Ahmed Sher @crypt0acee

big nerd energy crypt0ace.github.io 127.0.0.1 Joined January 2021

Tweets

190
Followers

143
Following

770
Likes

4K

Ahmed Sher @crypt0acee

2 years ago

Wrote a complete walkthrough of the NHA lab by @M4yFly. Give it a read if youre interested in pwning an AD environment from start to finish with some really interesting pathways! crypt0ace.github.io/posts/NHA-Part… crypt0ace.github.io/posts/NHA-Part… crypt0ace.github.io/posts/NHA-Part… crypt0ace.github.io/posts/NHA-Part…

2 39 100 6K 67

Melvin langvik @Flangvik

2 years ago

Did i have plenty of time allocated to reporting this week? - Yes Did i spend that time reporting? - No.. is procrastinating a bitch? Yes.... Now blog post + tool inbound tho! 😅🍻

5 1 50 4K 2

bohops @bohops

2 years ago

DotNet: Not Dead...Yet 😏

5 20 141 15K 10

Download Image

mgeeky | Mariusz Banach @mariuszbit

2 years ago

☢️ClickOnce + AppDomain Manager Injection (aka signed EXE + DLL sideloading) is the new Initial Access Hotness❤️ Check out @zyn3rgy and @0xthirteen insights on weaponising them: posts.specterops.io/less-smartscre… Pssst. there's a training & framework already scratching that surface too🥳

4 125 345 40K 140

Zero-Point Security @_ZeroPointSec

3 years ago

We're happy to be sponsoring @HackSpaceCon 23. Did someone say pool party? #hackspacecon

0 64 27 11K 0

ARZ @Arz_101

3 years ago

Hathor from @hackthebox_eu , an insane windows machine, involved logging into mojoportal with defautlt creds, uploading aspx web shell, IIS Impersonation, Bypassing Applocker, DLL Hijacking, signing powershell script and DCsync. arz101.medium.com/hackthebox-hat…

6 15 56 0 8

ARZ @Arz_101

3 years ago

Shared from @hackthebox_eu involved exploiting sqli in json, ipython for code execution, finding credentials to redis from a golang binary, and abusing CVE-2022–0543 for privilege escalation arz101.medium.com/hackthebox-sha…

2 9 33 0 1

ARZ @Arz_101

3 years ago

Opensource from @hackthebox_eu involved a flask application running in debug mode, vulnerable to directory traversal had two routes, uploading your own route or generating the console pin, accessing gitea, and escalating privileges through git hooks. arz101.medium.com/hackthebox-ope…

1 6 23 0 2

Ahmed Sher @crypt0acee

3 years ago

yes crypt0ace.github.io/posts/Using-DI…

0 2 5 0 0

Ahmed Sher @crypt0acee

3 years ago

Process Hollowing in C# as a part of shellcode injection technique 🙃🙃 crypt0ace.github.io/posts/Shellcod…

1 7 12 0 1

S3cur3Th1sSh1t @ShitSecure

3 years ago

Searching for DLL Sideloading binaries? A short Powershell Script in combination with Siofra will give you thousands of possible combinations. github.com/Cybereason/sio… Either try to replace any Windows DLL Import with your payload DLL or search for Phantom DLLs.

7 170 560 0 148

Download Image

Ahmed Sher @crypt0acee

3 years ago

WinAPI and P/Invoke in C# crypt0ace.github.io/posts/WinAPI-a…

0 3 4 0 0

5pider @C5pider

3 years ago

90% of my Twitter DMs are asking me about how to start getting into Malware development. Well, I love answering them but it's easier to write a small thread about it so here we go. 1/12

114 901 3K 0 2K

Radio X @RadioX

3 years ago

Happy Arctic Monkeys are back day to all of those who celebrate

11 1K 5K 0 30

Ahmed Sher @crypt0acee

3 years ago

lessgooo I've earned the Throwback Badge on TryHackMe for Hacking Throwback by exploiting a Windows AD network tryhackme.com/crypt0ace/badg… #tryhackme via @RealTryHackMe

1 1 11 0 0

Ahmed Sher @crypt0acee

3 years ago

Here's another interesting one Guide to DLL Sideloading crypt0ace.github.io/posts/DLL-Side…

0 2 4 0 0

Ahmed Sher @crypt0acee

3 years ago

Um trying out this too now. Let me know how it is. Ways to Dump LSASS crypt0ace.github.io/posts/Dumping-…

1 2 5 0 0

S3cur3Th1sSh1t @ShitSecure

3 years ago

Just added the two new AMSI bypass PoC's via Provider Patching into my Amsi-Bypass-Powershell repo. Plus one PoC in Nim as pull request for OffensiveNim: github.com/S3cur3Th1sSh1t… github.com/byt3bl33d3r/Of… Tested both, works perfectly fine. 👌 (1/2)

6 172 452 0 93

Download Image

Tony @TJ_Null

3 years ago

Since Microsoft plans to disable macros by default, I have decided to release a proof of concept that I use on my engagements by leveraging the document properties built in Microsoft Office. Here is the link to the article: offensive-security.com/offsec/macro-w…