@pentestmonkey
pentestmonkey.net/
Joined October 2010
  • Tweets63
  • Following77
  • Followers1.5K
New release from the team, @pentestmonkey has ported udp-proto-scanner to Python and given it a bit of a polish: github.com/CiscoCXSecurity/u…

GitHub - CiscoCXSecurity/udpy_proto_scanner: udpy_proto_scanner is a Python script which discovers...

udpy_proto_scanner is a Python script which discovers UDP services by sending triggers to a list of hosts - CiscoCXSecurity/udpy_proto_scanner

github.com
13
17
2,814
We did a thing! It's over 10 years since we started working on this but it's still useful today: github.com/CiscoCXSecurity/u… Kudos to @pentestmonkey for porting the Perl bits to a modern language. #aix #solaris #linux #unix #security

GitHub - CiscoCXSecurity/unix-audit: Framework for generating audit commands for Unix security...

Framework for generating audit commands for Unix security audits - CiscoCXSecurity/unix-audit

github.com
2
22
2
47
13,822
[Blog] Beyond LLMNR/NBNS Spoofing - Exploiting Active Directory-Integrated DNS blog.netspi.com/exploiting-a… Also, #PowerShell ADIDNS spoofing functions added to Powermad github.com/Kevin-Robertson/P…
10
189
10
288
Congrats to @nmonkee @iantshaw @alexjplaskett and all the team at @mwrinfosecurity on their acquisition by @FSecure globenewswire.com/news-relea…
7
27
pentestmonkey retweeted
Wezmaster@wezmaster5 Jan 2018
AD ACL Scanner. A tool with GUI used to create reports of access control lists (DACLs) and system access control lists (SACLs) in Active Directory github.com/canix1/ADACLScann…

GitHub - canix1/ADACLScanner: Repo for ADACLScan.ps1 - Your number one script for ACL's in Active...

Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory - canix1/ADACLScanner

github.com
37
2
44
pentestmonkey retweeted
Will Schroeder@harmj0y30 Oct 2017
So excited - here's my updated "Guide to Attacking Domain Trusts" posts.specterops.io/a-guide-… ! Was a blast to write
11
582
11
930
pentestmonkey retweeted
x0rz@x0rz10 Oct 2017
Getting command execution on MSWord without any Macros 😈 sensepost.com/blog/2017/macr… #windows #maldoc #malware
15
538
30
791
pentestmonkey retweeted
NCSC UK
@NCSC7 Oct 2017
Cyber security community! Opportunity to contribute to the foundations of the future cyber security profession ncsc.gov.uk/blog-post/cyber-…
2
43
1
39
pentestmonkey retweeted
Niek Timmers@tieknimmers2 Oct 2017
Our paper about Escalating Privileges in Linux using Fault Injection is available online: riscure.com/publication/esca… ! @pulsoid #FDTC17
2
99
2
147
pentestmonkey retweeted
Binni Shah
@binitamshah2 Mar 2017
awesome-windows-domain-hardening : Curated list of awesome Security Hardening techniques for Windows: github.com/PaulSec/awesome-w… cc @PaulWebSec

GitHub - PaulSec/awesome-windows-domain-hardening: A curated list of awesome Security Hardening...

A curated list of awesome Security Hardening techniques for Windows. - PaulSec/awesome-windows-domain-hardening

github.com
129
4
247
pentestmonkey retweeted
Hak5@Hak525 Feb 2017
Our launch event for the #BashBunny will be March 2nd, 8pm. More info and RSVP here! goo.gl/forms/3d7mkK6eGFJi6eB…
3
13
2
38
pentestmonkey retweeted
NCC Group plc@NCCGroupplc25 Feb 2017
A step by step guide on how to decrypt SCOM “RunAs” Credentials nccgroup.trust/uk/about-us/n…
5
5
FuzzySec -> Anatomy of UAC Attacks - fuzzysecurity.com/tutorials/…
3
76
2
70
pentestmonkey retweeted
Chris Nickerson
@indi30327 Sep 2016
TO ALL in InfoSec who overuse Advanced. "It is in the flawless execution of the basics that we find world class success." - Lombardi
3
38
4
55
McAfee SiteList.xml AD privilege escalation > should be part of every priv esc checklist > ICYMI like me github.com/tfairane/HackStor…
1
60
60
Nice set of posts on a threat hunting reference model proposal blog.sqrrl.com/the-cyber-hun… blog.sqrrl.com/the-threat-hu… blog.sqrrl.com/the-threat-hu…
18
24
Another @metasploit module from @ukstufus, for storing groups, computers and user memberships from AD in a SQLite DB github.com/rapid7/metasploit…

Store Groups, Computers and Nested User Membership from AD into a local SQLite database by stufus ·...

Overview This PR is for a multithreaded post exploitation module which has the effect of copying the AD groups, user membership (taking into account nested groups), user information and computers t...

github.com
9
7
Security assessment of Oracle's eBusiness suite with PoCs for the more interesting web SQL injection issues davidlitchfield.com/Assessin…
3
55
57
pentestmonkey retweeted
Slashdot
@slashdot23 Jan 2016
Hot Potato Exploit Gives Attackers the Upper Hand On Multiple Windows Versions bit.ly/1nG0Ty2

Hot Potato Exploit Gives Attackers the Upper Hand On Multiple Windows Versions - Slashdot

An anonymous reader writes: By chaining together a series of known Windows security flaws, researchers from Foxglove Security have discovered a way to break into almost all of Microsoft's recent...

tech.slashdot.org
23
7
pentestmonkey retweeted
Phil Huggins@oracuk21 Jan 2016
blog.blackswansecurity.com/2… <-- A short post on assessing how to deliver a SOC.
7
13
Load more