CyberSecurity Analyst, Computer Scientist & Programmer

Brazil
Joined March 2023
Macmod retweeted
After 88 hours and ~10,000 coordinating agents, we're sharing a solution to the two hardest problems in computer science.
32
102
9
1,320
82,316
Exploiting default Active Directory permissions to create malicious, dormant DNS records for future hostnames. This might help hijacking new machine records upon network join for subsequent Kerberos or NTLM relay attacks. A post by Giulio Pierantoni. Source: medium.com/@offsecdeer/adidn… #redteam #blueteam
22
101
6,946
In ldapx v1.3.3 you can now use Unicode modifiers to make queries for attributes like cn and sAMAccountName look like nicknames from 2010😄
1
18
1,590
Macmod retweeted
Super cool research from my colleague Shai Laron on new attack paths to Active Directory that can lead to full domain takeover 😜 . It was presented at Black Hat and he will be speaking again at DEF CON this weekend. Don't miss this 💪 : semperis.com/blog/identity-c…
1
77
219
10,671
🚀ldapx v1.3.0 just dropped Now with active decryption of security layers on top of LDAP, working with ADExplorer and pretty much every other client (or so I hope). Plus better logging, TLS listeners, "pass the cert" support and other upgrades. Link in the reply👇
2
16
94
5,974
Macmod retweeted
Happy to share a technical analysis by @h0j3n on our recent CVE-2026-54121 a.k.a Certighost. glhf🔥 Technical analysis: gist.github.com/H0j3n/a5ef26… POC: github.com/aniqfakhrul/CVE-2…
11
253
10
715
101,570
A little gitbook I wrote to mainly help myself learn the ins and out of the protocol to the level of MS-KILE/RFC4120. Others might also find it helpful and valuable in learning the protocol to a deep level without needing to read dry open specs thattotallyrealmyth.gitbook.…
1
1
10
1,038
Abdul has some of the best insights out there, check out his blog if you are into AD security and haven't already :)
Wrote a new blog about caveats with tools detecting(or mis detecting) relay exploit primitives against http(ESC8) and MSSQL endpoints. Kept noticing issues in tools reporting the absence or presence of vulns that I thought others may have noticed too abdulmhsblog.com/posts/pitfa…
3
656
Macmod retweeted
Onelogon: Taking over Active Directory Accounts via Netlogon🔑 We analyzed Netlogon, bypassed the Zerologon patch, resulting in a full auth bypass. An attacker can leverage this to compromise computer accounts, or even the entire AD. Non-standard config must be present tho 🧵
9
191
9
692
80,977
Macmod retweeted
NetHack is one of the most complex and longest-lived open source programs ever written, and after 46 years, v5.0 shipped today. nethack.org/common/index.htm… And ... it is a VERY cool large codebase to work with in the LLM era.
19
199
25
1,054
123,084
Anyone around for Defcon Singapore? 🐦‍🔥🐲🐦‍🔥
2
1
544
@amoshkov maybe I’ll get to see my favorite totally-not-a-spy friend again?
1
324
I am excited to release the seventh article in the Exploiting Reversing Series (ERS). Titled “Exploitation Techniques | CVE-2024-30085 (part 01)” this 119-page technical guide offers a comprehensive roadmap for vulnerability exploitation: exploitreversing.com/2026/03… Key features of this edition: [+] Dual Exploit Strategies: Two distinct exploit versions using Token Stealing and I/O Ring techniques. [+] Exploit ALPC + PreviousMode Flip + Token Stealing: elevation of privilege of a regular user to SYSTEM. [+] Exploit ALPC + Pipes + I/O Ring: elevation of privilege of a regular user to SYSTEM. [+] Solid Reliability: Two complete working and stable exploits, including an improved cleanup stage. [+] Optimized Exploit Logic: Significant refinements to the codebase and technical execution for better stability and predictability. The article guides you through the two distinct techniques for exploiting the CVE-2024-30085 Heap Buffer Overflow vulnerability. I would like to thank Ilfak Guilfanov (@ilfak on X) and Hex-Rays SA (@HexRaysSA on X) for their constant and uninterrupted support, which has helped me write these articles over time. I hope this serves as a definitive resource for your research. If you find it helpful, please feel free to share it or reach out with your feedback! Enjoy your reading and have an excellent day.
5
89
2
309
29,698
Macmod retweeted
Full ADWS support landed with --use-adws --obfuscate flag works surprisingly well without breaking the xml github.com/aniqfakhrul/power…
2
19
50
3,295
this looks quite cool from @TurvSec pentestlist.com/tools
4
43
257
21,940
A sorting algorithm walks into a bar and orders
51
1,017
26
14,441
223,431
29
676
21
14,198
350,661