@cherboff
Joined November 2011
  • Tweets146
  • Following339
  • Followers317
12Media
Gleb Cherbov retweeted
Steph@w34kp4556 Jul 2024
Here are a few thoughts about #RockYou2024(2021) while the hype train is running to the station "Everyone hack3d" with a stop at "why it's useless". Obviously, most compilations suffer from the garbage inside, and it's always better to know how the wordlist was crafted.
1
7
9
4,923
Played around with ChatGPT for pentest reporting. Still a long way from making us unemployed anytime soon. But yeah! It can speed up a boring routine😺
2
3
11
1,472
The ability to look at the entirety of a situation to see the bigger picture is critical, especially for application security. What's the point of audits if all the vulnerabilities found remain in 50-page pentester reports or ci/cd Pipeline artifacts? linkedin.com/posts/dmitry-ch…

#security #appsec #hexway #ptaas | Dmitry Chastuhin

The ability to look at the entirety of a situation to see the bigger picture is critical, especially for application security. What's the point of audits if all the vulnerabilities found remain in...

linkedin.com
1
356
Gleb Cherbov retweeted
Steph@w34kp45515 Feb 2023
#ChatGPT is fantastic in case you need to deal with regular expressions.
1
1
3
522
Gleb Cherbov retweeted
Хабр@habr_com11 Oct 2022
Полевой набор пентестера Ребята из Digital Security рассказывают о составе типового полевого набора, который пентестеры берут с собой, выезжая для проведения анализа беспроводных сетей или проектов в формате Red Team: amp.gs/jGNEc
3
6
Gleb Cherbov retweeted
Gleb Cherbov@cherboff19 Sep 2022
Replying to @hakluke
Informative weaknesses mentioned in report is not making it less stronger. Just do it in a proper way! That's why we have an optional "weakness" flag for every finding reported. So it is pretty simple to separate them to different report sections with no info trash in main parts.
1
1
1
Gleb Cherbov retweeted
Steph@w34kp45525 Aug 2022
Hey everyone! I just launched a yet-another-new-free- project for subdomain discovery with online tools, screenshots, and automation. So it's time to have a look! #pentest #bugbounty
ShrewdEye@shrewd_eye25 Aug 2022
How about little automation of your favorite #bugbounty workflow with ease in two clicks? You can do it even with your mobile phone! It's totally free. #bugbounty #automation
3
7
just curious how much androids in use may suffer the same and will be never patched
Mathy Vanhoef@vanhoefm24 Jan 2022
Another enterprise WPA2 implementation flaw: subject name (hostname) of the server was checked using the substring function instead of doing an exact compare.
Microsoft Exchange Deserialization RCE (CVE-2021–42321) PoC peterjson.medium.com/some-no…
1
45
114
Gleb Cherbov retweeted
OWASP Amass@owaspamass11 Nov 2021
It's great to see the @owasp #Amass Project alongside these excellent #security tools and integrated with @_hexway Hive! #infosec #pentest #osint #redteam
This Post is from an account that no longer exists. Learn more
5
5
Here is a first draft on an NTLM relay mindmap 🙂 from authentication coercion to post-relay exploitation. I'll gladly update/correct it if you think there are things wrong or missing. ➡️Featured on The Hacker Recipes thehacker.recipes/ad-ds/move…
16
303
6
830
Check out my new blog post about AD CS relay attack exandroid.dev/2021/06/23/ad-… #pentest #redteam

AD CS relay attack - practical guide

Unless you are living under the rock, you have seen that recently @harmj0y and @tifkin_ published their amazing research on Active Directory Certificate Services (AD CS). If you haven’t checked it...

exandroid.dev
3
51
2
104
Gleb Cherbov retweeted
PT SWARM@ptswarm30 Sep 2020
💥Easy RCE Ports Java RMI: 1090,1098,1099,4444,11099,47001,47002,10999 WebLogic: 7000-7004,8000-8003,9000-9003,9503,7070,7071 JDWP: 45000,45001 JMX: 8686,9012,50500 GlassFish: 4848 jBoss: 11111,4444,4445 Cisco Smart Install: 4786 HP Data Protector: 5555,5556 #ptswarmTechniques
9
411
11
978
Looks like a self-hosted pentest collab/mgmt tool that we finally deserve. Still not perfect but with a huge potential.
This Post is from an account that no longer exists. Learn more
3
4
Gleb Cherbov retweeted
Steph@w34kp45520 Dec 2020
Decided to learn and do something new for fun, and ... here comes vdroid.app! Yet another fast, easy, etc. android application bugs scanner. #android #security #BugBounty
1
1
3
Gleb Cherbov retweeted
Steve Syfuhs@SteveSyfuhs1 Dec 2020
Okay, lets talk Credential Guard. What is it, why it matters, and how it works.
21
253
89
916
Gleb Cherbov retweeted
Andy Robbins@_wald020 Nov 2020
I'm proud to announce the release of #BloodHound 4.0: The Azure Update! Blog: posts.specterops.io/introduc… BloodHound 4.0 Release Poster: redbubble.com/i/metal-print/… Get BloodHound: bit.ly/GetBloodHound Docs: bloodhound.readthedocs.io/en… Join the BloodHound Slack: bit.ly/BloodHoundSlack
6
348
44
788
Gleb Cherbov retweeted
GoSecure
@GoSecure_Inc8 Sep 2020
Need SYSTEM? Local Privilege Escalation (#LPE) on all supported versions of Windows by abusing WSUS. Details and PoC released: gosecure.net/blog/2020/09/08…. Blog by @m_nad0.
6
69
3
122
Tool: StreamDivert: Relaying (specific) network connections on Microsoft Windows - research.nccgroup.com/2020/0…
1
13
25
I just backed Flipper Zero — Tamagochi for Hackers on @Kickstarter kickstarter.com/projects/fli…
1
1
Load more