penteststuff @penteststuff

Pentest, hacking and locksport stuff. Aiming for a high Signal/Noise ratio. Joined March 2013

Tweets

715
Followers

154
Following

172
Likes

2K

[email protected] / EDRmetry / PurpleLabs @cr0nym

23 hours ago

Pretty solid offensive #Linux combo: ptrace-inject for proc injection + Sneaky_remap for hiding from /proc/pid/maps + TLS callback shared object for encrypted reverse shell with silly process masquerading as "ps aux". I am just connecting the dots, huge thanks to Artemis21 and…

0 32 169 11K 103

Download Image

vx-underground @vxunderground

3 days ago

I've made a few intentionally ambiguous posts about Terraria because I was trying to get nerds who do stuff with it to give a fuck. Turns out they don't give a fuck in any capacity whatsoever so I'll just go full disclosure. When someone brought it to tModloaders attention they…

35 112 1K 67K 224

radare @radareorg

2 days ago

Happy radare2 6.0.4 release day infosec.exchange/@radareorg/115…

1 5 13 1K 2

Download Image

S3cur3Th1sSh1t @ShitSecure

3 days ago

You got access to vsphere and want to compromise the Windows hosts running on that ESX? 💡 1) Create a clone into a new template of the target VM 2) Download the VMDK file of the template from the storage 3) Parse it with Volumiser, extract SAM/SYSTEM/SECURITY (1/3)

8 103 481 35K 416

Download Image

Iceman @herrmann1001

3 weeks ago

The new Proxmark3 release "Phrack" (v4.20728) is out, a nod to the legendary security journal that has published so much foundational RFID research over the decades. A fitting name for this tool. tinyurl.com/4249mszy #Proxmark3 #RFID #Phrack #InfoSec

3 28 86 5K 20

Phrack Zine @phrack

a month ago

At long last - Phrack 72 has been released online for your reading pleasure! Check it out: phrack.org

7 329 745 115K 246

Download Image

eversinc33 🤍🔪⋆｡˚ ⋆ @eversinc33

a year ago

Cool trick I learned from @0gtweet today: you can look up windows error codes, even in the -DEC form instead of hex, via certutil 🤯 Dont know if this was common knowledge but I used to convert it to hex and google it everytime

13 129 572 62K 354

Download Image

PagedOut @pagedout_zine

a year ago

Issue #4 is out – enjoy! pagedout.institute/?page=issues.p… Please RT and tell your friends :)

5 284 541 189K 138

Download Image

Greg Linares (Laughing Mantis) @Laughing_Mantis

2 years ago

I have been telling people and companies for years that APTs have been targeting employee's home networks and routers - I have seen attacks on various home devices multiple times. I am glad that we have officially documented this behavior for APT31 therecord.media/chinese-hackin…

9 78 301 104K 139

Iceman @herrmann1001

2 years ago

The Hitag2 research and findings has existed since 2011. The GPU versions came out 2018-ish, the improved one 2021. Proxmark3 has been able to perform it since 2011. It’s nothing new. It is me who finally got around to perform all different steps , fixing and finding…

4 5 42 8K 6

Oddvar Moe @Oddvarmoe

2 years ago

A list of some great sites lolbas-project.github.io loldrivers.io gtfobins.github.io lots-project.com filesec.io malapi.io hijacklibs.net wadcoms.github.io persistence-info.github.io unprotect.it

11 221 643 68K 471

Vess @VessOnSecurity

2 years ago

So, Microsoft's scanner started detecting malware in password-protected ZIP archvies and people are losing their shit because they have no goddamn clue how anti-virus programs work. arstechnica.com/information-te… Strap in, kids, because I'm in a lecturing mood. Thread:

11 255 1K 184K 497

LuemmelSec @theluemmel

2 years ago

If you want to wrap impacket stuff to an exe file via pyinstaller, make sure to: - Work on a Windows box - Install via: pip install impacket - Use --path to point to the impacket dir: pyinstaller ntlmrelayx.py --onefile --path C:\Python311\Lib\site-packages\impacket

5 50 153 22K 55

Download Image

SwiftOnSecurity @SwiftOnSecurity

2 years ago

Very extremely impressed with ChatGPT knowing how to assist performing traditionally GUI based Windows troubleshooting in command line too. Good way to learn automation in a world where most guides are GUI and search results "run sfc /scannow"

14 35 413 84K 96

Download Image

Synacktiv @Synacktiv

2 years ago

Beside LSASS, are you sure to loot every available secrets on your compromised Windows host? In our latest blogpost, @l4x4 summarizes the techniques and tools to ensure you do not miss any: synacktiv.com/publications/w…

2 81 228 27K 69

Simon Aarons @ItsSimonTime

3 years ago

Introducing acropalypse: a serious privacy vulnerability in the Google Pixel's inbuilt screenshot editing tool, Markup, enabling partial recovery of the original, unedited image data of a cropped and/or redacted screenshot. Huge thanks to @David3141593 for his help throughout!

135 3K 9K 2.1M 2K

Download Image

Cas van Cooten @chvancooten

3 years ago

You all know about `ssh -D [port]` opening up a SOCKS proxy, but did you know that `ssh -R [port]` opens up a reverse socks proxy on the target? I sure didn't 🤯

22 68 496 101K 244

Download Image

0xor0ne @0xor0ne

3 years ago

Cool blog post explaining how to weaponize a YubiKey (credits @Wh1t3Rh1n0) blackhillsinfosec.com/how-to-weaponi… #yubikey #infosec #CyberSecurity #hacking #redteam

1 51 195 0 48

Download Image

Dirk-jan @_dirkjan

3 years ago

Fox-IT just open sourced their enterprise forensics tooling dissect. This is a big project that some of the smartest people I know have worked on. It supports many filesystems and file formats, all as Python libraries. Docs: docs.dissect.tools / code: github.com/fox-it/dissect

21 596 2K 0 731

Download Image

🅰🅳🅼 @securityfreax

3 years ago

Run your shellcode directly from bash: dd of=/proc/$$/mem bs=1 seek=$(($(cut -d" " -f9</proc/$$/syscall))) if=<(base64 -d<<<utz+IUO+aRkSKL+t3uH+McCwqQ8F) conv=notrunc Credits to "unknown"