ExcreamOnSecurity @passthehashed

OSCP | OSEP | CRT{P,E,O} in your domain Joined April 2018

Tweets

152
Followers

63
Following

537
Likes

16

Pentester Academy @SecurityTube

3 years ago

Congratulations to @passthehashed for clearing our Certified Red Teaming Expert exam! #RedTeamLab #CRTE #PentesterAcademy cc @nikhil_mitt bit.ly/2XPFfw4

0 2 1 0 0

Download Image

Pentester Academy @SecurityTube

5 years ago

Congratulations to @passthehashed for clearing our Certified Red Team Professional exam! #ADLab #CRTP #PentesterAcademy cc @nikhil_mitt bit.ly/2AXXbM2

0 1 5 0 0

Download Image

George Noseevich @webpentest

5 years ago

Part 2 of my schannel research is out: b.poc.fun/decrypting-sch…. It is much shorter and focuses mainly on session resumption. As always, feedback is very welcome, especially RE TLS1.3 resumption in schannel.

1 2 5 0 0

ExcreamOnSecurity @passthehashed

5 years ago

Hi Guys, maybe you know a way to get users AuthenticationId without touching lsass memory and their access tokens? @tiraniddo @gentilkiwi @decoder_it

1 0 0 0 0

George Noseevich @webpentest

5 years ago

Some time ago I had a task where I needed to extract TLS session keys from win apps that use schannel (i.e. mstsc). Did some reversing and ended up creating a frida script that hooks key creation in lsass. Feedback welcome! b.poc.fun/sslkeylog-for-…

3 1 5 0 0

ExcreamOnSecurity @passthehashed

6 years ago

Cobalt Strike Extension kit The purpose of this was to aggregate Cobalt Strike supplements used during engagements. github.com/josephkingston… #exploitation #cobalt #redteaming #pentesting

0 0 0 0 0

ExcreamOnSecurity @passthehashed

6 years ago

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse github.com/blackarrowsec/… #pentest #redteaming #windows #mssql

0 0 0 0 0

ExcreamOnSecurity @passthehashed

6 years ago

CVE-2020-0683 Original Poc sent to MSRC. Assigned to CVE-2020-0683 - Windows Installer Elevation of Privilege github.com/padovah4ck/CVE… #windows #lpe #eop #exploit #pentest

0 0 2 0 0

ExcreamOnSecurity @passthehashed

6 years ago

Zipper This CobaltStrike tool allows Red teams to compress files and folders from local and UNC paths. brought you by @Cneelis github.com/outflanknl/Zip… #infosec #redteam #pentest

0 0 0 0 0

Alex Ionescu @aionescu

7 years ago

NSA: we are open sourcing a multi million line of code SRE tool to democratize the malware analysis space. Microsoft: Hold my beer blogs.windows.com/buildingapps/2…

70 1K 3K 0 68

Matt Nelson @enigma0x3

7 years ago

InfoSec is such a fast paced profession that can be a time eater if you let it. Don’t feel bad for sacrificing some knowledge for personal physical and mental health. Spend time with friends. Play video games. Go to the gym. Learn a new hobby. The world will keep spinning :-)

33 349 1K 0 11

Jerry Gamblin @JGamblin

9 years ago

Sometimes, hacking is just someone spending more time on something than anyone else might reasonably expect.

19 769 2K 0 16

ExcreamOnSecurity @passthehashed

6 years ago

DerbyCon 2019 CTF Write Up labs.nettitude.com/blog/derbycon-… #web #learning #ctf #writeup #owasp

0 0 0 0 0

ExcreamOnSecurity @passthehashed

6 years ago

Malware Analysis 101 - Basic Static Analysis medium.com/bugbountywrite… #malware #forensics #ir #infosec

0 0 0 0 0

ExcreamOnSecurity @passthehashed

6 years ago

Shhmon — Silencing Sysmon via Driver Unload Today I am releasing Shhmon, a C# tool to challenge the assumption that our defensive tools are functioning as intended. posts.specterops.io/shhmon-silenci… #blueteam #sysmon #forensics #redteaming

0 0 1 0 0

ExcreamOnSecurity @passthehashed

6 years ago

XXE that can Bypass WAF Protection lab.wallarm.com/xxe-that-can-b… #bounty #xxe #owasp #web #bugbounty #infosec

0 0 0 0 0

ExcreamOnSecurity @passthehashed

6 years ago

Command and Control via TCP Handshake thesw4rm.gitlab.io/nfqueue_c2/201… #infosec #c2 #redteaming #rat #linux

0 1 0 0 0

ExcreamOnSecurity @passthehashed

6 years ago

𝗕𝗟𝗨𝗘𝗦𝗣𝗔𝗪𝗡 is an active defense and endpoint detection and response tool which means it can be used by defenders to quickly detect, identify, and eliminate malicious activity and malware across a network. github.com/ION28/BLUESPAWN #blueteam #redteam #edr #infosec

0 0 0 0 0

ExcreamOnSecurity @passthehashed

6 years ago

Docker for Pentesters My hope in this post is to demonstrate some of my usecases and workflows, and illustrate how I think pentesters and security professionals in general can greatly benefit from Docker. blog.ropnop.com/docker-for-pen… #docker #pentest #infosec #linux