Pentest, Red Team, RT Dev
Joined April 2020
- Tweets488
- Following153
- Followers2.9K
- Likes125
Pinned Tweet
This is C2 I decided to write publicly. If you are interested, I hope for feedback)
I am fixing version 0.1 ...
adaptix-framework.gitbook.io…
#c2
HackerRalf retweeted
Honestly, what is this ? I got a response from @github support team. So here after legal Security Research and PoC's is not allowed on GitHub ?
I'm Completely got disappointment by @github and @Microsoft @MsftSecIntel .
In what ways i distribute and share malware. Can anyone tell me if there is a mistake from my side, did i share 0 days, vulnerabilities, direct binaries or full exploit chain that harm users ? NONE ?
is posting Legal source codes and tools that are made of public PoCs are wrong ? there are thousand of full chain real expoits that bypasses EDRs, C2s that evades security solutions, phishing kits that bypasses MFA of Microsoft out there in @github , if that is legal then why cant this simple publically made poc can't be in the github ?
I have replied regarding my statements, please don't disappoint younger legal windows security researchers like this. I have some little hope on @github @Microsoft @MsftSecIntel .
I have a little hope. So Please don't make me loose on @github & @Microsoft & @MsftSecIntel .
Ticket ID: #4440743
Will be waiting for your kind response. Thank you.
xitter.cf/5mukx/status/206182709…
#github #microsoft #security #research
Hey @martinwoodward
My GitHub account was flagged without any prior notice. I'm a college student and have been an active open-source contributor for over 4 years. I've released multiple security research projects and even contributed to Microsoft's open source editor.
My repositories help security researchers test and strengthen defensive systems through authorized work. Today I was releasing updates to a new tool when the flag occurred. I've already submitted a reinstatement request (Ticket #4440743).
So I kindly request you to help and resolve this issue.
Thank you
HackerRalf retweeted
🧑🚒 Our researcher Mikhail Sukhov shares his knowledge and experience in analyzing FreeIPA environments.
He also introduces his new tool, IPAHound 💪
Go ’n see the details ➡️ swarm.ptsecurity.com/thinkin…
HackerRalf retweeted
Two bugs. One chain. Full RCE.
New research by Aleksandr Zhurnakov on Dell Wyse Management Suite shows how business logic flaws can be chained into complete system compromise.
Read the full writeup!
swarm.ptsecurity.com/busines…
AdaptixC2 v1.2 is out!
* New UI cross platform styles
* Server side AxScript Engine
* Async BOFs
Full update info: adaptix-framework.gitbook.io…
AdaptixC2 v1.1 is out!
* New DNS/DoH beacon listener
* New extenders type - service
* New BOFs in Extension-Kit
* Added Events/Hooks manager
Full update info: adaptix-framework.gitbook.io…
HackerRalf retweeted
Today I had an ldap ntlmrelayx.py socks connection but all tools failed to query LDAP via socks5 except from certipy. But certipy only queries certificate information. Well, so I let claude code something which worked 🧐
github.com/S3cur3Th1sSh1t/AI…
It just so happens that this repository includes the largest pack of BOFs compatible with any C2 framework (except maybe a couple). Currently, it includes an axs script for loading to AdaptixC2, but cna and others could easily be added.
github.com/Adaptix-Framework…
Docs for the future release AdaptixC2 1.1
Teamserver Interface + API: adaptix-framework.gitbook.io…
Events and Hooks docs (new feature): adaptix-framework.gitbook.io…
Extenders dev: adaptix-framework.gitbook.io…
HackerRalf retweeted
ProfileHound - a post-escalation tool to help find and achieve red-teaming objectives by locating domain user profiles on machines. It uses the BloodHound OpenGraph format to build a new edge called HasUserProfile github.com/m4lwhere/profileh…
HackerRalf retweeted
A fun little Friday night project porting @AndrewOliveau C# SessionHop code to a BOF. Built off of @tiraniddo session moniker research & @CICADA8Research original IHxHelpPaneServer blog. Enjoy!
github.com/jhalon/cSessionHo…
HackerRalf retweeted
One-shot ESC1 + unPAC BOF for Havoc and CS. The certificate request includes the target's SID in the SAN to comply with strong mapping requirements (KB5014754). Hope it’s useful github.com/RayRRT/ESC1-unPAC
HackerRalf retweeted
Another Pentest, another time the NetExec Veeam module didn't work properly. Sometimes SYSTEM impersonation is needed, sometimes it's flagged by AMSI. You need to know about alternatives. SharpVeeamDecryptor now supports v12 and PostgreSQL Veeam instances 😎
github.com/S3cur3Th1sSh1t/Sh…
AdaptixC2 v0.11 is out!
Feature updates, fixes, new BOFs, and 2 new community-contributed agents!
Releass Notes: adaptix-framework.gitbook.io…
HackerRalf retweeted
Uncovering network attack paths with runZeroHound - @hdmoore
runzero.com/blog/introducing…
HackerRalf retweeted
NoMoreStealers - a Windows file system minifilter driver that protects sensitive user data from untrusted processes github.com/EvilBytecode/NoMo…
HackerRalf retweeted
This PR from fulc2um github.com/fortra/impacket/p… implements Shadow RDP on Impacket, this is so fking cool omgggg
HackerRalf retweeted
Patching one technique doesn't close the entire attack vector.
dMSA abuse is still a problem, and @_logangoins just dropped a reality check with new tooling to prove it.
Learn more about the issue & the new BadTakeover BOF. ghst.ly/42POg9L
