Aurélien Chalot @Defte_

Hacker, sysadmin and security researcher @OrangeCyberdef 💻 Calisthenic enthousiast 💪 and wannabe philosopher https://t.co/SqDDhIGGGh 📖 🔥 Hide&Sec 🔥 blog.whiteflag.io The grid Joined November 2017

Tweets

1K
Followers

4K
Following

460
Likes

3K

Aurélien Chalot @Defte_

a day ago

Guess what, when implementing channel binding token to Impacket I simply forgot to implement it into NetExec as well... Incoming soon (eyes)

0 9 79 5K 8

Download Image

That was an interesting case about NTLM reflection but yeah, any machine that does not have th patch is vulnerable and it completely bypasses Channel Binding token (ie: we poced the relay from a ADCS server back to its fully HTTP web enroll endpoint and got the cert) pretty fun!

Alex Neff @al3x_n3ff

2 days ago

5 73 358 37K 219

Download Image

0 28 186 15K 79

GreHack @GrehackConf

2 weeks ago

Hey Folks The program for this year is now almost full announced 🥳 Still hesitating to come this year? You won't hesitate a single second once you've seen the conference program 📢 We will soon be announcing the sale of tickets dates, the list of workshops and the hoodie designs

2 13 25 6K 0

Download Image

Aly D @AlyDiouara

a month ago

ILS DOIVENT TOUS PARTIR. ILS DOIVENT TOUS PARTIR. ILS DOIVENT TOUS PARTIR. ILS DOIVENT TOUS PARTIR. ILS DOIVENT TOUS PARTIR. ILS DOIVENT TOUS PARTIR. ILS DOIVENT TOUS PARTIR. ILS DOIVENT TOUS PARTIR. BAYROU, RETAILLEAU, DARMANIN, NUÑEZ, BORNE, BERGÉ, BARROT, MACRON, TOUS !

1K 5K 31K 2.1M 355

RedTeam Pentesting @RedTeamPT

a month ago

👀Turns out MS-EVEN can do a lot more than NULL auth: In addition to leaking environment variables, it is possible to coerce authentication from arbitrary logged on users* 🤯 *If you are willing to trigger Windows Defender.

1 47 165 19K 100

Aurélien Chalot @Defte_

a month ago

Reading astrophysics books I saw the following quote from Isaac Asimov: The most important sentence in sciences, the one that announces new discoveries isn't Eurêka but "that's funny..." that's the hacking spirit 🤌🏼

1 1 19 1K 0

Keanu Nys @RedByte1337

a month ago

Thanks to everyone who joined my DEFCON33 talk!🎉 For those of you who missed it and are interested in seeing how we can extract cleartext credentials and bypass MFA directly from the official Microsoft login page, I just uploaded the recording to YouTube: youtu.be/z6GJqrkL0S0

17 147 540 51K 389

Download Image

Wil @wil_fri3d

2 months ago

gpoParser, which I presented at #leHACK2025 and #DEFCON, is available here: github.com/synacktiv/gpoP… It is a specialized utility designed to enumerate Group Policy Objects (GPOs) and identify potential security misconfigurations.

4 169 496 28K 393

Aurélien Chalot @Defte_

2 months ago

This was implemented in bloodhound but missing in NXC, not anymore 🥳🥳🥳

Alex Neff @al3x_n3ff

2 months ago

This was implemented in bloodhound but missing in NXC, not anymore 🥳🥳🥳

7 97 423 37K 217

Download Image

0 6 62 4K 18

Aurélien Chalot @Defte_

2 months ago

Go fuck yourself EU 😊

Pirat_Nation 🔴 @Pirat_Nation

2 months ago

Go fuck yourself EU 😊

1K 5K 29K 841K 4K

Download Image

0 0 8 928 0

hashcat @hashcat

2 months ago

hashcat v7.0.0 released! After nearly 3 years of development and over 900,000 lines of code changed, this is easily the largest release we have ever had. Detailed writeup is available here: hashcat.net/forum/thread-1…

22 379 1K 75K 270

Download Image

Aurélien Chalot @Defte_

2 months ago

Last month I spent hours implementing Channel Binding for MSSQLClient on Impacket. If you are interested in how CBT is computed, handling STARTTLS in python, TLS introspection on Windows or simply MSSQL databases check it out sensepost.com/blog/2025/a-jo… :)

0 18 75 4K 19

Orange Cyberdefense's SensePost Team @sensepost

2 months ago

Reverse engineering Microsoft’s SQLCMD.exe to implement Channel Binding support for MSSQL into Impacket’s mssqlclient.py. Storytime from Aurelien (@Defte_), including instructions for reproducing the test environment yourself. (link below)