Breaking stuff and writing about it
Joined April 2021
- Tweets97
- Following281
- Followers290
- Likes1.1K
For the last few weeks I’ve been trying to build a usable AI Vishing model as cheaply as possible, hopefully my post may help others who are considering doing something similar!
http418infosec.com/developin…
Some thoughts on how to test against Scattered Spider TTPs and a quick summary on the current available TI. http418infosec.com/simulatin…
HTTP418 retweeted
I wrote a script to identify every TAKEOVER and ELEVATE attack in Misconfiguration Manager that can be run with Read-only Analyst privileges or higher in SCCM. Please share with your IT admins, defenders, clients, assessors, and friends in infosec!
posts.specterops.io/rooting-…
HTTP418 retweeted
Today the Cyber Safety Review Board released its independent review of the Summer 2023 Microsoft Exchange Online intrusion laying out what led to the intrusion & what industry & gov't can do to ensure an intrusion at this magnitude does not happen again. go.dhs.gov/JRT
The GoPhish API can be used for some fun and games, my latest post shows how single use phishing links can be made using GoPhish + AWS SES! http418infosec.com/one-time-…
HTTP418 retweeted
MachineAccountQuota = 0, preventing you from grabbing NAA creds remotely?
DPAPI to the rescue!
Ported over NAA Extraction via DPAPI to sccmhunter.
h/t: @agsolino & @clavoillotte for SystemDPAPI.py
Confused on the basics of C++? Hopefully this little post will help out with some of the confusion! http418infosec.com/deez-word…
Extended Protection - prevents NTLM relaying from being possible!
learn.microsoft.com/en-us/sq…
These attacks are from tooling and guides shared by @_Mayyhem, @garrfoster, @_xpn_, @Raiona_ZA and @DiLomSec1. @vendetce's talk at BHIS is a fantastic intro to the area if you have a spare hour, and was a huge help to me! 2/2
I have just written a post (http418infosec.com/offensive…) summarising the various published SCCM attacks, from PXE enumeration through to Site Takeovers 1/2
HTTP418 retweeted
We would like to express our condolences to Blue Teamers.
Microsoft has announced Microsoft Excel will now support Python.
More information: techcommunity.microsoft.com/…
HTTP418 retweeted
Didn't have time to talk about the newly released TLDs last week, but here we go.
File Archiver In The Browser: Emulating file archive software in the browser with a .zip domain for phishing
mrd0x.com/file-archiver-in-t…
Additionally, I have done another post on the basics of BloodHound for those who are new to the tool! (2/2) http418infosec.com/2023/05/1…
I've just published a post on how Cypher language can be used to assess & audit an AD environment with some of its more complex features (1/2) http418infosec.com/2023/05/1…
Another amazing article by @KimZetter, grab a cup of tea and make time to read this!
Two years ago the SolarWinds hack made history as the boldest, most sophisticated supply chain hack ever pulled off. I dug into the detailed story about the ingenious way the hackers pulled it off - and then got caught - in this tale for WIRED magazine wired.com/story/the-untold-s…
