@247CTF

🏆 The 247CTF continuous security competition 📺 YouTube for CTF fundamentals https://xitter.cf/t.co/0RP7w5pej2 🏁 https://xitter.cf/t.co/FATXT1bqrW for CTF challenges

 Australia
247CTF.com/
Joined April 2019
  • Tweets1.5K
  • Following89
  • Followers5.4K
102Media
247CTF{f9591934c302bc8a29fad566fcf438cd}
8
4
2
91
During a recent Active Directory intrusion test, @croco_byte was led to devise a new versatile attack vector targeting Group Policy Objects, allowing their exploitation through NTLM relaying. synacktiv.com/publications/g…

GPOddity: exploiting Active Directory GPOs through NTLM relaying, and

GPOddity: exploiting Active Directory GPOs through NTLM relaying, and

synacktiv.com
6
107
3
244
37,796
Bypassing Windows Defender and PPL Protection to Dump LSASS tacticaladversary.io/adversa… #redteam

Bypassing Windows Defender and PPL Protection to dump LSASS without Detection | Adversary Tactics...

Bypassing Windows Defender and PPL Protection with PPLBlade to dump LSASS without Detection.

tacticaladversary.io
64
1
163
19,512
Here is a first draft on an NTLM relay mindmap 🙂 from authentication coercion to post-relay exploitation. I'll gladly update/correct it if you think there are things wrong or missing. ➡️Featured on The Hacker Recipes thehacker.recipes/ad-ds/move…
16
303
6
830
[BLOG] Ok, I've written about my experience of battling with both managed and unmanaged memory allocations to try and improve @FuzzySec's Melkor POC. rastamouse.me/building-a-sli…
Rasta Mouse@_RastaMouse6 Sep 2023
Replying to @domchell
💯 I thought of doing a blog post showing ways to minimise or clear heap memory allocations in your C# tooling, kinda like programming OPSEC tips that don’t rely of the GC. Not sure how useful it would be though.
1
66
1
169
46,708
EDRSandblast-GodFault: a tool written in C that weaponize a vulnerable signed driver to bypass EDR detections (Notify Routine callbacks, Object Callbacks and ETW TI provider) and LSASS protections github.com/gabriellandau/EDR…

GitHub - gabriellandau/EDRSandblast-GodFault: EDRSandblast-GodFault

EDRSandblast-GodFault. Contribute to gabriellandau/EDRSandblast-GodFault development by creating an account on GitHub.

github.com
2
53
148
12,035
A few years old but a very well written white paper on Linux containers Credits @NCCGroupplc research.nccgroup.com/wp-con… #Linux #containers #infosec
2
59
207
25,416
I just published Home Grown Red Team: SMB Pivots With Havoc C2 link.medium.com/Ap3Xk0HKjCb An updated article for lateral movement with Havoc.

Home Grown Red Team: SMB Pivots With Havoc C2

Welcome back! Today we’re going to talk about some lateral movement techniques with Havoc C2 using SMB pivots. SMB pivots are great for…

link.medium.com
5
119
1
382
28,155
SUCH a good read. I love the section where they explicitly explain the process used to write custom shellcode for OpenBSD. Even for a noob to Binary Exploitation that was so easy to follow and really emboldening to go after these sort of bugs. Bravo! blog.assetnote.io/2023/08/09…

Finding and Exploiting Citrix NetScaler Buffer Overflow (CVE-2023-3519) (Part 3)

Full exploitation of Citrix NetScaler CVE-2023-3519 buffer overflow: patch diffing, ASLR bypass, ROP chain construction and shellcode.

slcyber.io
2
41
193
15,793
Excited to share my new research: a POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local/remote processes. github.com/ShorSec/DllNotifi… An accompanying blog post with more details: shorsec.io/blog/dll-notifica…
ShorSec Cyber Security@ShorSecLtd14 Aug 2023
We are excited to share a new "threadless" process injection technique by @dec0ne. This new technique utilizes DLL Notification Callbacks in the remote process to trigger the shellcode github.com/ShorSec/DllNotifi… Detailed blog post: shorsec.io/blog/dll-notifica… Demo video in next tweet

GitHub - ShorSec/DllNotificationInjection: A POC of a new “threadless” process injection technique...

A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes. - ShorSec/DllNotificationInjection

github.com
6
137
2
409
47,668
Replying to @tifkin_
@tifkin_ , @0xdab0 , and I are very proud to announce that the alpha release of Nemesis is now public! The code is at github.com/SpecterOps/Nemesi… and we have a post explaining details at posts.specterops.io/hacking-… 1/3

GitHub - SpecterOps/Nemesis: An offensive data enrichment pipeline

An offensive data enrichment pipeline. Contribute to SpecterOps/Nemesis development by creating an account on GitHub.

github.com
5
104
3
283
33,456
. @samwcyo's write ups not only contain a 👌 amount of technical details, but also tell a story and describe the mentality required to find these internet breaking bugs. Also, note the verbiage surrounding "interesting" or "curious". Essential. Must read: samcurry.net/points-com/

Leaked Secrets and Unlimited Miles: Hacking the Largest Airline and Hotel Rewards Platform

Between March 2023 and May 2023, we identified multiple security vulnerabilities within points.com, the backend provider for a significant portion of airline and hotel rewards programs. These...

samcurry.net
30
2
141
10,788
When making the vulnerable #AWS environment CloudFoxable, @sethsec drew inspo from #security tools like #CloudGoat, flaws.cloud, and #Metasploitable. CloudFoxable provides flags and #attackpaths in a CTF format. Check out the #challenges! bfx.social/3X6diwX
9
14
3,088
247CTF retweeted
E.S
@ellishlomo2 Aug 2023
It's only a service principal. cyberdom.blog/2023/07/29/per…
1
51
3
158
44,888
Abusing DLLs with RWX sections to fulfill memory allocation primitive and achieve code injection in a local and remote process. Post by Thiago Peixoto, Felipe Duarte and Ido Naor of @SecurityJoes. #redteam securityjoes.com/post/proces…
2
51
1
173
12,274
Continuing their journey through offensive data, @harmj0y, @tifkin_, and @0xdab0 break down some common challenges in post-exploitation work flows. ghst.ly/45d5oF3
17
76
7,833
Me and @Her0_IT did a fair bit of research against one of the leading EDRs in the sector. This first post will hopefully be the start of a long saga, documenting all of our findings. This first part was dated back in 2020: riccardoancarani.github.io/2…

Attacking an EDR - Part 1

Introduction DISCLAMER: This post was done in collaboration with Devid Lana. You can find his blog here: https://her0ness.github.io This post is the first of what - we hope - will be a long series of...

riccardoancarani.github.io
3
67
2
181
16,839
Published a write-up on successfully phishing a target using AD FS with MFA. Covers some of the challenges and how I finally got it working 🎣 research.aurainfosec.io/pent…

Hook, Line, and Phishlet: Conquering AD FS with Evilginx

A detailed walkthrough of the process and hurdles faced in leveraging Evilginx3 to conduct a successful phishing campaign on a AD FS protected domain.

research.aurainfosec.io
3
113
3
291
31,150
Backdooring ClickOnce .NET for Initial Access: A Practical Example by @an0n_r0 infosecwriteups.com/backdoor…

Backdooring ClickOnce .NET for Initial Access: A Practical Example

This blogpost is about demonstrating the awesome ClickOnce .NET backdooring technique by Nick Powers (@zyn3rgy) and Steven F (@0xthirteen)…

infosecwriteups.com
1
47
87
8,776
New DLL hijacking opportunities, triggered using DCOM for lateral movement: github.com/WKL-Sec/dcomhijac…

GitHub - WKL-Sec/dcomhijack: Lateral Movement Using DCOM and DLL Hijacking

Lateral Movement Using DCOM and DLL Hijacking. Contribute to WKL-Sec/dcomhijack development by creating an account on GitHub.

github.com
1
113
4
297
43,565
[BLOG] With an increase in threat actor usage of SVG Smuggling, our new research blog documents ways the image format can be abused, and how we can detect it! 🔍 blog.delivr.to/svg-smuggling…

SVG Smuggling: A picture worth a thousand words

HTML Smuggling is a common phishing technique, but did you know SVG image files can be used for smuggling too?

blog.delivr.to
29
73
7,508
Load more