United States
Joined September 2011
OrdinalExport retweeted
A new module has been merged into NetExec: change-password🔥 Accounts with STATUS_PASSWORD_EXPIRED aren't a problem anymore, just reset their password. You can also abuse ForceChangePassword to reset another user's password. Made by @kriyosthearcane, @mehmetcanterman and me
2
117
398
21,422
MITRE announced on April 15 that their CVE contract ends on April 16. That timing alone raises some questions. The language in the message feels very deliberate: “We’re committed,” “considerable efforts,” “if a break were to occur” – while they know a break will happen the next day. That’s not just unfortunate timing. It looks like controlled messaging, maybe even a pressure move. CVE isn’t some massive budget item. It’s a lightweight system with probably a small core team and some automation. I’d guess a handful of full-time staff, not dozens. So cutting this - of all things - doesn’t really look like cost-saving. If the goal was to send a message about funding or contract uncertainty, they picked the most visible and disruptive program. And it worked – everyone’s paying attention. It’s worth noting that MITRE owns the CVE and CWE trademarks. Even if someone else takes over, they’ll still be operating within MITRE’s legal boundaries. All in all, this looks less like a necessary budget cut and more like a strategic decision to generate visibility and urgency. Hard to read it any other way.
BREAKING. From a reliable source. MITRE support for the CVE program is due to expire tomorrow. The attached letter was sent out to CVE Board Members.
25
72
10
334
163,369
OrdinalExport retweeted
CF-Hero: discover the real IP addresses of web applications protected by Cloudflare meterpreter.org/cf-hero-disc…
19
466
9
2,379
130,525
Improved bypass for Windows 11 OOBE: 1. Shift-F10 2. start ms-cxh:localonly Only required on Home and Pro editions.
111
1,461
173
8,425
733,321
OrdinalExport retweeted
We’re removing the bypassnro.cmd script from the build to enhance security and user experience of Windows 11. This change ensures that all users exit setup with internet connectivity and a Microsoft Account. blogs.windows.com/windows-in…
139
20
52
198
83,652
OrdinalExport retweeted
The NXCDB of NetExec finally supports the LDAP protocol as well🎉 Long overdue and now finally implemented by @lapinousexy
3
41
1
211
9,356
OrdinalExport retweeted
RustPotato: privilege escalation tool meterpreter.org/rustpotato-p…
90
306
15,264
OrdinalExport retweeted
Video demo of bypassing Windows Defender App Control with Loki C2! Blog with details coming in 1-2 weeks. Yes -- @d_tranman and I created an entire C2 in JavaScript and it bypasses all the things 🥷🧙‍♂️🪄
21
136
5
580
53,222
OrdinalExport retweeted
17
89
12
808
51,089
OrdinalExport retweeted
We have had many positions open up recently, along with some internships. We are 100 percent remote. US only at this point. Spread the word. binarydefense.com/about-us/c…
4
16
1,831
43
120
18
1,359
59,777
OrdinalExport retweeted
HTA files just won't quit malwareanalysisspace.blogspo…
4
14
82
7,167
OrdinalExport retweeted
Which Edge feature do you find yourself using the most?
2,739
20,677
1,726
370,539
16,571,726
OrdinalExport retweeted
Bypass AMSI in 2025, my newest blog post is published 🥳! A review on what changed over the last years and what's still efficient today. en.r-tec.net/r-tec-blog-bypa…
1
276
2
662
36,118
OrdinalExport retweeted
Obsidian
@obsdmd20 Feb 2025
Obsidian is now free for work. Starting today, the Obsidian Commercial license is optional. Anyone can use Obsidian for work, for free. If Obsidian benefits your organization, you can still purchase Commercial licenses to support development. Nothing else is changing. No account required, no ads, no tracking, no strings attached. Your data remains fully in your control, stored locally in plain text Markdown files. All features are available to you for free without limits. Why make this change? Simplicity. The Commercial license terms were confusing and added unnecessary complexity to our pricing. Furthermore, as the Obsidian Manifesto states: "we believe that everyone should have the tools to think clearly and organize ideas effectively". This change brings us closer to that principle. People in over 10,000 organizations use Obsidian. Many work in high-security environments, like government, cybersecurity, and finance. Some of the largest organizations in the world, including Amazon and Google, have thousands of employees using Obsidian every day. These teams rely on Obsidian to think more effectively and keep total ownership over private data. Previously, people at companies with two or more employees were required to purchase a Commercial license to use Obsidian for work. Going forward, the Commercial license is no longer required, but remains an optional way for organizations to support Obsidian, similar to the Catalyst license for individuals. Organizations that support Obsidian are now featured on the Obsidian Enterprise page. Your organization can be showcased by purchasing 25 licenses or more. Along with Commercial and Catalyst support, our add-on services, Sync and Publish help Obsidian remain 100% user-supported. In the future, we hope to offer more services designed for teams. As always, these will be optional.
215
1,556
389
11,859
939,009
🎉 We've just released 🔐 keycred 🎉 A cross-platform tool for handling Active Directory Shadow Credentials/msDS-KeyCredentialLink 🔑. It supports UnPAC-the-Hash/PKINIT, Pass-the-Cert, Channel Binding and more 💪🚀 🔥 Get it while it's still hot! 🔥 github.com/RedTeamPentesting…
1
123
2
313
16,327