Eugene Mar @_EugeneMar_

Father | pentester | infosec fan boy | forever learning Joined June 2018

Tweets

187
Followers

105
Following

772
Likes

806

Kevin Murphy @0xhexmex

a year ago

Eye on America: Ransomware attacks on schools threaten student data guidepointsecurity.com/newsroom/eye-o… via @GuidePointSec

0 1 3 93 0

Check out our new blog. I've demonstrated an attack scenario using Cobalt Strike and SCCM admin privileges to hunt for DA sessions, deploy beacons laterally with SCCM app deployment, and compromise of a DA account. guidepointsecurity.com/blog/sccm-expl…

0 32 58 4K 33

Eugene Mar @_EugeneMar_

a year ago

SCCM Exploitation: Account Compromise Through Automatic Client Push & AD System Discovery guidepointsecurity.com/blog/sccm-expl… via @GuidePointSec

0 4 10 1K 3

@guidepointsec @GuidePointSec

2 years ago

Love is in the air and so are scams! 💔 Chris Warner, Senior Security Consultant at @GuidePointSec, shares #CyberSafety tips on @fox13seattle to protect your wallet and your heart, this Valentine's Day. okt.to/5IFJDC #RomanceScams #cybersecurity

1 1 1 78 0

Download Image

mpgn @mpgn_x64

2 years ago

11 34 205 24K 14

Download Image

@guidepointsec @GuidePointSec

2 years ago

Safeguard your CI/CD environments from #cyberthreats with the new #CISA and #NSA guidelines. The recommendations address #vulnerabilities like insecure code, access controls, and system configurations. Read more in @IndustCybersec: okt.to/SQvoOI #devsecops #infosec

0 1 1 123 1

@guidepointsec @GuidePointSec

3 years ago

Starting to slow down as things heat up, Edward Dunnahoe, Practice Director, Threat & Attack Simulation @GuidePointSec, hesitates on today's FIREWALL. He says it’s tasty, but is it a bluff? okt.to/Vm36lh

0 1 1 125 0

Download Video

Kevin Murphy @0xhexmex

3 years ago

Ever tried to add a domain computer during an engagement and it fails even though ms-DS-MachineAccountQuota is at the default setting? Check if the Authenticated Users group was removed from the seMachineAccountPrivilege setting in the Default Domain Controllers Policy 1/x

3 8 27 0 5

Curtis Ringwald💥🖥💥 @C0axx

3 years ago

Quick Script based off Thycotic Secret Stealer to pull AES master Key from DPAPI and then perform Decryption offline and spit output to a CSV file based on @curi0usJack original blog post and gist. github.com/C0axx/Modified…

2 18 36 0 8

Download Gif

Brandon Rossi @0xConda

4 years ago

My goal was to hit 10k subscribers by the end of the year, and we're about 600 away! If you're interested in #infosec and #pentesting, come stop by! youtube.com/c0nd4

4 9 38 0 2

Pedro Ribeiro @pedrib1337

4 years ago

Not long ago it was common to give shout outs to other hackers in advisories: thanks to X for this technique, Y for this exploit, Z for finding these similar vulns before. These days no one does it… have we all become too self centered?

7 9 89 0 1

Cube0x0 @cube0x0

4 years ago

Impacket 🚀 hackthebox.eu/blog/windows-p…

1 41 139 0 30

mpgn @mpgn_x64

4 years ago

Ain't sexy as the spooler cve but in the next release of CrackMapExec, using the LDAP protocol you will be able to know if an account is in a privileged group or not 🔥 The error status has been also improved when an auth fails 🧙‍♂️ Next release on @porchetta_ind stay tuned 🪂

3 52 205 0 8

Download Image

root@alex:~/ # @offsec_ginger

4 years ago

The @GuidePointSec CTF just kicked off! go.guidepointsecurity.com/2021_06_22_Cor… Go here if you want to register and get on it! #CTF #infosec

0 6 5 0 0

@guidepointsec @GuidePointSec

4 years ago

Risk Based Alerting is a concept that can be utilized in any Security Information and Event Management #SIEM, but we'll discuss how it works in #Splunk Enterprise Security. Read more: okt.to/oWthSI #InfoSec #SOC #securityanalytics

0 4 5 0 0

Download Image

@guidepointsec @GuidePointSec

4 years ago

Our game of #CaptureTheFlag starts 6/22 - 6/28 with more difficult level challenges than ever before. Imagine creating your own bank account through a command line interface test that contains a vulnerability. Sign on now: guidepointsecurity.com/resources/guid… #CTF #DevSecOps #infosec

2 9 9 0 0

Download Image

@guidepointsec @GuidePointSec

4 years ago

Once an attacker enters your network, their next goal is often to elevate their privileges. Learn how adversaries abuse Active Directory (mis)configurations to accomplish their objectives & how to identify these types of weaknesses in your own environment. okt.to/vuF2nC