Penetration Tester and BloodHound Developer @specterops

Joined August 2010
🧵 Yesterday Microsoft released a post describing CVE-2024-37085, a vulnerability in ESXi hypervisors. According to the disclosure, a low-privilege user can gain "full administrative access" to domain-joined ESXi hypervisors. microsoft.com/en-us/security…
1
24
3
60
13,021
Rohan Vazarkar retweeted
All slides for presentations at #SOCON2024 sponsored by @SpecterOps are now live! github.com/SpecterOps/presen…
1
64
1
128
14,297
Rohan Vazarkar retweeted
This is a HUGE deal. If you've ever purchased a #BloodHound shirt or otherwise donated to @MDAorg, your money has gone towards making this happen.
BREAKING NEWS: #MDA’s funding of foundational research leads to new drug approval by the @US_FDA of Duvyzat (Givinostat) to treat children and adolescents living with #DMD. Duvyzat (Givinostat) will be made available in the US by ITF Therapeutics: mda.org/press-releases/mdas-…
3
10
95
10,385
Rohan Vazarkar retweeted
I was in a situation where I discovered a complete domain compromise. I needed to provide the client with remediation recommendations, but the available information was scattered and high-level. For that reason, @synth_nic0 put together this series: - posts.specterops.io/domain-o… - posts.specterops.io/domain-o…
1
57
175
22,465
Rohan Vazarkar retweeted
New post 👇taking a look at compromising Slack access on both Windows and macOS. New BOF included! posts.specterops.io/abusing-…
3
53
4
114
19,726
Rohan Vazarkar retweeted
The HardHat Toolbox is finally ready github.com/HardHatToolbox. It contains Rivet, a demo Asset (Implant) written in Rust, along with the Asset Development repo, which contains detailed step-by-step guides and templates to help get you started on writing custom Assets for HardHat.
1
11
26
4,036
Rohan Vazarkar retweeted
Join me and @CptJesus on August 17 from 11AM to noon Pacific for our first BloodHound CE webinar. We will show you: - How to get started - Huge performance improvements - API interaction use-cases And more. Register here: ghst.ly/3Om0jDo
7
21
4,291
Rohan Vazarkar retweeted
We are releasing BloodHound Community Edition next week. As part of this release, we are raising money for @StJudeResearch. You can buy your limited edition shirt starting today here: customink.com/fundraising/bl…
2
52
4
157
22,881
Rohan Vazarkar retweeted
Today: join me and @CptJesus in the BloodHound Slack from 11AM to Noon Pacific for an AMA regarding the upcoming BloodHound CE release. Not in the BloodHound Slack yet? Get your invite here: ghst.ly/BHSlack
3
10
3,112
Rohan Vazarkar retweeted
We're thrilled to announce BloodHound Community Edition (CE) -- the next evolution of #BloodHound. Scheduled for release on 8/8, BloodHound CE has many new features & enhancements, making it easier for users to deploy, manage, and utilize. Learn more: ghst.ly/458lIGX
6
115
9
271
32,363
Rohan Vazarkar retweeted
I am proud to announce the release of #BloodHound 4.3! Release blog post: medium.com/p/5795cbf535b2 Limited edition T-shirt: customink.com/fundraising/sp… Get BloodHound 4.3 NOW at bit.ly/GetBloodHound
6
152
8
349
58,247
Wow, what a crowd today at #FIRSTAMS2023! Over 45 people are attending our free Advanced BloodHound workshop in Amsterdam. A great start of the FIRST 2023 Technical Colloquium. #training #bloodhound
1
6
1
32
7,207
Rohan Vazarkar retweeted
To understand our future, we must study our past. I am proud to announce the release of #RetroHound! ✅ Runs on Windows 3.1 ✅ Backed by an MS Access database ✅ Full NetBEUI & LANMAN support See it in action here: bit.ly/RetroHound
23
59
13
292
65,773
Rohan Vazarkar retweeted
Skill up, help out. Take one of our six workshops at SO-CON and support the Equal Justice Initiative! ghst.ly/socon2022workshops
8
10
Rohan Vazarkar retweeted
We here @SpecterOps just released @getghostwriter v3.0.6! There are great new system health monitoring features. This and the previous release also include some very useful contributions from the community, which I really appreciate♥️ github.com/GhostManager/Ghos…
1
9
23
Rohan Vazarkar retweeted
At @SpecterOps, @leidy_tector and I focus on maturing detection engineering teams. This blog explores our methodology for prioritizing the detection engineering backlog. posts.specterops.io/prioriti…
4
132
6
299
The latest post in my #OnDetection series explores tool similarity. We know that the hash can determine if two tools are the same or different, but within "different" there's a range of similarity. "Synonyms" are a powerful tool to help evaluate this. posts.specterops.io/on-detec…
1
52
2
115
Rohan Vazarkar retweeted
If this isn't the coolest thing to put on your wall, I can't help you :) Thx again to @Cyb3rD06 for this awesome present, and @_wald0, @CptJesus and @harmj0y for having invented #BloodhoundAD
2
6
62
Rohan Vazarkar retweeted
Today I got a notification on my phone that YouTube had sent me a copyright report, claiming one of my videos violated copyright and my channel was going to receive a strike. Except, my video didn't violate copyright. And YouTube didn't really send me a copyright report.
147
1,901
285
4,590