66
1
223
12,391