VectorSEC retweeted
We are proud and excited to release DeimosC2. A C2 built in Golang for cross-compatibility and a frontend built in Vue. This has been a year in the making. Great work from @CharlesDardaman, @paragonsec, @BlaiseBrignac, and the entire TeamARES team!
github.com/DeimosC2/DeimosC2
VectorSEC retweeted
We’ve completed the deposit of all public repositories in the GitHub Arctic Code Vault to preserve open source software for generations to come.
github.blog/2020-07-16-githu…
VectorSEC retweeted
Just released a post detailing a methodology for analyzing Windows drivers. My goal is to lower the barrier to entry for finding exploitable driver vulnerabilities through static reversing. posts.specterops.io/methodol…
VectorSEC retweeted
Thread highlights! Malware week.
CIA Vault7 Hacking Team - Development tradecraft: greysec.net/showthread.php?t…
Bypassing antivirus mechanics: greysec.net/showthread.php?t…
Basics on Crypters & Binders: greysec.net/showthread.php?t…
Malware-Mega thread by @Real__Vector : greysec.net/showthread.php?t…
VectorSEC retweeted
This is a hugely under-looked issue, one of a few useful tools to surface out of the crime underground is MBA Sentry allowing for the mass-abuse of stolen accounts from one site to be re-used against others. There is a blossoming cybercrime economy for the stolen logins.
Infosecurity Magazine@InfosecurityMag24 Jan 2020United Kingdom
United KingdomConnected via WebAccount-level information, not a live location or per-post device.
#BSidesLeeds: Credential Stuffing Often Seen as “Volume” Cybercrime infosecurity-magazine.com/ne…
VectorSEC retweeted
I don't usually do interviews unless they are released on some crazy awesome underground diskmag that runs in a DOSbox.
NULL Magazine is an old style bbs/ansi scene emag or even better... a diskmag since fits in a 1.44MB floppy disk.
Download at github.com/xqtr/null
VectorSEC retweeted
Two C# RunPE's capable of x86 and x64 injections
github.com/gigajew/WinXRunPE…
VectorSEC retweeted
The idea was to use Masscan to scan a large number of hosts for open ports related to certain services. Save the results. Then use Nmap NSE scripts to look for vulnerabilities in said services. A vulnerability scanner type set up if you will.
VectorSEC retweeted
Replying to @CryptoCypher
Valid might have been an unfortunate choice of words on my part. basically i mean to launch a hail Mary at 5000 IPs if they stick they stick. The problem is that Masscan generates millions of candidates.
VectorSEC retweeted
Just gonna drop the source in here: github.com/thehappydinoa/roo…
VectorSEC retweeted
ML-driven recon/scan, target selection, exploitation, post-exploit, with QUINE and Simulation in development, all serving to get smiley his cookies. Complete with live reverse shell demo and acknowledgment of limitations and other great work in this space. Bravo!
VectorSEC retweeted
punk.sh -> services = shodan++
Advanced search services as well.
VectorSEC retweeted
Replying to @Real__Vector @YogSotho
Yep, the whole thing is built on a REST-like API! It's not documented yet though so you'd have to use web dev tools to check out the xhr requests and such. We're working on the docs! OH and thanks for the kind words :)
VectorSEC retweeted
New BlackArch Linux ISOs (2017.12.11) released! New version of installer (v0.6.2) addresses several bugs reported by users, kernel 4.14.4, and more! Get it whille it's hot: blackarch.org/downloads.html - blackarch.org/blog.html Please RT! #blackarch #linux #pentest #pentesting
VectorSEC retweeted
Linux Exploitation Course:
A Course on Intermediate Level #Linux #Exploitation by @nn_amon
github.com/nnamon/linux-expl…
VectorSEC retweeted
One-click MS Access database code execution by @424f424f: rvrsh3ll.net/blog/phising/ph… 💥
Static VT detection at 0/59.
I expect some dynamic engines will fail to launch this properly as well.
VectorSEC retweeted
Replying to @Real__Vector @AntiSec_Inc
In case you're concerned that i may be an impostor you can check out my #Github page as it references this Twitter account.
github.com/NullArray


















