Josh Abraham retweeted
SANS CDI 2024 is fast approaching. I'll be teaching my @SANSOffensive implant dev class #SEC670. Sign up for some nerdy C++ fun as you make Windows implants for a custom Python C2 server.
Josh Abraham retweeted
Before you know it, SANS Baltimore will be here. I’m pumped to be the event chair and be teaching #SEC670 😁 there was a massive update released in July and that’s what I’ll be teaching 🤓
I’d love to C you in person!
sans.org/cyber-security-cour…
@SANSOffensive @SANSInstitute
Josh Abraham retweeted
The decision to bring on an investment partner was a momentous one for me. @PortSwigger’s story is highly unusual: a hobby project that turned into a business; fully bootstrapped for 15 years; a widely adopted product with minimal sales and marketing. We’ve always been led by our commitment to delivering exceptional value for our customers, our desire to be a force for good in the world, and our strong company culture.
We chose BPC as our partner because of their deep understanding of the cybersecurity sector, proven expertise, and strong alignment with our values and mission. Our primary goals were to raise our ambition, stretch ourselves to think bigger, and gain the expertise we need to execute on that vision.
BPC is a minority shareholder, allowing us to retain overall control of our business. I’m fired up for the years ahead, and look forward to leading PortSwigger to deliver more value to our customers and the wider cybersecurity community.
Josh Abraham retweeted
It’s official!!! The first update to #SEC670 is done and approved for release at #SANSFIRE 🔥 for those coming in person, I have some cool things up my sleeve for you all.
It’s not too late to register in person 👇🏻
sans.org/cyber-security-cour…
@SANSOffensive @SANSInstitute
Josh Abraham retweeted
Real quick for anyone looking for VMware Fusion and Workstation downloads in the new Broadcom portal:
Fusion:
support.broadcom.com/group/e…
Workstation:
support.broadcom.com/group/e…
You need an account and you need to log in, but the ‘Downloads’ link in those pages takes you to the right place…
Josh Abraham retweeted
🔥Big News! I’m thrilled to finally announce Asymmetric Research (@asymmetric_re), a web3 security venture I’ve recently co-founded with Felix Wilhelm (@_fel1x).
Josh Abraham retweeted
Goad small update ! 🏰 🥳
i added scenarios to complete some compromise path.
- files with secrets in shares
- gmsa account
- asrep account on essos
- write dacl on container
- unconstrained delegation on user
- protected user
- sensitive user
- ppl
github.com/Orange-Cyberdefen…
Josh Abraham retweeted
TLDR; 4 new releases from @myhackerhouse for your malware development and analysis purposes with 3 re-created from the CIA's Vault7 leak.
1. github.com/hackerhouse-opens…
2. github.com/hackerhouse-opens…
3. github.com/hackerhouse-opens…
4. github.com/hackerhouse-opens…
Happy New Year & Enjoy 2024!🎇
Josh Abraham retweeted
Forget about the server-side Golang plugin way. I managed to expose the Havoc client qt6 library to Python and now the client UI can be fully scripted using Python and pyside6. It is now possible to create full UI elements/widgets for the Havoc GUI.
Replying to @C5pider
Either way, now the listeners are fully external and not a built-in feature. Is going to allow me to add support for more listeners like abusing legit sites and services for agent communication.
[6/11]
Josh Abraham retweeted
Paged Out! #3 is out! Download it here pagedout.institute/download/…
Josh Abraham retweeted
After a little break, it’s time to get back to the @SANSOffensive Intro to C workshops! 😁
Always free. Always recorded.
Register online when you have a chance.
Josh Abraham retweeted
Ahoy! We are DELIGHTED to announce the launch of SANS Holiday Hack Challenge 2023! It's a free gift to the community from @SANSInstitute. Build cyber skills while having fun, leveraging AI. For all skill levels, novice to advanced & everyone in between! sans.org/holidayhack
Josh Abraham retweeted
.@chrissullo has finally squashed enough bugs and added enough new features to release Nikto 2.5.0.
Well done, a really good bit of work.
github.com/sullo/nikto/relea…
Josh Abraham retweeted
The Havoc Framework 0.7 Bites The Dust
- added support for the key/value store API
- several fixes (smb agent, port forwarding, ...)
- added callbacks for new demons
- updated python api
- refactor the hwbp engine
- sleep obf with gadgets
and so much more
github.com/HavocFramework/Ha…
Josh Abraham retweeted
To dive more advanced low layer things such as hypervisor, I'm reviewing Windows kernelmode rootkit techniques, and created a repositry for research and educational purpose.
More PoCs will be added later (filesystem/network mini-filter things especially).
github.com/daem0nc0re/Vector…
Josh Abraham retweeted
Finally put my @GoveeOfficial rope lights on the house! I’ll be putting some more up later, but they are awesome!!!
Josh Abraham retweeted
Off By One Security streams are back! Join me Thursday, the 7-DEC at 11AM PST with the amazing @DidierStevens, who will give us awesome insight (and likely some new tools) on Cobalt Strike from a Blue Team Perspective! AKA: Improve your red team chops!
youtube.com/watch?v=ZtenI_9B…
Josh Abraham retweeted
It's official: Nikto 2.5.0 is released!
This release contains hundreds of enhancements and fixes, including IPv6 support. The 2.5 branch was well-tested and should be a seamless upgrade for most users.
cirt.net/nikto-2.5.0-release

























