IT-Security Researcher | OSCP | OSWP | PNPT | Creator of Perlite
Joined September 2021
- Tweets84
- Following158
- Followers175
- Likes426
sec77 retweeted
Ready for takeoff? 🚀
Prepare for the brand-new pieces of content coming to the #HackTheBox platforms this week!
🔴 Atlas, a migrated #Vulnlab Machine created by xct
🔴 Bruno, a migrated #Vulnlab Machine created by xct
🔵 SillyEli, a Sherlock created by GuyEldad95 & Roey
🔴 Global Hyperlink Zone, a Challenge created by DCryp7
🔴 Conversor, an HTB Seasons Machine created by FisMatHack
Get started now on #HTB Labs and Enterprise Platform: okt.to/5NuP2w
#Cybersecurity #InformationSecurity #NewRelease #Hacking #CyberSkills
sec77 retweeted
I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-global…
sec77 retweeted
new blogpost time!!
this one's a fun writeup on a vulnerability chain i found across multiple google services that earned me a $4133.70 bounty
lots of fun css as usual! i had to recreate a bunch of drive/docs/gmail/youtube UIs c:
have fun!
lyra.horse/blog/2024/09/usin…
sec77 retweeted
#FakePotato (CVE-2024-38100) post is out! Check out the short write-up on this unexpected vulnerability 😅 decoder.cloud/2024/08/02/the…
sec77 retweeted
#x33fcon hacker pirate ship 2024. Ahoy sea wolves!
It was a great pleasure to fish and hunt with you :)
sec77 retweeted
Excited to announce our new blog post on new event handlers to trigger XSS! Huge thanks to @bojanz for making this happen and to @PortSwiggerRes for their awesome XSS cheat sheet, now featuring these techniques.
infigo.hr/en/insights/46/int…
sec77 retweeted
"Hello: I'm your Domain Administrator and I want to authenticate against you". My #SilverPotato is out, check the blog post: decoder.cloud/2024/04/24/hel… 😃
sec77 retweeted
Hey Vulnlab Community!
Just taking a moment to reflect on how far we've come together. It's been about a year since Vulnlab first launched, and now we've got around 100 vulnerable machines spread across 50 labs, 2300 Discord members and more than 700 lab users!
The main focus always stayed on realistic enterprise environments but we also managed to dive a bit into other topics like AppSec, Reversing, Kiosk Escapes and even Windows Userland & Kernel Exploitation.
I want to give a big shoutout to all of you for making this possible. Whether you're giving support to the project, solving machines in the lab or creating content - your dedication and expertise are what make Vulnlab thrive. We've got some of the most talented and dedicated players and machine authors out there.
So, a huge shoutout to each and every one of you for making Vulnlab what it is today. Here's to countless more late nights, epic wins, and friendships.
@0xr0BIT @k0zmer @ATeamJKR @macz01590714 @Yeeb_ @_Sm1l3z @django88_ @snowscan @d3sty_ @ottersec_ @Geiseric4 @_ar0x4 @Fumenoid @csenox1 @secure_sec77 @toonii_14 @_kavigihan @Sno0wOfficial @MantodeaSec
sec77 retweeted
A new Red Team Lab, Shiva, is coming to Vulnlab next week! This time you get to test a hardened Hybrid-AD environment that involves:
- Hybrid-AD with 10+ machines & active users
- Cloud exploitation
- SIEM, EDR on Clients & Servers
- Common enterprise software
- No CVEs
sec77 retweeted
Want to become an ethical hacker? 🥷 Here's a list of my favourite [mostly practical] resources 📚
They are all free (or have a free option) and there's more high quality material here than anybody realistically has the time to complete ⏳
ALT Ethical hacking resources
sec77 retweeted
Thanks to all the @vulnlab_eu machine & challenge creators 💙
@secure_sec77
@ATeamJKR
@macz01590714
@k0zmer
@Geiseric4
@csenox1
@0xr0BIT
VL is open for community submissions! If you want to contribute, reach out to @xct_de on discord.
sec77 retweeted
Yep, you read that correctly 🤦♂️
New breach: Horse Isle had 28k unique email addresses breached in 2020 - twice. Data included IP address, name, gender, purchases and plain text password, including failed password attempts, also in plain text. 77% were already in @haveibeenpwned. More: hi1.horseisle.com/web/news.p…
sec77 retweeted
Delegate by @Geiseric4 is coming to Vulnlab this week! Expect some quality AD content 🔥
sec77 retweeted
Managed to get blood on the PEN300 Chall from PG CTF and winning OSEP Learn One! #RoadtoOSCE3
Heard that the content is somewhat outdated by now but I’m excited anyway :).
sec77 retweeted
We just published the video walkthrough on Retro by @0xr0BIT ! Retro is one of the more beginner-friendly AD machines on Vulnlab - you'll learn about Pre-Created Computer Accounts & ADCS. youtu.be/sl4dbPBFq7s
