brmk @_brmkit

just an aimless student. Italy Joined November 2019

Tweets

54
Followers

8
Following

421
Likes

209

Bad Sector Labs @badsectorlabs

4 months ago

MATCH (c1:Computer)-[:MemberOf*1..]->(g:Group) WHERE g.objectsid ENDS WITH '-516' WITH COLLECT(c1[.]name) AS dcs MATCH (c2:Computer) WHERE c2.enabled = true AND (c2.operatingsystem contains '2025') AND (c2[.]name IN dcs) RETURN c2[.]name If this query hits, you're in.

Yuval Gordon @YuG0rd

4 months ago

22 373 865 159K 453

Download Image

3 73 268 22K 199

Johannes Bückler @JohannesBuckler

9 months ago

Gli sperperi di denaro pubblico post terremoto dell’Irpinia sono ormai entrati nella storia di questo Paese. Una brutta storia, riassunta in dieci volumi presentati al Parlamento il 5 febbraio 1991 e inviati a varie procure da una commissione d’inchiesta presieduta da Scalfaro.

24 191 731 63K 135

Download Image

Andrea P @decoder_it

12 months ago

OK, I promise to stop spamming about relays with NTLM/Kerberos 😅. But if you're a member of the Distributed COM or Performance Log group, these juicy CLSIDs let you trigger remotely machine authentication of any computer, including DCs, and relay DCOM -> HTTP, SMB… 👇

8 75 275 32K 196

chebuya @_chebuya

a year ago

How I discovered and exploited an unauthenticated SSRF in the Havoc C2 teamserver, allowing attackers to leak origin IPs of teamservers behind redirectors and much more! blog.chebuya.com/posts/server-s… github.com/chebuya/Havoc-…

8 116 457 92K 253

Download Video

Michael Coppola @mncoppola

a year ago

New blog post "Google: Stop Burning Counterterrorism Operations" My reflection on an incident where Project Zero and TAG knowingly shut down an active Western counterterrorism cyber operation, and the real-world harm that could have resulted from it. poppopret.org/2024/06/24/goo…

65 130 545 477K 477

Chetan Nayak (Brute Ratel C4 Author) @NinjaParanoid

2 years ago

Watching people tweet they bypassed a certain EDR is just cringe at this point. When you ask them what did they bypass, they dont know what. So let me take you back to school... Executing OpenSource tool is not a bypass. An EDR employs several mechanisms for detection. Getting a…

16 111 475 56K 258

Rob Fuller @mubix

2 years ago

Intern, Junior, Senior, Principal, Sr Principal, Staff, Master, Artisan. These are the levels I believe best suites most of the fields of study in Cyber Security. I worked with @carnal0wnage to put some of this together one day and wanted to share my thoughts on it:

7 18 154 27K 85

SEKTOR7 Institute @SEKTOR7net

2 years ago

Wondering what telemetry an EDR collects? Wonder no more! @Kostastsale and @ateixei run an EDR Telemetry Project, covering all major EDRs: "The main goal of the EDR Telemetry project is to encourage EDR vendors to be more transparent about the telemetry they provide". Blog:…

7 215 505 51K 334

Download Image

Ptrace Security GmbH @ptracesecurity

2 years ago

Active Directory Enumeration for Red Teams mdsec.co.uk/2024/02/active… #Pentesting #CyberSecurity #Infosec

1 30 133 8K 45

Download Image

Grzegorz Tworek @0gtweet

2 years ago

Kerberos tickets dumping in pure PowerShell 😍 I simply love such approach. So much more beautiful than loading pre-compiled binary blob. And so much harder to detect... linkedin.com/posts/mzhmo_hi…

3 195 568 47K 186

BSidesRoma @BSidesRoma

3 years ago

Good Morning Everyone!! We are pleased to announce that CFP and Sponsorship is open for #BSidesRoma check it out. roma.securitybsides.it #Cyber #Italy #Roma #BSides #January23 #hybrid and we have a lot cool initiative, and some great speakers to announce :)

2 6 11 0 0

Download Gif

Brandon Rossi @0xConda

3 years ago

Building a server that can host a lot of VMs is still one of the best career investments I've made. Having the ability to spin up complex labs to test attack paths has been extremely valuable.

7 9 122 0 10

Andy Robbins @_wald0

3 years ago

From initial access to Global Admin with #BloodHound and BARK. In this thread let's walk, step by step, through an example attack path based on real configurations we've seen in real environments:

21 234 689 0 341

BC Security @bcsecurity

4 years ago

Do you want a FREE seat to Advanced Threat Emulation: Evasion? Retweet and comment below and we will be randomly selecting 1 person on Monday at 8am PST to attend our brand-new course. eventbrite.com/e/advanced-thr…

230 287 255 0 14

Andrea P @decoder_it

4 years ago

This is really bad, if you ever installed components of ArcSoft, check this:

3 29 112 0 15

Download Image

Oliver Lyak @ly4k_

4 years ago

Certipy just received a major upgrade. The new version includes BloodHound integration, 5 new domain privilege escalation techniques, Shadow Credentials, Golden Certificates, and more. research.ifcr.dk/34d1c26f0dc6

12 240 550 0 125

Advanced Persistent Tortellini @APTortellini

4 years ago

Blog post and tool by @last0x00 for killing Defender without it showing up as disabled and loading an arbitrary driver in place of WdFilter aptw.tf/2021/08/21/kil… Credits to @jonasLyk from @the_secret_club for the technique!

2 117 217 0 42

brmk @_brmkit

4 years ago

Hands [off|on] MS cloud services youtu.be/XOF8fw_aW5E via @YouTube

0 0 2 0 0

Andrea P @decoder_it

4 years ago

When (NTLM) relaying potatoes lead you to domain admin... A "permanent" 0day Privilege Escalation Vulnerability in Windows RPC Protocol ;-) cc @splinter_code Our writeup here: labs.sentinelone.com/relaying-potat…