HTTP418 @HTTP418InfoSec

Breaking stuff and writing about it http418infosec.com Joined April 2021

Tweets

96
Followers

275
Following

282
Likes

968

HTTP418 @HTTP418InfoSec

3 months ago

Some thoughts on how to test against Scattered Spider TTPs and a quick summary on the current available TI. http418infosec.com/simulating-sca…

0 3 6 540 2

I wrote a script to identify every TAKEOVER and ELEVATE attack in Misconfiguration Manager that can be run with Read-only Analyst privileges or higher in SCCM. Please share with your IT admins, defenders, clients, assessors, and friends in infosec! posts.specterops.io/rooting-out-ri…

1 137 346 40K 174

Cybersecurity and Infrastructure Security Agency @CISAgov

2 years ago

Today the Cyber Safety Review Board released its independent review of the Summer 2023 Microsoft Exchange Online intrusion laying out what led to the intrusion & what industry & gov't can do to ensure an intrusion at this magnitude does not happen again. go.dhs.gov/JRT

7 123 257 148K 88

Download Image

Justin Elze @HackingLZ

2 years ago

Amazon is the new source for OST 🔥🔥

22 83 633 81K 100

Download Image

HTTP418 @HTTP418InfoSec

2 years ago

The GoPhish API can be used for some fun and games, my latest post shows how single use phishing links can be made using GoPhish + AWS SES! http418infosec.com/one-time-phish…

0 1 2 165 1

s1zz @s1zzzz

2 years ago

MachineAccountQuota = 0, preventing you from grabbing NAA creds remotely? DPAPI to the rescue! Ported over NAA Extraction via DPAPI to sccmhunter. h/t: @agsolino & @clavoillotte for SystemDPAPI.py

5 81 310 67K 104

Download Image

HTTP418 @HTTP418InfoSec

2 years ago

Confused on the basics of C++? Hopefully this little post will help out with some of the confusion! http418infosec.com/deez-words-an-…

0 0 1 178 1

vx-underground @vxunderground

2 years ago

We would like to express our condolences to Blue Teamers. Microsoft has announced Microsoft Excel will now support Python. More information: techcommunity.microsoft.com/t5/microsoft-3…

68 675 2K 262K 233

mr.d0x @mrd0x

2 years ago

Didn't have time to talk about the newly released TLDs last week, but here we go. File Archiver In The Browser: Emulating file archive software in the browser with a .zip domain for phishing mrd0x.com/file-archiver-…

11 140 373 99K 83

HTTP418 @HTTP418InfoSec

2 years ago

Another amazing article by @KimZetter, grab a cup of tea and make time to read this!

Kim Zetter @KimZetter

2 years ago

Another amazing article by @KimZetter, grab a cup of tea and make time to read this!

23 244 708 135K 199

0 0 1 141 0

HTTP418 @HTTP418InfoSec

3 years ago

Seeing as #redteamtips have been all the rage recently, I thought I would put my own #whiteteamtips out there. My latest post is on how to make good timelines for red team testing, (hopefully) leading to less painful debriefs! http418infosec.com/diagrams-timel…

0 0 1 133 0

HTTP418 @HTTP418InfoSec

3 years ago

Great day at @BSidesCymru yesterday, thanks to all of the organisers and volunteers! Great talks from @teamcymru_S2 @matdotsh and @_EthicalChaos_ in particular 🏴󠁧󠁢󠁷󠁬󠁳󠁿

0 0 4 210 0

HTTP418 @HTTP418InfoSec

3 years ago

KeePass is back in the news with CVE-2023-24055, very timely as I have a post on the trigger system & some other attacks against KeePass! http418infosec.com/attacking-pass…

0 2 3 260 0

HTTP418 @HTTP418InfoSec

3 years ago

Great write up on Invoke-ShareFinder from @iiamaleks!

The DFIR Report @TheDFIRReport

3 years ago

Great write up on Invoke-ShareFinder from @iiamaleks!

1 165 403 46K 156

0 0 0 98 0

HTTP418 @HTTP418InfoSec

3 years ago

I have recently been using Shodan quite a lot and have found some more tips and tricks in Shodan to hunt down the weird and wonderful assets for a target. http418infosec.com/shodan-201-rum…

0 1 1 105 0

TROOPERS Conference @WEareTROOPERS

3 years ago

We had some issues this year preparing the video recordings of #TROOPERS22. But finally the first batch of videos has been released! Go check it out here: youtube.com/@TROOPERScon 🥳 The rest will follow in the coming weeks! Happy holidays everybody! See you at #TROOPERS23!