Travis retweeted
Dungeons & Daemons is live and ready to roll! Infiltrate a corporate facility, compromise the domain, exfiltrate the target data, and vanish—all before the clock runs out ⏱️ Do you have what it takes? Your mission starts now! dnd.trustedsec.net/
Travis retweeted
Did you have a rootin' tootin' good time @WWHackinFest? #ICYMI we have you covered on today's episode of #SecurityNoise! We talk with @KelseySegrue about her native voyage to Deadwood and @FullMetalHackIT catches up with @W9HAX on site. Watch it now! hubs.la/Q02WwQ5f0
Had a great experience presenting @WWHackinFest about Offensive Lab Environments! Here is a link to our blog with more details about what I covered (minus the attack demos/SCCM). Reach out if you try it and run into any issues! trustedsec.com/blog/offensiv…
Travis retweeted
Since the POC for ESC 15 seems to have gone public we as TrustedSec decided to release our bofs now as well.
github.com/trustedsec/CS-Rem…
The release is modifications to adcs_request and the new adcs_request_on_behalf.
I advise following @Bandrel for mitigation
Heading out to @WWHackinFest to talk about using automation for Offensive Labs! Sharing our experience in replicating client environments and practicing TTPs! wildwesthackinfest.com/agend…
Travis retweeted
TrustedSec Targeted Operations team. What a privilege to call these guys colleagues and friends!
Travis retweeted
Our team is @BlackHatEvents USA this week! Our Applied Threat Hunting and Detection Engineering training ends tomorrow but make sure you stop to chat if you see us in Vegas 🙌 #BHUSA #BlackHat
A look behind the curtain from our wizards🧙♂️🧙♂️ @Oddvarmoe and @freefirex2 🔥
Feels incredible to finally be able to talk about this tool and capability. Thanks to everyone that attended the webinar today, much appreciated.
This is a tool that the entire Targeted Ops and Research team at TS has contributed to. I initially wrote the tool, but @freefirex2 took it to new heights.
Additional resources:
Code: github.com/trustedsec/specul…
Wiki: github.com/trustedsec/specul…
Video tutorials: youtube.com/playlist?list=PL…
Discord Specula channel: discord.gg/trustedsec
Webinar will also be released on the TS Youtube channel shortly.
6
240
Have been leveraging this framework and it is absolutely 🔥. You won’t want to miss this one!
Join us for our next #webinar "Specula: A Red Team Chronicle" on July 29 where @oddvarmoe and @freefirex2 will introduce Specula, a new open-source #RedTeaming tool. Don't miss your chance to be one of the first to see this tool in action! Register now!
hubs.la/Q02HdXLW0
Travis retweeted
For almost a year, invisible password spraying could be performed against any #Azure tenant due to a vulnerability in #MicrosoftGraph. In our latest blog, @nyxgeek walks us through how these attacks could have been carried out. Read it now! hubs.la/Q02vpTlN0
This was a fun project I just finished with my son; inspiration from tiktok.com/@jeepin80 and his amazing creations. Already have some potential ideas for the next build(s)! Function night light and charging station! I call it the JV-5!
9
411
Was dabbling in Procreate for iPad, followed a tutorial and created this! Very approachable and I’m pleased how well it turned out.
8
331
Travis retweeted
Did you know that most of the O365 password spraying tools are giving (not after today) the wrong output for the error AADSTS50079?
AADSTS50079 has changed the meaning over the years from Microsoft and does not longer mean that MFA is in use, it actually means that MFA must be onboarded.
Did you know about this?
I went through the most popular password spraying tools and did PR on each one to fix the issue so spraying can be more successful. Read more about the discovery
👇
Principal Security Consultant @Oddvarmoe made an exciting discovery while using password-spraying tools in Microsoft Office 365 during a recent engagement. Read our latest #blog to find out how he went from error to entry! hubs.la/Q02pYlDT0