hackjamin @hackjamin

Joined September 2016

Tweets

67
Followers

46
Following

635
Likes

617

Dirk-jan @_dirkjan

2 weeks ago

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-glob…

145 897 3K 436K 1K

Akamai Security Intelligence Group @akamai_research

4 months ago

Today we unveil BadSuccessor - a new no-fix Active Directory privilege escalation technique. We will explore the recently introduced dMSA feature, and show how it enables turning a very common, seemingly benign permission, into a full domain take over. akamai.com/blog/security-…

3 184 503 57K 307

Download Video

MSec Operations @MSecOps

7 months ago

#RustPack Version 1.2.0 is now released for our customers. The biggest change was to add full DInvoke support for all payloads. The import table now won't show the Windows APIs being used anymore, instead by default random non malicious imports are added in here to make payloads…

0 5 32 3K 5

Download Image

Josh @passthehashbrwn

9 months ago

New blog from me on using CLR customizations to improve the OPSEC of your .NET execution harness. This includes a novel AMSI bypass that I identified in 2023. By taking control of CLR assembly loads, we can load assemblies from memory with no AMSI scan. securityintelligence.com/x-force/being-…

13 150 427 55K 231

Dirk-jan @_dirkjan

9 months ago

Few BloodHound python updates: LDAP channel binding is now supported with Kerberos auth (native) or with NTLM (custom ldap3 version). Furthermore, the BH CE collector now has its own pypi package and command. You can have both on the same system with pipx. github.com/dirkjanm/Blood…

4 126 361 22K 105

No Starch Press @nostarch

10 months ago

18 hacking books. Name your price. Our Hacking 2024 @humble bundle is now LIVE. Support @ACLU & @EFF while leveling up your security game. #CyberMonday humblebundle.com/books/hacking-…

7 157 406 50K 188

Download Image

eversinc33 🤍🔪⋆｡˚ ⋆ @eversinc33

a year ago

Yesterday I finally finished part II of my anti rootkit evasion series, where I showcase some detections for driver "stomping", attack flawed implementations of my anti-rootkit, hide system threads via the PspCidTable and detect that as well. Enjoy! eversinc33.com/posts/anti-ant…

10 113 303 31K 171

Nicolas Krassas @Dinosn

a year ago

CVE-2024-39825 and CVE-2024-39818: High-Risk Zoom Flaws Require Urgent Updates securityonline.info/cve-2024-39825…

1 43 94 7K 12

S3cur3Th1sSh1t @ShitSecure

a year ago

This year it happened. What started as a spare time hobby and fun project became a commercial product for the Offensive Security community. I founded a company, @MSecOps . And this company will sell a Packer to Red Teams or Pentesters. (1/x) 🔥

MSec Operations @MSecOps

a year ago

3 62 288 77K 177

Download Image

137 115 295 49K 104

S3cur3Th1sSh1t @ShitSecure

a year ago

Tomorrow 1 pm ECT I’ll do a stream about stable DLL Sideloading for persistence 🙌 twitch.tv/s3cur3th1sshlt

1 20 129 30K 34

Thomas Seigneuret @_zblurx

a year ago

One year ago, @T00uF and I did a talk at @_leHACK_ about DPAPI and #DonPAPI. Well, we've completely rewritten it to add a lot of new features. DonPAPI 2.0 available now 🚀 ▶️github.com/login-securite…

8 93 238 23K 98

Tib3rius @0xTib3rius

a year ago

Who's ever received one of these "pentest" reports?

22 60 610 71K 142

Download Image

/ˈziːf-kɒn/ @x33fcon

a year ago

Join us for "Maldev - Packer Development" with @ShitSecure and @eversinc33. Learn to build your own packer and evade AV/EDR detections. Perfect for intermediate-level participants. Register now: x33fcon.com/#!conference.m… Full workshop details: x33fcon.com/#!w/FabianMosc… #x33fcon…

1 5 21 6K 5

Download Image

eversinc33 🤍🔪⋆｡˚ ⋆ @eversinc33

a year ago

Looks like @ShitSecure and me are giving a workshop at @x33fcon this year👀We will be talking about packer development and help you to build your own packer for dropping malware in protected environments. Be there or be square🟥

S3cur3Th1sSh1t @ShitSecure

a year ago

8 8 107 23K 5

Download Image

5 10 68 9K 3

S3cur3Th1sSh1t @ShitSecure

2 years ago

I'll spontaneously go live within the next hour to build some AI powered Packer Malware starting by 0: twitch.tv/S3cur3Th1sshlt Let's see how far we can get in 1-2 hours when using AI.

2 12 50 13K 21

eversinc33 🤍🔪⋆｡˚ ⋆ @eversinc33

2 years ago

New blogpost and small tool release: Wrote a naive anti-rootkit driver that detects mapped drivers, and talk about some bypasses for those detections in part I of my new (anti-)-anti-rootkit series. More research on rootkit evasion coming soon : ) eversinc33.com/posts/anti-ant…

12 125 349 39K 168

Chris Thompson @_Mayyhem

2 years ago

I'm pumped to announce the release of Misconfiguration Manager, a knowledge base and how-to for both offensive and defensive SCCM attack path management, that @subat0mik, @garrfoster, and I have been working on! Check it out and let us know what you think! posts.specterops.io/misconfigurati…

5 189 424 53K 202

ACE Responder @ACEResponder

2 years ago

Some Windows Event IDs and how they help defenders. #ThreatHunting #DFIR

4 119 408 27K 255

Download Image

SEKTOR7 Institute @SEKTOR7net

2 years ago

Wondering what telemetry an EDR collects? Wonder no more! @Kostastsale and @ateixei run an EDR Telemetry Project, covering all major EDRs: "The main goal of the EDR Telemetry project is to encourage EDR vendors to be more transparent about the telemetry they provide". Blog:…

7 215 505 51K 334

Download Image

eversinc33 🤍🔪⋆｡˚ ⋆ @eversinc33

2 years ago

Wrote a short blog post about implementing stealthy keylogging in the kernel with gafAsyncKeyState, inspired by @chompie1337's & @FuzzySec's blackhat talk eversinc33.com/posts/kernel-m…