Red Team Lead | Blog: https://xitter.cf/t.co/6FsY7hc7AR | Code: https://xitter.cf/t.co/9aICQEgR6V
Philadelphia, PA
Joined February 2016
- Tweets135
- Following591
- Followers724
- Likes88
Make sure your RoE covers sending client data to your given LLM provider or use localβΌοΈ
BloodHound MCP: Automating Active Directory Analysis with AI
π₯ Telegram: t.me/hackinarticles
β΄ Twitter: xitter.cf/hackinarticles
Analyzing complex Active Directory environments can be time-consuming. BloodHound MCP combines AI with BloodHound data to accelerate attack path discovery and AD security assessments β οΈ
π What You'll Learn in This Guide
π©Έ Introduction to BloodHound MCP
π€ AI-Powered Active Directory Analysis
βοΈ Setting Up BloodHound MCP
π Importing & Processing BloodHound Data
π Identifying Attack Paths with AI
π― Privilege Escalation Path Discovery
π₯ Analyzing Users, Groups & Permissions
π Mapping Trust Relationships
π Automating AD Security Assessments
π Natural Language Queries for BloodHound
π§ Red Teaming & Defensive Use Cases
π‘οΈ Hardening Active Directory Environments
π‘ BloodHound MCP enhances traditional BloodHound analysis by leveraging AI to interpret graph data, identify privilege escalation paths, answer natural language questions, and streamline Active Directory security assessments for both red and blue teams.
π Article:
hackingarticles.in/bloodhounβ¦
#BloodHound #MCP #ActiveDirectory #AI #RedTeam #Pentesting #CyberSecurity #EthicalHacking #ADSecurity #InfoSec
AI has been a game changer. Custom tool development isn't the bottleneck anymore, and it's great to see so many new tools coming out π
What still takes years is knowing when to use one, or more importantly when not to. That part doesn't come out of a prompt.
HTB Script Kiddie to Elite Hacker in 4 weeks π₯
Since the free Ox-Alpha weekend ive been creating an autonomous agent capable of handling complex cybersecurity tasks. This was a super fun experiment configuring both custom and open harness frameworks, testing various models, and getting hands on with the latest technology!
π New tool drop: Dispatch β an evasive payload delivery server for red teamers, pentesters, CTFβs, & more
π github.com/m8sec/dispatch
π₯π₯π₯
π After >1y of hard work, @AzeTIIx and I are thrilled to release v2 of The Hacker Recipes!
We moved away from GitBook and now have control over both engine & hosting π₯Ή
1st addition for contributors: your work is being highlighted across the site! π«‘
thehacker.recipes/
Excited to release my first blog post in a while! Took a detour from my normal research topics and dug into client device tracking using WiFi signals π±π #OSINT #privacy
m8sec.dev/blog/device-trackiβ¦
Revisited the suspended thread injection technique to bypass Defender #MalwareMonday
Full video on YT w/ breakdown of process changes during execution - youtu.be/PqWDf4zrQs0
Worked up a short video of a Python shellcode runner executing via embedded package to bypass Windows Defender - no install required π₯Έ #malwaremonday
youtu.be/nejLL6txgMk
New version of CrossLinked is on GitHub and PyPi! Refactored everything and made a bunch of improvements in the code π
Anyone who has had to rerun after realizing their format was off but ran into CAPTCHAs on the second go will enjoy the updates!
github.com/m8sec/CrossLinked
Just released a new blog post on "Exploiting PrintNightmare (CVE-2021-34527)" - which includes my version of the exploit that uses a built-in SMB server for payload delivery (no more open file shares!)
github.com/m8sec/CVE-2021-34β¦
infosecwriteups.com/exploitiβ¦
