Dbrndjb @dbrndjb

Offensive security - Interested in Active Directory, Azure and Blockchain security. ctfshellclub.github.io Paris, France Joined October 2015

Tweets

84
Followers

69
Following

359
Likes

155

samy k͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓amkar͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛ @samykamkar

5 years ago

I've released NAT Slipstreaming, a spooky new technique that allows an attacker to remotely access any TCP/UDP service bound to a victim machine, bypassing the victim’s NAT/firewall, just by the victim visiting a website. samy.pl/slipstream/ Happy Halloween!

143 2K 5K 0 867

Download Image

s1r1us @S1r1u5_

5 years ago

I created this basic chrome extension to find prototype pollution. You won't believe the applications where PP exist, it's everywhere. I hope you make internet pollution free :xD. github.com/msrkp/PPScan

12 300 756 0 240

Download Image

Mayfly @M4yFly

5 years ago

My little mindmap to pentest active directory. Full version here : i.ibb.co/TKYNCNP/Pentes…

18 444 1K 0 305

Download Image

n00py @n00py1

6 years ago

For pentesting, Add this to your .bashrc file: PS1='[`date +"%d-%b-%y %T"`] > ' test "$(ps -ocommand= -p $PPID | awk '{print $1}')" == 'script' || (script -f $HOME/logs/$(date +"%d-%b-%y_%H-%M-%S")_shell.log) Now you can have a log of everything you did and when you did it.

15 658 2K 0 543

Jackson T. @Jackson_T

6 years ago

Introducing SysWhispers, a tool that helps with AV/EDR evasion by using direct system calls to bypass user-mode API hooks. It works by generating header/ASM pairs supporting all core syscalls from Windows XP to 10. Check it out here with examples: github.com/jthuraisamy/Sy…

9 359 691 0 104

Sinaei @Intel80x86

6 years ago

I decided to create a tutorial called "Reversing Windows Internals" and explain about Windows Internals. The first part describes about Handles, Callbacks and Hidden Callbacks and ObjectTypes in Windows Thanks to @Dark_Puzzle for answering my questions. rayanfam.com/topics/reversi…

18 502 1K 0 223

James 🏴󠁧󠁢󠁷󠁬󠁳󠁿 @two06

6 years ago

New blog post time! This one looking at how we can use AMSI to help automate getting our payloads past AV. medium.com/@two06/amsi-as…

6 177 337 0 39

pwnagotchi @pwnagotchi

6 years ago

Documentation on how to install Pwnagotchi on any GNU/Linux system is now available pwnagotchi.ai/installation/#…

3 52 158 0 13

Swissky @pentest_swissky

6 years ago

Burp Suite Tips & Tricks Volume 1: link.medium.com/OiOcMihPa0 Volume 2: link.medium.com/Sgc77BkPa0

0 20 55 0 7

Burp Suite @Burp_Suite

6 years ago

We are proud to launch our brand new interactive XSS cheatsheet featuring novel vectors from @garethheyes portswigger.net/research/one-x…

10 661 1K 0 222

Read The Fancy Manual (SIGSEGv) @sigsegv_event

6 years ago

You were eagerly looking forward to it, well, here we are: the qualification week for SIGSEGv2 (which will happen on 11/30) starts next Wednesday (10/02). Time to polish those CTF skills! #sigsegv2 #ctf #quals

1 9 16 0 0

Download Gif

Gynvael Coldwind @gynvael

6 years ago

Paged Out! #1 is out! (and it's free to download!) pagedout.institute/?page=issues.p… There are 57 articles in 12 categories: Electronics Programming Assembly Reverse Engineering Sec/Hack Retro File Formats Algorithmics SysAdmin Radio Phreaking OS Internals Enjoy! #PagedOut!

35 922 2K 0 264

Adam Chester 🏴‍☠️ @_xpn_

6 years ago

New blog post exploring Windows RPC internals, reversing with Ghidra, and how we can use Neo4j to find interesting call paths. blog.xpnsec.com/analysing-rpc-…