Marcos Díaz retweeted
Phishing now happens in meetings as well? @ineesdv say yes! Understand how attackers exploit collaboration tools with this new #Insomnihack talk.
Buy your ticket now: ow.ly/yBis50Ya55M
#InsomniHack #Cybersecurity #INSO26
Marcos Díaz retweeted
Just over 24 hours until @_kripteria takes the stage at @h_c0n to revisit the design and methodology of attack graphs in Active Directory, showcasing new approaches with Neo4LDAP.
Marcos Díaz retweeted
Tangled is a social engineering platform that weaponizes calendar event processing in Outlook and Gmail to deliver spoofed meeting invites that are automatically added to a user's calendar without interaction.
github.com/ineesdv/Tangled
Technical breakdown: tarlogic.com/blog/abusing-ca…
Marcos Díaz retweeted
Meetings You Didn’t Plan, But We Did
In this post, @ineesdv breaks down how calendar event processing in Outlook and Gmail can be abused to deliver spoofed meeting invites that are automatically added to a user's calendar without interaction
➡️Read more: tarlogic.com/blog/abusing-ca…
Marcos Díaz retweeted
Our colleagues @_Kudaes_ & @ineesdv will be at #HackOn2024 presenting an alternative approach to ROP-based sleep obfuscation technique to evade memory scanners.
➡️ Read more: hackon.es/charlas/In%C3%A9s_…
Marcos Díaz retweeted
Enhanced version of secretsdump from #Impacket to dump credentials without touching disk.
This feature takes advantage of the WriteDACL privileges held by local administrators to provide temporary read permissions on registry hives.
github.com/fortra/impacket/p…
Marcos Díaz retweeted
As someone involved in the AWS offsec space, I want to share why I strongly do NOT recommend the HackTricks AWS Red Team Expert course. The author of it is a plagiarist, stealing content from other creators and is directly profiting off of it through sponsorships. A 🧵
Marcos Díaz retweeted
🖱Did you know that your wireless mouse can be spoofed to take control of your computer? The @Tarlogic Innovation team has developed #BSAM, the first methodology to audit #Bluetooth devices and avoid situations like that 👇
tarlogic.com/news/bsam-bluet…
Marcos Díaz retweeted
The @NavajaNegra_AB conference is just around the corner! @_Kudaes_ will be on-site to talk about malware development and EDR evasion.
➡️ Read more: navajanegra.com/2023/speaker…
Marcos Díaz retweeted
Watchguard has fixed 4 vulnerabilities in Watchguard EPDR discovered by our researchers @antuache and @Calvaruga.
These vulnerabilities can be used to turn-off the defensive capabilities of the product and achieve privilege escalation.
➡️ Advisories: watchguard.com/es/wgrd-psirt…
Marcos Díaz retweeted
In our latest post, @xassiz introduces a new technique to obtain cleartext passwords from MSSQL by abusing linked servers through the ADSI provider.
➡️ Read more: tarlogic.com/blog/linked-ser…
Marcos Díaz retweeted
Boas Xente! Dende o Barbanza RC queremos acercar o mundo do rugby a maior xente posible polo que este sabado 6 de Maio imos montar un pequeno adestramento e comida posterior. Se algun dia pensaches en probar este marabilloso deporte, este é o teu momento! (1/2)
Marcos Díaz retweeted
Have you ever tried exploiting a Spring Boot Actuators RCE but the restart endpoint was disabled?
⬇️ Abuse this behaviour using this #TrickOrThreat by @antuache
Marcos Díaz retweeted
Windows Local Privilege Escalation via StorSvc service (writable SYSTEM path DLL search order Hijacking) /cc @antuache @_Kudaes_
➡️ github.com/blackarrowsec/red…
Marcos Díaz retweeted
💥One shell to HANDLE them all
New approach to escalate privileges from a web shell by abusing open token handles. #RedTeam /cc @_Kudaes_
➡ tarlogic.com/blog/token-hand…
Marcos Díaz retweeted
AutoDial(dll)ing Your Way - Lateral Movement and LSASS SSP using AutodialDLL, a new blog post and tool release (DragonCastle) by @TheXC3LL
mdsec.co.uk/2022/10/autodial…
Marcos Díaz retweeted
New blog post about Azure AD Principals and access permissions.
csandker.io/2022/10/19/Untan…
Marcos Díaz retweeted
We've extended @nopfor\ntlm_challenger with MSSQL support! This is useful when network segmentation prevents from reaching the SMB port
➡️ github.com/nopfor/ntlm_chall…
Marcos Díaz retweeted
Minor changes to @ly4k_\Certipy to make it compatible with @AlmondOffSec\PassTheCert. Now you can use both PKINIT and Schannel when dealing with ESC4!
Find out more 👇
github.com/ly4k/Certipy/pull…
