Russ @rustla

Pentester who often hangs out with the blue team. (he/him) https://t.co/1FK1qTVE4f | https://t.co/am6hJzTsmf ///hacker.coffee.hops Joined December 2007

Tweets

3K
Followers

248
Following

646
Likes

6K

Dirk-jan @_dirkjan

2 weeks ago

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-glob…

145 897 3K 436K 1K

Garrett @unsigned_sh0rt

4 weeks ago

knew win10 had the dsquery.dll laying around but never knew what to do with it "rundll32.exe dsquery.dll OpenQueryWindow" will pop open a console for you and you can do some light LDAP recon you can also open with with win + ctrl + f probably useful for VDI/Citrix type tests

9 79 386 32K 270

Download Image

Russ @rustla

4 weeks ago

A bunch of apps I’ve been poking around with lately interact with Dataverse using $batch queries. Not seen much chatter about it, but really handy to subvert intended logic when the queries and writes are just … there. Any authz issues are super obvious too 👁️👁️

0 1 1 86 0

IT Guy @T3chFalcon

2 months ago

What is OAuth Consent Phishing? It’s a social engineering trick where the user grants access to a malicious app. What is Token Replay? It’s when you reuse stolen OAuth tokens to access cloud services without logging in again even after the user changes their password.

1 3 15 2K 5

Download Image

EZ @IAMERICAbooted

3 months ago

For people supporting SharePoint and application integrations, I want to make sure you understand something about API permissions for SharePoint and Graph: When you give an application sites.fullcontrol.all application permissions, you are transferring ownership of your entire…

3 5 66 19K 27

SpecterOps @SpecterOps

3 months ago

Introducing the BloodHound Query Library! 📚 @martinsohndk & @joeydreijer explore the new collection of Cypher queries designed to help BloodHound users to unlock the full potential of the BloodHound platform by creating an open query ecosystem. ghst.ly/4jTgRQQ