Are you ready for an Attack? We are security professionals specializing in penetration testing, cybersecurity assessments, and social engineering training.
USA
Joined July 2022
- Tweets75
- Following55
- Followers2
- Likes1
Attack Security retweeted
🥷 Now we can inject a payload into a remote process without using VirtualAllocEx and WriteProcessMemory.
No need to suspend the target process
New technique to evade EDRs:
Github: TwoSevenOneT/InjectSetConsole
#redteam #pentest #antimalware
Font Based Deception toolkit for your phishing needs.
doctoreww.github.io/EvilFont…
Attack Security retweeted
Open-source user-defined reflective loaders that bypass CrowdStrike, Elastic, Microsoft Defender, and SentinelOne. Compatible with Cobalt Strike, NightHawk, Havoc, Adaptix, Mythic, Brute Ratel, and Sliver (with minor modifications).
If you are building detections for reflective loading, these are your test cases. If you are not testing against these, your rules have blind spots.
TitanLdr: github.com/benheise/TitanLdr by @ilove2pwn_
BokuLoader: github.com/boku7/BokuLoader by @0xBoku
AceLdr: github.com/kyleavery/AceLdr by @kyleavery
TitanLdrNG: github.com/klezVirus/titanld… by @klaboratory
sRDI with extra evasion capabilities. All open source. Free.
#DetectionEngineering #RedTeam #InfoSec
DoublePulsar: A User Defined Reflective Loader in the Crystal Palace and Tradecraft Garden Era in rust by MemN0ps
Blog:- memn0ps.github.io/doublepuls…
Life is just easier without the WAF :)
Ghost in the Firewall
EvilWAF is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs)
github.com/matrixleons/evilw…
Attack Security retweeted
Claude tarafında Red Team Skillerini devreye almak isterseniz ( ki kendinizde yapabilirsiniz normalde ) auto bir tool üretmişler. Oldukça başarılı.
github.com/SnailSploit/claud…
#Claude #RedTeam #AI #YapayZeka #SiberGüvenlik
Attack Security retweeted
Unpatched NTLM Leakage in Windows search: URI Handler, Same Bug, No CVE, No Fix huntress.com/blog/unpatched-…
Attack Security retweeted
Just noticed this change in the @MITREattack Enterprise Matrix V19. Defense Evasion has been split into the tactics Stealth and Defense Impairment.
attack.mitre.org/resources/u…
Attack Security retweeted
Gaining Initial Access and Outsmarting SmartScreen
.zip email attachment that includes a VHDX (Hard Disk Image File) + Mark of the Web and SmartScreen bypass using Trusted Executable Reputation and DLL Sideloading
github.com/g3tsyst3m/Codefro…
#dfir #blueteam #redteam #pentesting #ThreatHunting
Attack Security retweeted
If you’re doing #cloud #security penetration testing and Azure is in scope, AZexec should already be in your toolkit!
AZexec brings a NetExec-style workflow to Azure & Entra ID, finally giving cloud pentesters the same speed, clarity, and offensive ergonomics we’re used to on-prem.
What makes it a must-have:
- Unauthenticated & guest-based enumeration (yes, the Azure “null session” problem is very real)
- Two-phase password spraying using Microsoft’s own APIs (stealthy, lockout-safe, MFA-aware)
- Deep Entra ID & ARM reconnaissance: users, roles, apps, Key Vaults, storage, networks, VMs
- Remote command execution across Azure VMs, Arc, MDE, and Intune
- Credential extraction & token abuse tailored for cloud-native environments
- NetExec-style output + reporting (CSV / JSON / HTML) for clean ops and clean reports
If you know CrackMapExec / NetExec, AZexec will feel instantly familiar, just adapted for how Azure actually works.
Cloud attacks deserve cloud-native tooling.
🔗 GitHub: github.com/Logisek/AZexec
#CloudSecurity #Azure #EntraID #Pentesting #RedTeam #OffensiveSecurity #AzureAD #NetExec #AZexec #Logisek
Attack Security retweeted
Excited to disclose my research allowing RCE in Kubernetes
It allows running arbitrary commands in EVERY pod in a cluster using a commonly granted "read only" RBAC permission. This is not logged and and allows for trivial Pod breakout.
Unfortunately, this will NOT be patched.
Impressive work from team at @burpsuite
Attack Security retweeted
3 words 👉 Reduce false positives. 😌
Burp AI can automatically audit broken access control vulnerabilities to reduce false positives.
Attack Security retweeted
24 million websites compromised. 🧵
PortSwigger's Director of Research, James Kettle (@albinowax), & AppSec expert John Hammond (@_JohnHammond) reveal the fatal flaws in HTTP/1.1 that attackers are abusing right now.
#HTTP1MustDie
Need to keep under the radar:
NativeDump: Stealthy LSASS Dumping Tool Bypasses EDRs Using Only NTAPIs
NativeDump allows to dump the lsass process using only NTAPIs generating a Minidump file with only the streams needed to be parsed by tools like Mimikatz or Pypykatz.
meterpreter.org/nativedump-s…
Attack Security retweeted
RemoteMonologue is a new Windows technique that uses DCOM to coerce NTLM authentications, enabling remote credential harvesting and privilege escalation for attackers.
#RemoteMonologue #CredentialHarvesting #WindowsSecurity #NTLM #Cybersecurity
meterpreter.org/remotemonolo…
Attack Security retweeted
‼️ Evilginx Pro 4.1 - Google Safe Browsing evasion 🛡️
I've just uploaded a short demo video demonstrating how Evilginx Pro is able to evade Enhanced protection in Google Chrome browser.
The update is coming soon!
🔗 youtube.com/watch?v=6AJ6dYt9…
Need another route to Active Directory? Check out SharpADWS, it has the ability to extract or modify Active Directory data without communicating directly with the LDAP server.
github.com/wh0amitz/SharpADW…
Attack Security retweeted
Building a custom Mimikatz binary by @ShitSecure
s3cur3th1ssh1t.github.io/Bui…
Source details: birkep.github.io/posts/Windo…
Privilege Escalation in Active Directory Domain Services: CVE-2025-21293 Exploit Revealed with PoC Code securityonline.info/privileg…
