- Tweets 51
- Following 111
- Followers 205
- Likes 80
eks retweeted
Wrote a small C# tool that is able to make a network token using a certificate. Comes handy in RTs ;) github.com/nettitude/TokenCe…
Today we are releasing TokenCert, a C# tool that will create a network token using a provided certificate via PKINIT, by @lefterispan
This is useful for Red Teams giving make-token functionality with certificates instead of passwords.
github.com/nettitude/TokenCe…
3
28
95
13,144
eks retweeted
Today we are releasing TokenCert, a C# tool that will create a network token using a provided certificate via PKINIT, by @lefterispan
This is useful for Red Teams giving make-token functionality with certificates instead of passwords.
github.com/nettitude/TokenCe…
1
49
142
21,983
eks retweeted
I just released my C2 I was working on, on my free time. Feel free to play around make your own forks if you like it. It needs a lot of work but it is a fully rust one with small implant and working sleep obfuscation.
github.com/trickster0/Namele…
6
78
274
27,150
eks retweeted
Calling all Red Teamers 🚨
Today we are introducing Tartarus-TpAllocInject, a new OPSEC-safe loader and technique for bypassing EDR solutions, by @trickster012
labs.nettitude.com/blog/crea…
3
146
428
70,293
eks retweeted
Red Team ops need diverse malware for various scenarios. @naliferopoulos of #Hackcraft created #Blueprint, an open-source tool for source-level templating. It enables the use of sinister modules & metaprogramming in Jinja2 syntax. Learn more: bit.ly/432I0cs #redteam
1
1
488
eks retweeted
Red Team's malware samples often end up in public sources for analysis. Hackcraft's first open-source tool, Fairplay, monitors these to identify payloads & notify operators, ensuring fair play between teams.
Learn more: bit.ly/3MwLwGs #redteam #hackcraft
4
3
352
eks retweeted
Took me a few days, still don't know exactly how/why it works, but I now have a new-ish on-prem to cloud technique via a Seamless SSO (Kerberos) backdoor key. Some features:
- No GA needed to add key
- Invisible backdoor (no logs in AAD) 🫣
- 1st factor auth to any synced user
6
114
429
91,049
eks retweeted
Introducing ETWHash!
ETWHash is a new method and tool by @lefterispan for consuming SMB events from Event Tracing for Windows (ETW) and extracting NetNTLMv2 hashes for cracking offline.
labs.nettitude.com/blog/etwh…
170
323
47,524
eks retweeted
A short🧵 detailing a Kerberos LPE I discovered while working with @tiraniddo on our BlackHat research.
msrc.microsoft.com/update-gu… (CVE-2023-21817)
This was fixed in Feb, but I think some will find the vulnerability & exploitation interesting.
1/
2
117
240
48,092
eks retweeted
Released a small tool that is able to dump crackable hashes from user DPAPI keys github.com/leftp/DPAPISnoop
2
56
155
15,688
eks retweeted
Introducing Aladdin, a new tool by @lefterispan for red teamers to generate payloads bypassing misconfigured WDAC and AppLocker.
labs.nettitude.com/blog/intr…
1
35
69
7,796
eks retweeted
The last part of A New Attack Surface on MS Exchange - #ProxyRelay is out! Have also left some final thoughts on the Closing part. Hope you all enjoy this journey :D
blog.orange.tw/2022/10/proxy…
1
267
594
eks retweeted
Introducing MalSCCM!
Today, we are releasing MalSCCM, a .NET tool by @The_Keeb which enhances PowerSCCM functionality and makes it easier to use over command and control channels.
labs.nettitude.com/blog/intr…
ALT A screenshot of our new tool, MalSCCM.
4
102
225
eks retweeted
🥳Introducing PoshC2 v8.0!
Major improvements, including:
* A brand-new native Linux implant;
* The capability to execute Beacon Object Files (BOF) directly from PoshC2;
* Massive SharpSocks rewrite;
* New registry edit module;
* And plenty more!
labs.nettitude.com/blog/intr…
3
45
139
eks retweeted
Got #CobaltStrike BOFs but love #PoshC2? We've got you covered! Introducing 'RunOF', available now.
labs.nettitude.com/blog/intr…
65
166
eks retweeted
The Russian military website (mil.ru) is returning HTTP error code 418 indicating the Russian Military is now a Teapot.
No, this is not a joke.
102
1,161
4,882
eks retweeted
That's kinda broken 😬😬, Defender For Endpoint (eg ATP) is also affected by the sandboxing tokens method found by @GabrielLandau....
4
54
161
eks retweeted
I set myself the challenge of auto executing JavaScript without a click with the animate tag. You can now do this on Firefox and Chrome using the use element.
portswigger.net/web-security…
ALT Auto executing JavaScript from an animate tag
3
32
95
eks retweeted
Because clear text passwords is so trendy, I added this small credential provider that I had in stock to #mimikatz
Just 300 lines of ❤❤❤ into this file github.com/gentilkiwi/mimika…
Works in LogonUI.exe but also in all applications asking for creds
cc: @gentilkiwi @PythonResponder
2
85
221