Expl0itabl3 retweeted
🚀 1dayexploit is officially live!! 🎉🎉
Today, we’re excited to open 1dayexploit to the security community.
🌐 1dayexploit.com
🦉 Explore ÂLIM: alim.1dayexploit.com
Built for offensive security researchers, 1dayexploit is a platform focused on high-quality technical research, in-depth CVE analysis, root cause investigations, exploit development, PoCs, and practical security insights.
As part of the platform, we’re also introducing ÂLIM. Our AI-powered research assistant that helps transform CVEs into technical evidence. Rather than simply summarizing vulnerabilities, ÂLIM analyzes root causes, explains the affected code, assists with exploit development, and helps researchers understand the real-world impact of security issues.
This is just the beginning. We’re continuously building new research capabilities, AI-driven workflows, and features to help security researchers move faster and dive deeper into vulnerability research.
We’d love to hear your feedback and suggestions.
✉️ [email protected]
#ALIM #1dayexploit #CyberSecurity #OffensiveSecurity #AppSec #RedTeam #BugBounty #CVE #ExploitDevelopment #VulnerabilityResearch #AI #LLM
Expl0itabl3 retweeted
A differrent approach to red team tool design saza.re/posts/rover/
Expl0itabl3 retweeted
There is this strange phenomena where people new to cybersecurity go way overboard trying to look cool and badass to give the facade of being really technical.
I'll tell you something right now. You probably won't like to hear it, but it is important.
Nobody cares about:
- Your certificates
- The conferences you've attended
- Your vendor swag
- What OS you're using
- How many LED's your computer has
Here is what your peers admire the most:
- If you're polite
- If you're willing to admit if you're wrong
- If you're easy to get along with
If you're just a chill nerd who is nice, easy going, willing to admit when you're wrong, you will go further than the big mean nerd with the galaxy brain
RT @0xBoku: As promised... this is Loki Command & Control! Thanks to @d_tranman for his work done on the project and everyone else on the t…
Expl0itabl3 retweeted
I’ve started the development of a #Nimplant C2 beacon in truly position independent pure C-code.
It’s a PoC, highly opsec unsafe, but hopefully it inspires some people and sparks creativity! 👨💻
github.com/tijme/nimplant-be…
Expl0itabl3 retweeted
Our @BSidesLondon Ivanti & Pulse Secure VPN kernel exploitation talk is live! The presentation is about shared research of my colleague Alex and me.
CVE-2023-38043, CVE-2023-35080 & CVE-2023-38543
youtube.com/watch?v=hmYK5yoR…
Expl0itabl3 retweeted
Releasing a complete rewrite of "Understanding Windows Lateral Movements"
- 71 more slides
- Better explanations
- Less errors and bad assumptions
If you liked the 2019 version, you should check this one out
Available at attl4s.github.io/
Expl0itabl3 retweeted
After some months of very enjoyable research, I'm happy to release:
"Understanding a Payload's Life (featuring Meterpreter & other guests)"
Only slides are available at this time. You can find them at:
attl4s.github.io/assets/pdf/…
Expl0itabl3 retweeted
2022 Year in Review
➡️Most common TTPs we saw in 2022
➡️Trends around IAB's
➡️Top detections
➡️Ransomware propagation methods
➡️and more!
thedfirreport.com/2023/03/06…
Expl0itabl3 retweeted
Northwave has conducted research into the psychological effects of a ransomware crisis on people involved in mitigating a ransomware attack. The findings reveal the deep marks that a ransomware crisis leaves on all those affected.
northwave-security.com/wp-co…
Expl0itabl3 retweeted
Cobalt Strike BOF to bypass UAC via the CMSTPLUA COM interface.
It masquerades PEB and utilises COM Elevation Moniker on the CMSTPLUA COM object to execute commands in an elevated context.
github.com/tijme/cmstplua-ua…
Expl0itabl3 retweeted
Today I'm happy to announce my newest and most ambitious project - the Azure Threat Research Matrix (ATRM). A similar look to MITRE ATT&CK Enterprise, but the ATRM will cover AzureAD and Azure resource TTPs. Official blog post: techcommunity.microsoft.com/… (1/2)
Expl0itabl3 retweeted
Bypassing CrowdStrike, Microsoft Defender for Endpoint etc. for fun.. not profit vanmieghem.io/blueprint-for-…
Expl0itabl3 retweeted
Check out my talk from Mystikcon. Five Ways I got Caught before Lunch.
A brief look at commonly used (bad) tradecraft and how to avoid.
youtu.be/qIbrozlf2wM
Expl0itabl3 retweeted
Introducing Community Kit. Community created Cobalt Strike resources can be challenging to locate. Community Kit is a central repository of extensions written by the user community to extend the capabilities of Cobalt Strike. #cobaltstrike blog.cobaltstrike.com/2021/0…
Expl0itabl3 retweeted
Ever not 100% sure if a Cobalt Strike command uses Fork&Run or executes code within a Beacon process (i.e. BOF)? This simple aggressor script helps you by colouring commands based on their type:
github.com/outflanknl/HelpCo…
Expl0itabl3 retweeted
Abusing IP camera's for Red Teaming: Part 1 - Obtaining the firmware.
northwave-security.com/blog-…
Expl0itabl3 retweeted
Excited for my talk tomorrow at the (free!) @WWHackinFest Cloud pentesting roundup! Giving a talk about Azure AD Conditional Access policies. Slides still need some work but I have a logo 😁 Tomorrow Dec 10th at 2pm eastern / 18:00 CET! More details: wildwesthackinfest.com/the-r…
ALT Fantastic conditional access policies and how to bypass them.