fxai retweeted
You like device code phishing? You will like Felix Aeppli’s latest research even more. He shows how to backdoor Entra ID phished accounts by adding a new sign-in method. Details and PoC here: blog.compass-security.com/20…
fxai retweeted
Made a SharpHound Collection Cheat Sheet
and a little post to go with it...
#BloodHoundAD
insinuator.net/2021/05/dogwh…
fxai retweeted
Grippeschutzimpfung? Vorsicht: Vor dieser Infektion schützt keine Medizin! Nicht die Anlage öffnen! Nicht das Makro ausführen! #Schadsoftware #Emotet unterwegs. @certbund
fxai retweeted
How to gain control of #Bitbucket with a TAR archive:
1. An attacker with permissions clones a repository from Bitbucket
2. He uploads a malicious TAR archive as an attachment
3. The import of the archive is triggered
...
(1/2)
#java #javasec #appsec
fxai retweeted
Copy your payload into %userprofile%\AppData\Local\Microsoft\Teams\current\
Then
%userprofile%\AppData\Local\Microsoft\Teams\Update.exe --processStart payload.exe --process-start-args "whatever args"
Trusted signed binary will run the payload for you 😊
#RedTeam #Pentesting
fxai retweeted
Looks like this botnet operator infected himself?
Admin panel:
hXXp://evernever.ddns.net/index.php
Opendir:
hXXp://evernever.ddns.net/uploads/screens/
URLhaus:
urlhaus.abuse.ch/host/everne…
Malware samples:
a3303fde0f00800f18bc627b9212d6c8
658908eeec739d261f41864509827310
