spaceape retweeted
Blog from @ippsec and me on the @hackthebox_eu blog - Finding that balance between not giving up too early and being pointlessly stuck is important. But the answer isn't "never seek help". Trying harder isn't always the answer when you're trying to learn.
hackthebox.com/blog/It-is-Ok…
spaceape retweeted
As a followup:
If you have write permissions to a directory, you can move/remove files/dirs within it, even if you have 0 file permissions on them and don't own them.
If you have 0 file permissions on a file but own it, you can give yourself any permissions you want.
Attention box creators: please stop allowing me to cheese your privescs because of Linux file permission quirks. Thank you.
twitch.tv/videos/1282719580?…
twitch.tv/videos/1282719580?…
@tryhackme #CyberSecurity #InfoSec
spaceape retweeted
I posted it at a weird hour, so tweeting it again. Here's video number two in my Python3 create your own tool series. Come see how to go through the process of creating your own subdomain enumeration tool. youtube.com/watch?v=E5BklV9I…
spaceape retweeted
Do you use anything else other than chisel, ssh/sshuttle, or Meterpreter/autoroute + proxychains for tunneling and pivoting?
spaceape retweeted
🚨 NEW BLOG 🚨
Password Hash Cracking in Amazon Web Services: Burning Your Way to Success!
@mchllmmns discusses the use of cracking cloud computing resources. The references alone are worth the read!
Happy Friday! Read here: sans.org/u/1kba #pentest #passwordcracking
spaceape retweeted
Since it is a new year I added some more boxes to my list of VM's for preparing for PWK/OSCP and for AWAE/OSWE.
I also added some more AD boxes that you will find in PG Practice from @offsectraining. 😁
Here is a link to the current list: docs.google.com/spreadsheets…
spaceape retweeted
In this webcast, @TimMedin talks through some improper active directory (AD) configurations, how to detect them and how to attack them: youtu.be/U5q2_i8bNb4
Learn more about #SEC560 Network Penetration Testing and Ethical Hacking: sans.org/u/18lw
spaceape retweeted
Overnight, there was a *third* Log4j vulnerability released, CVE-2021-45105: nvd.nist.gov/vuln/detail/CVE…
Version 2.17.0 is now the most recent version that addresses all three vulnerabilities. downloads.apache.org/logging… I'm sorry.
spaceape retweeted
It’s official! We’ve LAUNCHED SANS Holiday Hack Challenge 2021! Help Santa and the elves deal with Jack Frost and his trolls' latest shenanigans while building great cyber security skills!
sans.org/holidayhack
Hop in even for a couple min to hear fun new tunes!
spaceape retweeted
Some relevant and timely links for day 5 of #SEC699:
- ACE AD Persistence: specterops.io/assets/resourc…
- Azure AD new vuln: msrc-blog.microsoft.com/2021…
- Using Kerberos for relay attacks: googleprojectzero.blogspot.c…
- Monthly CTI from @redcanary: redcanary.com/blog/intellige…
spaceape retweeted
Everyone knows the waybackmachine but did you know they have another service called archive-it?
archive-it.org/
TheMoreYouKnow 🌈 #bugbountytip
spaceape retweeted
If you're a student in my FREE Powershell for Pentester's course (youtube.com/playlist?list=PL…), or one of my Movement, Pivoting, and Persistence students, you can try the PrintNightmare attack. Follow the instructions here - themayor.notion.site/341cf37…
spaceape retweeted
I think this is one of the best repo for beginners and it should help them a lot in learning:)
github.com/infoslack/awesome…
spaceape retweeted
Learn the basics of hacking with Powershell FOR FREE. These are basics that every pentester needs to know and understand to be successful. - youtube.com/playlist?list=PL…
spaceape retweeted
New Course Announcement!!!
C2 Development in C#
Check it out here
zeropointsecurity.co.uk/c2-d…
spaceape retweeted
Wrote some notes on ffuf while watching @codingo_ 's ffuf videos and damn I was so amazed by his explanation!! thanks for the amazing content
Sharing those notes in case anyone needs it!
Ps : Retweet if you find it useful
notion.so/ffuf-bd8180578bec4…
spaceape retweeted
OWASP's 20th anniversary is a free virtual online event beginning at 3am EDT on Sept 24, 2021. We will celebrate the past, present & embraces securing the next 20 years of OWASP & cybersecurity. 20thanniversary.owasp.org/
