tzar retweeted
What a week at @OutflankNL!
> Release: Cobalt Strike Research Labs - research form the CS R&D team straight to OST customers
> Release: InfraRed - automated deployment of RT infra
> Nifty AI evasion research from @kyleavery added to OST
> @fortraofficial acquires @_ZeroPointSec
tzar retweeted
Finally releasing Sekken-Enum, an ADWS enumeration BOF we've been using internally for a while now.
Based on the research from SOAPHound/SoaPy moving away from relying on .NET execution or proxying.
Output works with BOFHound for Bloodhound ingesting.
github.com/Nomad0x7/sekken-e…
tzar retweeted
My hot take on AI 🌶️. It's less about efficincy and more about scale.
byt3bl33d3r.substack.com/p/a…
Another awesome bit of linux Maldev research work from @k0zmer
single-threaded event driven sleep obfuscation poc for linux utilizing file descriptors, inspired by "pendulum" from @kyleavery
github.com/kozmer/silentpuls…
Nice new feature incoming for those RT's out there using Tailscale for inf.
tailscale.com/kb/1226/tailne…
This change imo, addresses the what if on tail-scale being compromised. Cant really see any reason for headscale in prod if this is correctly rolled out now?
Looks sick, gui and automate all the things :)
I know AI isn’t for everyone, but I’ve been tinkering with it to make my engagement process a bit easier.
I built a small tool inspired by @dsec_net’s Red Commander demos that lets you plug in your API keys (Mailgun/SendGrid, GoDaddy/Namecheap) and handles the work for you.
We've been putting these to good use lately on some ops.
github.com/kozmer/aad-bofs
Keep an eye on future updates from @k0zmer.
#redteam
tzar retweeted
I'm calling it. Security has been solved.
“Microsoft Defender XDR demonstrates 100% detection coverage across all cyberattack stages in the 2024 MITRE ATT&CK® Evaluations”
microsoft.com/en-us/security…
tzar retweeted
Excited to share that the @malcrove Red Team just dropped new blog and new tool SeamlessPass!
utilizing Microsoft’s Seamless SSO feature to acquire access tokens for Microsoft 365 services by leveraging on-premises Active Directory Kerberos tickets
malcrove.com/seamlesspass-le…
tzar retweeted
I haven't posted anything about Havoc in a while so imma share something I have been working on. Wrote a custom VM/Interpreter (based on the RISC-V instruction set) to execute exploits and other arbitrary code.
The client is now fully extendable and scriptable via the Python API
My talk on automating red team inf is out!
There is a slight change to the release schedule mentioned in the talk. The API poc will be coming soon, but there have been some delays. Keep an eye out.
Thanks for having me #x33fcon ! Looking forward to the next one!
Linux symbol obfuscation using `dl_iterate_phdr`. Great bit of research and blog from @k0zmer
bulletproof.co.uk/blog/tech-…
tzar retweeted
I can make you click a phishing link. Want to know how? Just click this link and I will teach you ;) Don't worry. This is not a test. Nobody will know. Just do it: posts.specterops.io/i-will-m…