Really nice lab. Learned some new techniques. Big thanks to @mpgn_x64 and @mael91620 for running this.
@ippsec and I got started a few hours late (it started at 5am), but we managed to finish. ctrlzero came through big when he was able to join for the last few flags!
ippsec retweeted
Friendly @defcon reminder:
Meta-style glasses w/ recording capabilities are prohibited at DEF CON. No exception for recording glasses with prescription lenses. Be sure to pack non-violating eyewear if you need them.
Please see our Photo policies for more:
defcon.org/html/links/dc-pho…
Replying to @ippsec
@ippsec, @pure_strug and I just launched Adversarial Input.
Every other week, we’ll talk through what’s happening in AI from a cybersecurity perspective and try to cut through the hype to figure out what’s actually real.
First episode is live. Would love to hear what you think: pod.link/1896901842
Watching @ippsec inspired a question - How does auto-calibration (-ac) work in ffuf? Let's explore it!
youtube.com/watch?v=scHcQIDH…
ippsec retweeted
There has been a lot of talk about BHIS and our maternity and employment policies.
Please check out the following site for more details.
blackhillsinfosec.com/bhis-e…
Thanks!
Spent a week testing AI for vulnerability research. 14 confirmed bugs in 20 min on one target. 5% hit rate on a hardened one. Same AI, same setup. 4 approaches, what worked, what failed, why target selection matters more than model sophistication. xclow3n.github.io/post/7
ippsec retweeted
If you're using writeups to learn how to hack on HackTheBox (or other CTFs), use AI as a tutor. In this video I'll show a free prompt to use, as well as a Claude Skill I developed.
youtube.com/watch?v=Oy1HrVm5…
ippsec retweeted
If you have valid user creds and you know the victim uses Confluence and SSO, but M365 requires MFA, you can use those credentials to see if you can trigger an SP-Initiated SAML authentication to retrieve an SSO token. It's more complex, but, did this on a red team once.
Device Code Auth is certainly a phish I could see myself falling for, as it blends in with a regular meeting invite and doesn't require entering my password. If you don't know what a Device Code Phish is, check out this video @odiesec and I did. youtu.be/Y8SSYLEq15Q
ippsec retweeted
Something that made my day recently
While going through @ippsec's recent video for an HTP box he was solving, I noticed he came across my git RCE analysis during his research.
As someone who's learned a ton from his HTB content, that was unexpectedly cool to see! :D
ippsec retweeted
Finally found time to do another HackTheBox Sherlock Video - Brutus. This one primarily focuses on analyzing auth.log. First I'll solve it the easy way with some bash-fu. Then we will solve it again by using Grok to transform the log to json. youtube.com/watch?v=bv08UcIL…
ippsec retweeted
Over the last few weeks, I've decided to automate some of my work. As a result, I have developed a Chrome extension for finding CSPTs. I have made it open-source, so you can use and contribute to it 😀
vitorfalcao.com/posts/automa…
ippsec retweeted
I have completed the Alchemy Pro Lab from @hackthebox_eu!
Easy to start and as you progress, you get into two other environments. When you get to the last one that is where you will be tested on the ICS/SCADA stuff they have configured.
Totally recommend checking this lab out!
ippsec retweeted
Half-full or half-empty? ☕️
A new Machine by @ippsec is available FOR FREE, focusing on the most recent #CUPS vulnerability. Discover how to abuse the four #CVEs and exploit print jobs to execute malicious code on a target system.
→ Find it now: okt.to/GeQg14
ippsec retweeted
Hey, HackTheBox has an open part-time opportunity in Tech Customer Support.
wrkbl.ink/bxZfAUB
ippsec retweeted
Dracarys 🔥
Prepare to attack an enterprise #AD environment with this new #HTB Academy module! Practice your skills on the attack chain from getting the initial foothold to compromising the whole forest with #Sliver C2. Start now: okt.to/63dpb2
ippsec retweeted
Here are some of the incidents waiting to be solved...
1⃣ APT10 Cloud Hopper (VirusVipers)
Contributors: @ZephrFish @svch0st
Supply chain attack where APT10 hacked an MSSP to laterally move into a client network for exfil
2⃣ APT29 Hacks the Cloud (AssassinKitty)
Contributors: @inversecos
APT29 exploits edge device and pivots into the cloud (based on SolarWinds breach).
3⃣ AlphV Ransomware (Waifu)
Contributors: @DebugPrivilege @ippsec @svch0st
AlphV have deployed Black Cat ransomware across a university network
ippsec retweeted
Hey hacker family,
I'm looking for a @hackthebox_eu 'er who wants a pentesting role (to start), who likes exploiting Active Directory configurations, and wants to learn MS Cloud. This is to backfill my current role at Polito and provide coverage for my skills specialties.
If you have the skills and need the chance, here is your opportunity.
Polito has provided me endless opportunities to gain experience and learn, and I will be forever grateful. I'm leaving because I want a more direct role in securing infrastructure in an organization without silos.
My boss is one of the best bosses you will ever have, and that's a promise from someone with decades of working experience across multiple industries.
Candidates should be self starters who like to dig in deep to understand security from many perspectives while getting hands-on experience. People who are accustomed to learning on the fly always do best, in my opinion, so bonus if that's you.
Reposts Appreciated 🙏
DMs are open.
Not sponsoring a visa at this time. US Citizen required.
ippsec retweeted
this looks quite cool. @hackthebox_eu have got a guided mode.... I wonder what this is like...



























