@d3vilbug

n00b, wanna be hacker one day

 Berlin, Germany
d3vilbug.github.io
Joined March 2016
  • Tweets110
  • Following1K
  • Followers276
19Media
#BSidesBerlin is back! Save the date: Saturday 26.11 at @cbase and online The CFP is Open until 16.10 papercall.io/bsides-2022-ber… Tickets are available on our website bsides.berlin @SecurityBSides @cfp_time
3
19
27
Added: AES Killer, decrypt AES traffic on the fly portswigger.net/bappstore/e5…

AES Killer, decrypt AES traffic on the fly

Decrypt AES traffic on the fly

portswigger.net
2
11
I waited 2 years for this, rewrote impacket for this, asked cryptographers to remake algos in python for this, spent enormous time of my life to make this happen. and it's finally here this finally works and I can't find the words to express my satisfaction.
76
706
124
2,254
While adding the Windows Defender MpCmdRun.exe to LOLBAS, I also discovered it can store the downloaded file into an Alternate Data Stream. Sweet stuff! Added here: lolbas-project.github.io/lol… Also updated my ADS list: gist.github.com/api0cradle/c… Great discovery by @mohammadaskar2
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
5
194
11
461
#PROTIP: If you can't listen on port 80 during a bind shell, try adding the URI '/Temporary_Listen_Address/' to ur listener. Magic! You don't need administrative privileges to listen on port 80 on Windows anymore #redteam #windows
20
496
16
1,228
Created a challenge while ago. Sharing the screenshot for text, since tweet's length is limited. Here's the docker file link: github.com/Anon-Exploiter/ad… Building using the one-liner: ``` docker run -it --rm uexpl0it/admin-panel-takeover ``` Pentest labs: pentestlabs.gitbook.io/chall…
1
1
3
Brida 0.4 is out with a lot of new features and a Wiki that shows how to use it! Bugs/suggestions/improvements are obviously welcome! @fridadotre @Burp_Suite @hackinparis github.com/federicodotta/Bri…

GitHub - federicodotta/Brida: The new bridge between Burp Suite and Frida!

The new bridge between Burp Suite and Frida! Contribute to federicodotta/Brida development by creating an account on GitHub.

github.com
1
11
1
24
It's official! Due to the current worldwide situation @hackinparis will be postponed to February 2020! But Brida 0.4 is ready and according with @hackinparis team we will release it (I hope) next week! Meanwhile, some screenshots of the new features! :) @fridadotre @Burp_Suite
8
30
1
100
Money,job,house are all temporary. Eventually what stays with u are ur skills & moral values that u develop over the years.The happiest moment in a day is when u go back to bed knowing that u were able to solve a complex problem which u didn't even knew existed a day before #Life
6
48
New blog post "Evidence of VBA Purging Found in Malicious Documents". We observed malicious Office documents in-the-wild without VBA P-Code. Removal of P-Code (VBA Purging) can lead to lower detection rates. All details below! blog.nviso.eu/2020/02/25/evi…

Evidence of VBA Purging Found in Malicious Documents

TL;DR We have found malicious Office documents containing VBA source code only, and no compiled code. Documents like these are more likely to evade anti-virus detection due to a technique we dubbed…

blog.nviso.eu
53
4
94
Replying to @ngalongc
@ngalongc, @EdOverflow, and I are starting a new security blog. In our first write-up, we will discuss the impact of "SameSite by default" and how it affects web app sec. Feel free to request future topics you would like us to cover. blog.reconless.com/samesite-…
10
205
9
393
My machine's out on @VulnHub. Try it out and let me know how it was! :) -- Details are in the page -- vulnhub.com/entry/ua-literal…
1
8
23
AddressOfEntryPoint Code Injection without VirtualAllocEx RWX ired.team/offensive-security…
1
50
105
Copy your payload into %userprofile%\AppData\Local\Microsoft\Teams\current\ Then %userprofile%\AppData\Local\Microsoft\Teams\Update.exe --processStart payload.exe --process-start-args "whatever args" Trusted signed binary will run the payload for you 😊 #RedTeam #Pentesting
38
1,258
70
2,944
Because I had question about "Protected Process" and LSA (RunAsPPL), don't forget that #mimikatz driver (mimidriver) can remove the Flags without any reboot or UEFI program😘 And yes, this is also for Windows 10 1903 x64 & x86 😉 > github.com/gentilkiwi/mimika…
3
200
1
484
Here is the whole exploit chain of Jenkins Unauthenticated RCE(and PoC video youtu.be/abuH-j-6-s0)! Hacking Jenkins Part 2 - Abusing Meta Programming for Unauthenticated RCE! blog.orange.tw/2019/02/abusi…

Jenkins pre-auth remote code execution!

This exploit chained two bugs(CVE-2018-1000861 and CVE-2019-1003000...

youtube.com
10
552
12
1,000
WordPress 5.0.0 Remote Code Execution – A combination of a Path Traversal and Local File Inclusion vulnerability lead to #RCE Remote Code Execution in the #WordPress core. The vulnerability was present for over 6 years. Check out how we found it! rips.tech/wordpress-5-rce
5
270
16
457
BHIS | Upcoming Tester's Webcast No PowerShell? No Problem! Red Teaming using the BYOI (Bring Your Own Interpreter) lifestyle. by @byt3bl33d3r @byt3bl33d3r is dropping a huge update to SILENTTRINITY on webcast Register: attendee.gotowebinar.com/reg…
3
50
5
103
Check out my latest research "Wagging the Dog: Abusing Resource-Based Constrained Delegation to Attack Active Directory" New attack techniques and live 0days inside. MSRC’s response: "this is not an issue which will be addressed via a security update" shenaniganslabs.io/2019/01/2…

Wagging the Dog: Abusing Resource-Based Constrained Delegation to Attack Active Directory

Back in March 2018, I embarked on an arguably pointless crusade to prove that the TrustedToAuthForDelegation attribute was meaningless, and that “protocol transition” can be achieved without it. I...

shenaniganslabs.io
17
348
10
601
Heh updated to make Null happy :P I tested the POC for the Kernel bug by @S0rryMybad and although he said it works only on iOS 12.1.1 and lower, it seems to work fine on iOS 12.1.2 as well. The bug was patched in iOS 12.1.3.
18
22
2
160
Load more