Solomon Sklash retweeted
If I had to start all over again to become a red teamer in 2024, what would I do?
cerbersec.com/2024/06/30/bec…
Assuming a solid foundation in Networking/Operating systems/Coding, start practicing on @hackthebox_eu then obtain the @zeropointsecltd RTO I & II certifications. Next pick your poison with either MalDev specialization or @offsectraining or @SANSOffensive training
Solomon Sklash retweeted
New writeup:
"Hacking Millions of Modems (and Investigating Who Hacked My Modem)"
samcurry.net/hacking-million…
Thanks for reading! Huge thanks to @blastbots, @bbuerhaus, @infosec_au, @d0nutptr, @iangcarroll, and everyone who reviewed the post beforehand.
Solomon Sklash retweeted
I'm intending to release an open-source Visual Studio Code extension to make writing BOFs easier for the community:
- Complete Nt/Zw function prototypes with tab completion (and correct typecasting for placeholder variables)
- MSDN header searching
PoC:
youtube.com/watch?v=oWss4Ac9…
Solomon Sklash retweeted
GIANT merge to Nemesis just published
If you've ever struggled to install Nemesis, we've made it 10x easier by getting rid of nemesis-cli and using Helm for k8s management instead
Check out the new setup guide for instructions on how to install: github.com/SpecterOps/Nemesi…
Solomon Sklash retweeted
What is Loader Lock? 🤔 Going BEYOND undocumented, we delve into the heart of the modern Windows loader investigating some internals for the first time and demystifying Loader Lock. 🔒 Check out the research article
elliotonsecurity.com/what-is…
Solomon Sklash retweeted
It's been a long time coming, but JonMon is finally here. This has been something I have worked on for a while. I hope the community enjoys it and I am happy to hear any feedback anyone has!
Slides can be found: github.com/jsecurity101/Pres…
GitHub: github.com/jsecurity101/JonM…
Solomon Sklash retweeted
Introducing deep-TEMPEST: a deep learning method that recovers great quality images from unintentional electromagnetic emanations of HDMI. Great work (in progress) by E. Martinez, S. Fernandez and G. Varela 💪💪 (co-mentored with @muse_pablo). Expect more news in the next weeks.
Solomon Sklash retweeted
My Okta for Red Teamers post is up! We look at how Kerberos SSO works, how to intercept credentials via a fake AD Agent, decrypting AD Agent tokens, adding skeleton key's, and even how to deploy a janky SAML IdP server to auth as any user for good measure. trustedsec.com/blog/okta-for…
Solomon Sklash retweeted
Chrome just announced that it will be using my browsing history to show me ads. I’m really glad I don’t use Chrome as my main browser, and I wish other folks would stop this.
Solomon Sklash retweeted
[BLOG]
Ok, I've written about my experience of battling with both managed and unmanaged memory allocations to try and improve @FuzzySec's Melkor POC.
rastamouse.me/building-a-sli…
Solomon Sklash retweeted
Hooks without custom exception-handler or changing memory protection?
@x86matthew: hold my beer!
Introducing StealthHook - controlling the execution flow of the target function by intercepting return addresses in the nested function call stack.
x86matthew.com/view_post?id=…
Solomon Sklash retweeted
I’m excited to announce that my book, “Evasive Malware”, will soon be available for pre-order! The past 2.5 years of late nights, eye strain, and carpal tunnel is almost worth it 😎
Also excited to announce that my technical reviewer is the amazing @fr0gger_ !
Stay tuned! 👇
Solomon Sklash retweeted
Released my CSharp implementation of Phantom DLL Hollowing.
Thanks for your research @_ForrestOrr
github.com/daem0nc0re/Tangle…
Solomon Sklash retweeted
Today, we are releasing RPC Investigator, made for exploring RPC clients and servers on Windows. This .NET application builds on the NtApiDotNet platform, adding features that offer a new way to explore RPC blog.trailofbits.com/2023/01…
Solomon Sklash retweeted
[RELEASE] After a little wait, I'm happy to present SilentMoonwalk, a PoC implementation of a TRUE call stack spoofer, result of a joint research on an original technique developed by namazso, done with my friends @trickster012 and @waldoirc.
Enjoy! ;)
github.com/klezVirus/SilentM…
Solomon Sklash retweeted
Welcome to the new AD Mindmap upgrade !
v2022_11 will be dark only (this is too painful to maintain two versions).
Thx again to : @Vikingfr and @Sant0rryu for their help 👍
Full quality and zoomable version here :
orange-cyberdefense.github.i…
Overview :
Solomon Sklash retweeted
HavocNotion - Super simple ExternalC2 PoC for Havoc C2 to C2 over Notion API
Accompanying blogpost like before will be posted soon when I have time
github.com/CodeXTF2/HavocNot…
Solomon Sklash retweeted
Was updating my build toolchain and realized I was up a creek trying to get msvcrt linking to work without some hacky workaround. Awesome guide by @SolomonSklash, thanks for saving me the headache!
solomonsklash.io/smaller-c-p…
Solomon Sklash retweeted
The Havoc Framework
github.com/HavocFramework/Ha…
