Steve Breen retweeted
Just uploaded the pdf slides of my talk "whoami /priv" @hackinparis #HIP19 github.com/decoder-it/whoami…
Steve Breen retweeted
This paper is *the* resource for abusing tokens on Windows for privilege escalation. I especially appreciate the level of detail @dronesec and @breenmachine go into to explain the token ecosystem, permissions, past attacks, etc. 10/10 would read again.
github.com/hatRiot/token-pri…
Steve Breen retweeted
Hey so we're stoked to welcome @jstnkndy @breenmachine and @brandonprry from @foxglovesec to the AtrediFam.
We've been calling it "The Hat Trick".
Steve Breen retweeted
I'm releasing with @Giutro Juicy Potato, another Local Privilege Escalation tool from a Windows Service Accounts to SYSTEM by abusing the golden privileges (decoder.cloud/2018/08/10/jui…)
Steve Breen retweeted
#UnpopularOpinion conferences should more heavily vet talks and reject those that are subpar because those speakers often get an inflated sense of skill and spread misinformation.
Steve Breen retweeted
Custom version of C++ Rotten Potato along with some observations ;-) decoder.cloud/2018/01/13/pot…
Steve Breen retweeted
@ifsecure uploaded the privilege escalation I wrote (with @halvarflake size coding) for the WPAD blog. bugs.chromium.org/p/project-… Small footprint and uses RPC libs instead of parsing the RPC traffic like Rotten Potato /cc @breenmachine
Steve Breen retweeted
#RottenPotatoNG - New version of #RottenPotato as a C++ DLL and standalone C++ binary by @breenmachine github.com/breenmachine/Rott…
Steve Breen retweeted
HP has released the security bulletin which addresses the vulnerability described in our blogpost support.hp.com/nz-en/documen…
Steve Breen retweeted
We think HP should be more concerned with foxes than wolves - "A Sheep in Wolf's Clothing - Finding RCE in HP's Printer Fleet" by @breenmachine - foxglovesecurity.com/2017/11…
Steve Breen retweeted
Abusing delay load DLLs for remote process injection hatriot.github.io/blog/2017/…
Steve Breen retweeted
Dropping @breenmachine and @dronesec latest Windows privilege escalation project - For exploit devs and pentesters - foxglovesecurity.com/2017/08…
Steve Breen retweeted
Announcing Bochspwn Reloaded – a new kernel memory infoleak detector – and the REcon Montreal 2017 slides. j00ru.vexillium.org/?p=3295
Steve Breen retweeted
New blogpost by @jstnkndy on abusing Type Juggling and PHP Object Injection to gain SQLi foxglovesecurity.com/2017/02…
Steve Breen retweeted
Hey, @JustinTrudeau, did you forget about this?
We did not. And neither will Canadians. teapaw.org/JustinTrudeau/status/6…
As Prime Minister, I’ll make sure the 2015 election will be the last under first-past-the-post system lpc.ca/ao3o #upfordebate
Steve Breen retweeted
Ektron XSLT Exec with DNS C2 payload (egress was annoying) -> Rotten Potato to get SYSTEM -> Mimikatz -> Lat Movement -> DA
Steve Breen retweeted
I reiterate any so-called climate plan that puts forward dramatic increase in emissions is a joke @andrew_leach @ptullochott @RachelNotley
Steve Breen retweeted
Except @ElizabethMay says NEB did not examine economic implications of Trans Mountain expansion. straight.com/news/839966/int…
#cdnpoli
