Adrian retweeted
Thanks to all joining my talk @defcon. Find all the details about the research in our blog: blog.syss.com/posts/hacking-…
Adrian retweeted
It's been quiet for a while around bloodhound Python, however I'm happy to share that I am now maintaining the project at my personal GitHub. The latest version fixes many bugs/issues, also thanks to the many PRs that were submitted (thanks all!). github.com/dirkjanm/bloodhou…
Linux: Password-based remote auth is a big no-no, especially for root! Use public keys and sudo instead.
Windows: Or we can just enable it by default. Let's call it SMB. Oh and the hash is also the password, because why not.
Just released #hashcathelper 1.0.0. This version is ready to visualize password re-use in multi-domain environments thanks to a feature suggestion by @n00py1. Now available on PyPI!
github.com/SySS-Research/has…
Adrian retweeted
Security researchers have disclosed vulnerabilities in AudioCodes desk phones and Zoom Zero Touch Provisioning (ZTP) to gain full remote access to devices
#cybersecurity #audiocodes #zoom
thehackernews.com/2023/08/zo…
Adrian retweeted
OK, I have no idea how long this series of tweets will be, but I've heard from several people associated or previously associated with NCC. While I've verified the association, bear in mind that a lot of this is from single sources.
To start with, here's some backstory on the original round of layoffs in February:
A North America-wide all-hands meeting was scheduled with only a few days notice, which was unusual. On that day, the British press were reporting that NCC was forecasting lower growth than expected and were going to lay off ~8% of its global workforce.
The all-hands meeting confirmed layoffs would be coming. Managers would be notified that same day, and the layoffs would start at 12PM EST on the next day (a Friday).
The layoffs were described by one source as a "bloody massacre". Employees were locked out of their computers before their manager had a chance to contact them and tell them the bad news. Several of these employees were onsite at customers in the middle of engagements. Several employees were locked out by mistake and only found out hours later that they were still employed.
The actual number of employees laid off ended up being significantly higher than the 7-8% they were told in the all-hands meeting. One source estimated that between 10-15% of all North American employees were let go.
Mismanagement was blamed by one source for the layoffs, as the North American side of the business was heavily dependent on work from big west coast tech firms and startups, which was a shift from a lot of east coast financial customers.
When these big tech firms started their own layoffs, they reduced the number of services being bought from NCC, resulting in the February layoffs.
Amazing. I've been wanting something like this for quite a while. Thanks @rixxtr!
github.com/rixx/git-backdate
When Moritz talks, you should listen. Make sure not to miss this talk if you're at #BHUSA in Las Vegas.
Congratulations!
Yeehaw, super excited to be a part of the legendary BlackHat Briefings. #BHUSA @BlackHatEvents
blackhat.com/us-23/briefings…
Adrian retweeted
The Euclid satellite will take billions of images of galaxies to give Valeria Pettorino (@vpettorino) and other cosmologists better understanding of the universe’s evolution. In 2018 @sioroberts spoke with Pettorino about her hopes and plans for Euclid.
quantamagazine.org/cosmologi…
Adrian retweeted
Wie Hacker nach dem Einbruch interne Ziele kapern? Hier schildert @mr_mitm, wie er mit Zugriff auf ein System im Netzwerk schrittweise seine Berechtigungen ausweitet. (€)👇
heise.de/hintergrund/IT-Sich…
Adrian retweeted
For those that haven't played with smbcrawler by @mr_mitm - You should give it a shot, it's really well done: github.com/SySS-Research/smb…
Adrian retweeted
We'd actually have to modify FreeRDP to misbehave in the same way as the first-party RDP client implementation, so no, there's nothing to be done 😅
The FreeRDP certification validation probably needs some rework though, but nobody cares about certificates when it comes to RDP
Adrian retweeted
Today, my colleague @maurizi0_ published a blog article about a malware that is used in a currently active phishing campaign against German users.
You can find the article in the SySS Tech Blog:
blog.syss.com/posts/malware-…
#malware #infosec #cybersecurity
Adrian retweeted
Bon voyage @ESA_Euclid !
...and so it begins, @ESA_Euclid boat trip towards the launch base🚢🚀.
Stay tuned for the next updates🔜📽📷. #spaceforlife
Adrian retweeted
Come on Microsoft, this was totally avoidable - just stop renaming things
Also, Clou dAlert, lolol
Adrian retweeted
Es ist so traurig, dass tausendfach widerlegter Unsinn immer wieder verbreitet wird. Jetzt zieht dieses Anti-Klimaschutz-Video seine Kreise.
Inhaltlich schwach - aber es nützt ja nichts. Sehen wir uns das also an. Sorry, es wird lang. (Thread)
Big update to PowerHub! V 2.0. comes with even more obfuscation, decoy code, natural variable names, a standalone tool, self-contained stages, and more.
#PowerHub #Pentest #RedTeam
adrianvollmer.github.io/Powe…























