@breenmachine
 Montreal
foxglovesecurity.com
Joined May 2011
  • Tweets401
  • Following250
  • Followers1.7K
9Media
Steve Breen retweeted
Andrea P@decoder_it22 Jun 2019
Just uploaded the pdf slides of my talk "whoami /priv" @hackinparis #HIP19 github.com/decoder-it/whoami…

GitHub - decoder-it/whoami-priv-Hackinparis2019: Slides from my talk in "Hackinparis" 2019 edition

Slides from my talk in "Hackinparis" 2019 edition. Contribute to decoder-it/whoami-priv-Hackinparis2019 development by creating an account on GitHub.

github.com
8
260
5
656
This paper is *the* resource for abusing tokens on Windows for privilege escalation. I especially appreciate the level of detail @dronesec and @breenmachine go into to explain the token ecosystem, permissions, past attacks, etc. 10/10 would read again. github.com/hatRiot/token-pri…
2
3
6
Nice!
Silent Signal@SilentSignalHU6 Dec 2018
A small gift from S2anta: @breenmachine showed how to abuse JasperReports for RCE (foxglovesecurity.com/2016/10…) - now here's a single .JRXML file to achieve the same thing if no .JAR's are allowed: gist.github.com/v-p-b/dd95c7…

Hacking JasperReports – The Hidden Shell Feature

By @breenmachine A short while ago, my coworkers and I were working on a penetration test for a client with a fairly small Internet facing attack surface. One thing we did find was that they had le…

foxglovesecurity.com
1
Hey so we're stoked to welcome @jstnkndy @breenmachine and @brandonprry from @foxglovesec to the AtrediFam. We've been calling it "The Hat Trick".
6
8
1
50
Steve Breen retweeted
Andrea P@decoder_it13 Aug 2018
I'm releasing with @Giutro Juicy Potato, another Local Privilege Escalation tool from a Windows Service Accounts to SYSTEM by abusing the golden privileges (decoder.cloud/2018/08/10/jui…)

Juicy Potato (abusing the golden privileges)

Today me and my partner in crime Giuseppe, are releasing our small research with Windows impersonate privileges. The result is a tool named “Juicy Potato”, which is a kind of sequel of …

decoder.cloud
3
93
3
155
#UnpopularOpinion conferences should more heavily vet talks and reject those that are subpar because those speakers often get an inflated sense of skill and spread misinformation.
5
4
2
40
Steve Breen retweeted
Andrea P@decoder_it14 Jan 2018
Custom version of C++ Rotten Potato along with some observations ;-) decoder.cloud/2018/01/13/pot…

Potatoes and tokens

I just finished playing  with the Rotten Potato C# exploit  in order to get it work standalone that the author  @breenmachine  released the C++ standalone version of  “Rotten Potato”. H…

decoder.cloud
35
55
Replying to @ifsecure
@ifsecure uploaded the privilege escalation I wrote (with @halvarflake size coding) for the WPAD blog. bugs.chromium.org/p/project-… Small footprint and uses RPC libs instead of parsing the RPC traffic like Rotten Potato /cc @breenmachine
30
39
#RottenPotatoNG - New version of #RottenPotato as a C++ DLL and standalone C++ binary by @breenmachine github.com/breenmachine/Rott…

GitHub - breenmachine/RottenPotatoNG: New version of RottenPotato as a C++ DLL and standalone C++...

New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools. - breenmachine/RottenPotatoNG

github.com
84
133
HP has released the security bulletin which addresses the vulnerability described in our blogpost support.hp.com/nz-en/documen…
2
6
We think HP should be more concerned with foxes than wolves - "A Sheep in Wolf's Clothing - Finding RCE in HP's Printer Fleet" by @breenmachine - foxglovesecurity.com/2017/11…

A Sheep in Wolf’s Clothing – Finding RCE in HP’s Printer Fleet

By @breenmachine   Sometimes the marketing department goes a little too far. Most of us who work in security have been there, non-technical people enthusiastic about selling the technical feat…

foxglovesecurity.com
4
99
1
110
Abusing delay load DLLs for remote process injection hatriot.github.io/blog/2017/…
37
57
Dropping @breenmachine and @dronesec latest Windows privilege escalation project - For exploit devs and pentesters - foxglovesecurity.com/2017/08…

Abusing Token Privileges For Windows Local Privilege Escalation

By @dronesec and @breenmachine   This a project my friend drone <@dronesec> and I have been poking at for quite some time and are glad to finally be releasing. As the title implies, we&#…

foxglovesecurity.com
5
217
6
265
Steve Breen retweeted
j00ru//vx@j00ru20 Jun 2017
Announcing Bochspwn Reloaded – a new kernel memory infoleak detector – and the REcon Montreal 2017 slides. j00ru.vexillium.org/?p=3295
4
271
7
322
Steve Breen retweeted
MontréHack@montrehack15 May 2017
Such montréhack! Wow! We feel @NorthSec_io 's breath on our necks
1
4
5
There were a few patches released. Some of which were not effective and can be bypassed with public techniques github.com/pwntester/SerialK…

GitHub - pwntester/SerialKillerBypassGadgetCollection: Collection of bypass gadgets to extend and...

Collection of bypass gadgets to extend and wrap ysoserial payloads - pwntester/SerialKillerBypassGadgetCollection

github.com
1
Ah, interesting, helps you inject at arbitrary locations in the T3 blob.
Nice, what are the "template" files referenced in the arguments?
New blogpost by @jstnkndy on abusing Type Juggling and PHP Object Injection to gain SQLi foxglovesecurity.com/2017/02…
2
130
5
130
Hey, @JustinTrudeau, did you forget about this? We did not. And neither will Canadians. xitter.cf/JustinTrudeau/status/6…
Justin Trudeau
@JustinTrudeau22 Sep 2015
As Prime Minister, I’ll make sure the 2015 election will be the last under first-past-the-post system lpc.ca/ao3o #upfordebate

Canada Strong | Liberal Party of Canada

liberal.ca
15
265
24
299
Load more