sicario1337 @rsa730

CyberSecurity Enthusiast. Hacker Dubai, United Arab Emirates Joined October 2011

Tweets

550
Followers

36
Following

154
Likes

726

mpgn @mpgn_x64

4 weeks ago

Writeup from @mael91620 is now available 🎉 From coerce into SPN less RBDC, gmsa decryption, dpapi, constraint delegation w/t protocol transition to ntds dissection ! 😈 Congrats to the one who solved it 🥇@rayanlecat 🥈@_bluesheet & 🐊 🥉@_sans23 ➡️github.com/mael91620/Barb…

mpgn @mpgn_x64

a month ago

2 5 80 16K 19

4 39 142 11K 48

H4x0r.DZ 🇰🇵 @h4x0r_dz

a month ago

When a SSRF is enough: Full Docker Escape on Windows Docker Desktop (CVE-2025-9074) blog.qwertysecurity.com/Articles/blog3… "How was it found It was by mistake actually, I did not know much about container separations and its implication"

2 36 246 15K 114

mpgn @mpgn_x64

2 months ago

It’s merged into master if you want to test it — feedback welcome 🪂

mpgn @mpgn_x64

3 months ago

It’s merged into master if you want to test it — feedback welcome 🪂

23 185 984 116K 487

Download Image

4 55 282 29K 96

mpgn @mpgn_x64

3 months ago

Thank you all for joining the Star Wars NetExec workshop at @_leHACK_ 2025 with @_zblurx & @wil_fri3d 🔥🪐 50 hackers, 1 room, 2 domains to pwn! 💥 🥇 @LeandreOnizuka takes the win 🏆 🥈 @wfrnds1 in second place Full write-up by @LeandreOnizuka 📝👇 blog.anh4ckin.ch/posts/netexec-…

6 34 121 10K 36

Alex Neff @al3x_n3ff

3 months ago

Releasing a side project of mine: wsuks - automating the WSUS mitm attack🔥 github.com/NeffIsBack/wsu… TL;DR: If the Windows Server Update Service (WSUS) is configured to use HTTP instead of HTTPS, it's possible to take control of any Windows machine on your local network. 1/4🧵

5 149 484 32K 337

Download Video

Alex Neff @al3x_n3ff

3 months ago

Did you know that you can kerberoast without any valid credentials? All you need is an account that is ASREProastable. This allows you to request service tickets for any account with a set SPN🔥 NetExec now has a native implementation of this technique, thanks to Azox

7 119 472 30K 238

Download Image

DirectoryRanger @DirectoryRanger

4 months ago

BypassAV. List of essential techniques to bypass anti-virus and EDR github.com/matro7sh/Bypas…

0 64 204 10K 177

Alex Neff @al3x_n3ff

4 months ago

What do you do if you have compromised a server administrator? Hunt for domain admins🏹 This is what NetExec's latest module "presence" does. It checks for DAs in: - C:\Users folder - Processes - Scheduled Tasks All done with native Windows protocols. Made by crosscutsaw and me

3 109 430 28K 234

Download Image

Wietze @Wietze

4 months ago

#HuntingTipOfTheDay: explorer.exe /root,"c:/your/file.exe" will spawn your exe from the main explorer.exe, not a new one. This breaks normal process chains. Hunt for explorer.exe with "/root", as well as explorer spawning unusual children (e.g. rundll32, mshta, powershell).

4 70 352 32K 275

Download Image

DirectoryRanger @DirectoryRanger

4 months ago

GPOHunter. tool designed to analyze and identify security misconfigurations in Active Directory Group Policy Objects (GPOs) github.com/PShlyundin/GPO…

1 73 227 12K 247

Tony @TJ_Null

4 months ago

Someone made a python version of Evilwinrm and it works well! Although it is missing a few features like bypassing amsi I would add this into your tools to have: github.com/adityatelange/…

4 59 254 16K 150

Download Image

Tony @TJ_Null

4 months ago

Welp TIL... If you are trying to obtain a New-PSSession or use Enter-PSSession from Kali Linux to a Windows host, it is not supported anymore. More information here: learn.microsoft.com/en-us/powershe…

4 7 35 3K 16

Download Image

Andrea P @decoder_it

7 months ago

KrbRelayEx-RPC tool is out! 🎉 Intercepts ISystemActivator requests, extracts Kerberos AP-REQ & dynamic port bindings and relays the AP-REQ to access SMB shares or HTTP ADCS, all fully transparent to the victim ;) github.com/decoder-it/Krb…

6 163 395 23K 184

Download Image

Bobby Cooke @0xBoku

7 months ago

Video demo of bypassing Windows Defender App Control with Loki C2! Blog with details coming in 1-2 weeks. Yes -- @d_tranman and I created an entire C2 in JavaScript and it bypasses all the things 🥷🧙‍♂️🪄

21 140 603 53K 347

Download Video

Rasta Mouse @_RastaMouse

7 months ago

[BLOG] I had a series in mind like "Rubeus' Hidden Secrets" or something like that. Basically, highlighting features of the tool that seem less well known. I'm starting off with a basic one for getting crackable hashes from cached service tickets. rastamouse.me/kerberoasting-…

3 91 337 12K 142

Alex Neff @al3x_n3ff

7 months ago

Finally, two new options by @Defte_ got merged into NetExec🔥 --qwinsta: Enumerate active sessions on the target, including numerous useful information --tasklist: Well... enumerates all running tasks on the host Update & enjoy the new reconnaissance flags🔎

5 75 289 18K 95

Download Image

张惠倩 @momika233

7 months ago

I developed a Burp vulnerability scanning plug-in based on #DeepSeek model, which can detect injection vulnerabilities and XSS vulnerabilities at present #bugbounty #bugbountytips I welcome your questions in the Github Issues section github.com/momika233/Deep…

15 192 798 47K 616

DirectoryRanger @DirectoryRanger

7 months ago

NetExec Cheatsheet, by @seriotonctf github.com/seriotonctf/cm…

0 24 103 4K 55

Chocapikk 🤘🏻 @Chocapikk_

8 months ago

900+ WordPress plugins just casually leak their presence. No bruteforce, no guessing, just a simple request. Wild. Haven't seen anyone using this for recon yet. 🤔 Soon. cc: @leak_ix

35 239 2K 147K 1K

Download Image

Rony @Ronycoder

8 months ago

PYTHON is difficult to learn, but not anymore! Introducing "The Ultimate Python ebook "PDF. You will get: • 74+ pages cheatsheet • Save 100+ hours on research And for 48 hrs, it's 100% FREE! To get it, just: 1. Like & RT 2. Reply "PY" 3. Follow @Ronycoder [MUST]