Combatting entropy since 1975

127.0.0.127
Joined August 2008
I don't always Invoke-RestMethod, but when I do, I always forget first do { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 }
10
James Shewmaker retweeted
I'm currently working on expanding the Browser-in-the-Browser (BITB) phishing technique to make it more versatile by allowing spoofed popup windows to be spawned dynamically on phishing pages. This will allow to reliably perform phishing attacks against websites that use identity federation, which is just a fancy term for "signing in with your Google or Microsoft account". When the user picks an option to sign in with their Google or Microsoft account, Evilginx Pro spawns a BITB popup window with a phishing page generated by a different phishlet. That way, the attacker can phish a different account, which, once taken over, will allow access to the one initially targeted. In the demo below, you can see how the Google and Microsoft sign-in phishing pages are loaded within BITB popup windows. Only the Apple sign-in option spawns the legitimate browser popup window with a legitimate sign-in page. Google => PHISHING ❌ Apple => REAL✅ Microsoft => PHISHING ❌ Could you spot the fake popups? P.S. Coming soon to Evilginx Pro 5.0 🥳
8
14
1
133
6,127
James Shewmaker retweeted
BREAKING: github is currently experiencing unplanned uptime
64
1,164
55
31,805
333,035
James Shewmaker retweeted
banger tshirt idea
-----BEGIN RSA PRIVATE KEY----- 4 -----END RSA PRIVATE KEY-----
73
1,288
113
13,425
225,748
James Shewmaker retweeted
private keys from 8 intermediate CA certs have been compromised (eMudhra) Happy "Update everything" day to all my pager-carrying friends emudhra.we-have-a-problem.co…
93
996
347
5,164
4,625,532
James Shewmaker retweeted
🚨 EVILGINX EXTENSION IS OUT🚨 I am happy to say the free Evilginx Chrome extension has been approved and is finally available for download. 🥳 You can now safely import your captured session cookies, knowing that the cookie manager you're using came from a reputable source, along with the "trust me bro" quality seal. For a long time, I wanted to make the task of finding the cookies that hold session tokens much easier. With the Evilginx extension, you can now speed up the trial-and-error process when testing multiple cookie configurations to see whether you're still authenticated after a page reload (no more restoring cookie backups from external JSON files). I made this extension for myself, and I use it to kickstart the development of every single phishlet I make. Now you can too! 💪 To properly celebrate the release and help you get the most out of the extension, I released a walkthrough video with a rundown of all the features and a hands-on tutorial on how to use it to kickstart the development of your own phishlet for GitHub. Enjoy and happy phishing! 💗🪝🐟 Disclaimer: AI was used to develop the extension. UX, UI design, and minor code tweaks originated from a human brain. Code was read using human eyes. P.S. GitHub repo will arrive later. 🔗 Links can be found below 👇
10
36
2
180
9,101
James Shewmaker retweeted
Me waiting for the Evilginx browser extension to get approved... 💀
1
5
49
2,205
James Shewmaker retweeted
Playing with the newest process‑injection technique in my lab to explore defensive detection opportunities: Console Named Pipe If you need the PoC and the technical details, follow the thread below: 👇 xitter.cf/TwoSevenOneT/status/21…
🥷 Now we can inject a payload into a remote process without using VirtualAllocEx and WriteProcessMemory. No need to suspend the target process New technique to evade EDRs: Github: TwoSevenOneT/InjectSetConsole #redteam #pentest #antimalware
10
1
48
3,217
James Shewmaker retweeted
Any day now I’m going to enjoy all the free time I get back from AI doing things for me.
12
11
1
103
5,422
James Shewmaker retweeted
Full VM escape zeroday (guest>host root in industry standard hypervisors)! More soon
136
222
86
2,826
574,106
James Shewmaker retweeted
Super pleased with this... one of my "vibe check" projects for some time now has been "ASM Bots" ... a modern remake of Core Wars if you recall that game. I've had the requirements and specs for some time. Finally, after so many models failed, we got a build worth polishing and sharing, check it out: asmbots.io Here's a video of a battle, though I highly recommend you just go to the website and play. It'll take you 5 seconds to get an arena battle going: youtube.com/watch?v=602gXWDg… Open source (MIT), feel free to contribute: github.com/pedramamini/asmbo… It's agentic friendly as well, so you don't need to use the editor or write code. Though, the editor / debugger is so rad... you can customize the panels and locations to your liking. Reminiscent of my OllyDbg days. There are color themes, various battle types, tournaments, a king of the hill at every weight class, and more. Let's play!
2
1
8
689
James Shewmaker retweeted
AI is making production extraordinarily cheap. Reports, analyses, code, presentations, recommendations: what once took days can increasingly be produced in minutes. But there is a catch. As economists @ccatalini, Xiang Hui, and Jane Wu argue in their paper Some Simple Economics of AGI, the cost of production is falling much faster than the cost of verification. As production explodes, verification becomes the bottleneck. And that creates a dangerous asymmetry inside organizations. Producing more is immediately rewarded: lead times shrink, costs fall, volumes rise. Verification, by contrast, remains slow, expensive, and dependent on scarce expertise. So everyone has an incentive to produce more and to verify less. The problem is therefore larger than hallucinations. It is economic and organizational: AI dramatically increases the volume of output without proportionally increasing our capacity to check it. If production becomes abundant, it stops being a source of advantage. Value shifts toward what remains scarce: the ability to verify, guarantee, and take responsibility for what is produced. The next major organizational challenge of AI may therefore not be production. It may be building a verification architecture capable of keeping up with it. My latest Substack article: “AI: When Production Becomes Easy, Verification Becomes Strategic.” available here ⬇️ philippesilberzahn.substack.…
7
1
6
591
James Shewmaker retweeted
dying 💀
97
740
113
5,534
546,212
James Shewmaker retweeted
You can’t make the poor rich by making the productive poor.
18
72
4
426
12,062
James Shewmaker retweeted
Two days ago, GPT-6 Astra broke a yet unsolved German Army Enigma message from 1941. Amazingly Astra was able to autonomously: - Search historical archives - Compare uncertain letters - Find contextual clues - Build an Enigma simulator - Write cryptanalysis code - Run parallel experiments - Test competing keys - Recover the plaintext - Cross-check the results 1/n
132
458
140
3,950
1,094,850
James Shewmaker retweeted
CouchPotato EoP. Uses EFSRPC coercion + named-pipe impersonation + token duplication for SeImpersonatePrivilege ==> SYSTEM Also patches ETW + AMSI. 🔹deepwiki.com/aaron-kidwell/C… 🔹github.com/aaron-kidwell/Cou…
3
12
714
James Shewmaker retweeted
ItsNotAlwaysSMB: DPAPI in other protocols🔥 SMB is monitored closely nowadays, stopping attacks like looting DPAPI secrets. Thanks to @_zblurx, NetExec got a huge upgrade, extending DPAPI credential dumping to other protocols such as WMI, WinRM and MSSQL and various modules🔑
4
110
1
403
15,470
It looks like there's no response available for this search. Try asking something else.
94
James Shewmaker retweeted
Replying to @Blockstream
Moving forward where can we find the details of your bug bounty program, and what is the upper limit for a similar critical vulnerability? Surely there is a defined policy to avoid future mishaps, correct?
1
1
12
372
Starting new a list of things I didn't expect to run. First entry: `apt install nvi -y`
1
84