Andrei. Security specialist , HTB player, OSCP, OSWE

Joined April 2014
Hello, It's giveaway-number-plz-make-it-end Our friends from @vulnlab_eu hooked us up with 10 vouchers to their Vulnerability Lab with full access for 90 days. If you want to practice hacking stuff, on various difficulties, for 90 days, leave a comment below. - Winners will be selected randomly in the next 24 hours. - We will DM winners. - If you do not confirm your win in 24 hours a new winner will be selected - If your DMs are closed, you automatically forfeit your prize
832
42
589
35,261
Time to relax with an easy machine before the AD madness continues🍹Down by @ATeamJKR is hitting the lab on Thursday!
1
9
70
2,343
Got my coin! Thanks @vulnlab_eu for this cool stuff!
1
3
49
2,019
The next Red Team Lab on Vulnlab will be released on August 8, 2024. This lab features over 10 machines and is rated Easy. The Active Directory environment mirrors what you typically encounter in penetration tests and is complemented by a robust SOC.
3
38
3
179
11,259
Hope you will enjoy it :)
A brand-new machine is coming to Vulnlab tomorrow! Watcher, created by @Dark___CaT and whatev3n, is a medium-difficulty Linux machine that combines recent vulnerabilities with a nice red teaming perspective.
1
2
33
1,732
Congratulations! Awesome realistic boxes, red team labs, and rly great community! I am convinced that this is just the beginning, and there is more to come!
Hey Vulnlab Community! Just taking a moment to reflect on how far we've come together. It's been about a year since Vulnlab first launched, and now we've got around 100 vulnerable machines spread across 50 labs, 2300 Discord members and more than 700 lab users! The main focus always stayed on realistic enterprise environments but we also managed to dive a bit into other topics like AppSec, Reversing, Kiosk Escapes and even Windows Userland & Kernel Exploitation. I want to give a big shoutout to all of you for making this possible. Whether you're giving support to the project, solving machines in the lab or creating content - your dedication and expertise are what make Vulnlab thrive. We've got some of the most talented and dedicated players and machine authors out there. So, a huge shoutout to each and every one of you for making Vulnlab what it is today. Here's to countless more late nights, epic wins, and friendships. @0xr0BIT @k0zmer @ATeamJKR @macz01590714 @Yeeb_ @_Sm1l3z @django88_ @snowscan @d3sty_ @ottersec_ @Geiseric4 @_ar0x4 @Fumenoid @csenox1 @secure_sec77 @toonii_14 @_kavigihan @Sno0wOfficial @MantodeaSec
6
672
A new Red Team Lab, Shiva, is coming to Vulnlab next week! This time you get to test a hardened Hybrid-AD environment that involves: - Hybrid-AD with 10+ machines & active users - Cloud exploitation - SIEM, EDR on Clients & Servers - Common enterprise software - No CVEs
3
106
4
490
76,552
Delegate by @Geiseric4 is coming to Vulnlab this week! Expect some quality AD content 🔥
3
19
96
7,411
Control by @ATeamJKR is getting released on Thursday - this is the first full linux chain on Vulnlab!
1
5
68
11,160
Intercept by @xct_de is coming to the lab next Thursday! It’s rated hard and involves some AD concepts that are useful in real engagements but not often seen in labs. This puts the lab at over 50 machines!
2
17
89
9,486
Thanks @xct_de for amazing opportunity to learn something new! I can advise everyone who is involved in pentests to try #Vulnlab api.eu.badgr.io/public/asser…
6
42
2,604
Vulnlab just released a new Active Directory lab called Wutai! Like Shinra, it’s a simulated corporate environment with about 15 machines spread across multiple networks, domains & forests. The lab focuses on exploiting misconfigurations & users - not CVEs.
10
153
1
532
64,799
This is going to be interesting 👀
New machine "Dump" is going live today! Thank you @ATeamJKR for creating this machine for Vulnlab! This is already the second jkr box on the platform 🍾
1
9
2,609
DroppedConnection - a fake VPN server that captures credentials and executes code via the Cisco AnyConnect client. research.nccgroup.com/2023/0…
7
176
8
434
46,024
Thank you very much @infosecart for new avatar picture :)
6
665
Sliver C2 developers have recently implemented an "external builder" feature to compile implants on external servers, but why not just use it to create completely custom implants instead? 🙃
1
30
1
163
18,523
I hacked a large company (70k+ employees) through social engineering. Legally of course. • I set up the infrastructure • Scraped names & emails with LinkedIn • Sent 200 phishing emails. I had access to their AWS console within 2 minutes. And much more:
71
570
36
3,651
518,921
Today we're publishing new techniques for recovering NTLM hashes from encrypted credentials protected by Windows Defender Credential Guard. These techniques also work on victims logged on before the server was compromised. research.ifcr.dk/pass-the-ch…
34
668
21
1,672
215,877