whynotsecurity retweeted
Fresh off the #WayWest2022 Toolshed, dropping my new Office365 userenum technique against Federated tenants, check it out below!
B: whynotsecurity.com/blog/o365…
G: github.com/knavesec/o365fede…
whynotsecurity retweeted
Time for another tool drop. This one I wrote a couple weeks ago for converting ldapdomaindump data to Bloodhound data. Currently only the bare minimum to get data uploaded into Bloodhound works.
B: whynotsecurity.com/blog/ldd2…
G: github.com/blurbdust/ldd2bh
whynotsecurity retweeted
Awhile back I wrote a tool to look for Windows registry files in a given haystack of data (.tar, .vhd, .vmdk). If impacket is installed, it will automatically secretsdump the found registry files.
B: whynotsecurity.com/blog/need…
G: github.com/blurbdust/needle
whynotsecurity retweeted
XSS to RCE: Covert Target Websites into Payload Landing Pages, good introduction article by @knavesec
bit.ly/3DdZaXB
whynotsecurity retweeted
XSS to RCE: Hosting your phishing payload on your client's website, a fun technique for boosting your phishing click rate based off a real attack from a known ransomware threat group
Blog: whynotsecurity.com/blog/xss-…
whynotsecurity retweeted
New APIs/syscalls for EDR bypass (@yarden_shafir), UAF browser exploit dev (@33y0re), PowerView replacement [EDD] (@FortyNorthSec), phishing banner defeat (@whynotsecurity), malware packer teardown (@fumik0_), NANDcromancy (@Atredis), and more! blog.badsectorlabs.com/last-…
whynotsecurity retweeted
New blog post going into the details about the potato exploits and SeImpersonatePrivilege. micahvandeusen.com/the-power…