https://xitter.cf/t.co/PvqOMJMh5K
Brooklyn, NY
Joined December 2011
- Tweets449
- Following242
- Followers283
- Likes1.3K
Pinned Tweet
Just uploaded my slides from #WWHackinFest. Thanks to everyone that came and saw the talk!
slideshare.net/ThomasElling1…
Thomas Elling retweeted
Ever run into an Azure SAS token URL while testing? This fantastic blog by @jakekarnes42 helps demystify all those parameters to show you the potential options to get to other files in the storage account - netspi.com/blog/technical/we…
Thomas Elling retweeted
Here's another serious vulnerability to add onto the list of recent Azure issues. This is our write up (and a thread) on CVE-2021-42306 (CredManifest), which addresses the cleartext storage of App Registration credentials in AAD SP manifests. netspi.com/blog/technical/cl… (1/5)
Thomas Elling retweeted
Releasing gcpHound ..!!
This is an Offensive ToolKit for GCP. Along with privilege escalation and data exflitration , it’s got cool function for persistence and lateral movement from @Richarjb
Checkout blog post below for more information.
desi-jarvis.medium.com/gcpho…
Thomas Elling retweeted
Shameless self-promo, but I'll be giving the talk "Hacking G Suite: The Power of Dark Apps Script Magic" at the upcoming Defcon 29 conference in Vegas.
If you're interested in learning more about red teaming companies on GSuite come check it out 👍.
defcon.org/html/defcon-29/dc…
Thomas Elling retweeted
I’m really excited about this presentation. I’ll be presenting at 10 AM on Saturday with “Extracting all the Azure Passwords”.
Our speaker list for @defcon is OUT!
Visit cloud-village.org for the schedule
Thank you for sending us so many quality papers and making our review team's job difficult :)
Subscribe to our YouTube channel to avoid missing any talk-youtube.com/cloudvillage_dc
#defcon29 #DEFCON
Thomas Elling retweeted
David Okeyode (@asegunlolu) and Karl Fosaaen (@kfosaaen) will be presenting "An Introduction to Azure Offensive Security" fwdcloudsec.org/speakers.htm…
Thomas Elling retweeted
New addition to Get-AzPasswords in MicroBurst!
We just added the option (-AKS) to export the clusterAdmin and clusterUser kubeconfig authentication files for AKS clusters. github.com/Netspi/Microburst
Thomas Elling retweeted
[New Release] Inveigh 2.0: Rebuilt for C#, cross-platform (Windows, Linux, macOS), new listeners (SMB, LDAP, WebDAV, HTTPS), improved interactive console (tab complete, real time stats). github.com/Kevin-Robertson/I…
Thomas Elling retweeted
Introducing Patrolaroid, a malware scanner for AWS instances that doesn't yeet around your prod.
@rpetrich & I made it OSS so ppl don't have to deploy sketchy security tools in prod just for basic coverage of malware, miners, toolkits, backdoors, etc.
github.com/rpetrich/patrolar…
Thomas Elling retweeted
New blog just went up. Some research on enumerating + exploiting compromised Azure managed identities with some new scripts that I added to MicroBurst. netspi.com/blog/technical/gi…
Thomas Elling retweeted
What a time to be alive... Install the Microsoft signed Hybrid Connection Manager on victim host, link it up with your Azure app, enjoy persistent access to the on-prem network from your Azure portal. Only needs https outbound to Azure and line of sight from victim to target host
Thomas Elling retweeted
Want to detect SQL Server OS command execution or link crawling behavior? Check out the PowerUpSQL wiki for new detection guidance: github.com/NetSPI/PowerUpSQL… @NetSPI
Thomas Elling retweeted
Just when you thought JSON was the one thing you could trust. My latest research on JSON interoperability vulnerabilities highlights the risks of inconsistent parser behavior (40+ parsers) and attacks to bypass business logic in microservice architectures. labs.bishopfox.com/tech-blog…
Thomas Elling retweeted
Hacking SQL Server Stored Procedures
1: (un)Trustworthy Databases
blog.netspi.com/hacking-sql-…
2: User Impersonation
blog.netspi.com/hacking-sql-…
3: SQL Injection
blog.netspi.com/hacking-sql-…
4: Enumerating Domain Accounts
blog.netspi.com/hacking-sql-…
#infosec #pentest #redteam
Thomas Elling retweeted
I added a -ModifyPolicies flag to Get-AzPasswords to temporarily add Key Vault "Get" and "List" Access Policy rights for your current user on all Keys and Secrets in a vault. This will revert any policy changes it makes when it's done. github.com/NetSPI/MicroBurst
Thomas Elling retweeted
MicroBurst Update! We just approved a PR to add methods for dumping automation account credentials, and running commands on VMs, all using the management REST APIs. Thanks to @passthehashbrwn for the awesome work! You can find the new functions here - github.com/NetSPI/MicroBurst…
Thomas Elling retweeted
i tried to make a beginner-friendly post about some of the basics related to code coverage in fuzzing, just going over terminology, common strats, and some tooling. hopefully this will be useful for some! h0mbre.github.io/Fuzzing-Lik…
Thomas Elling retweeted
I'm super excited about this post finally going live, but here is some fantastic Kerberos research by @NetSPI 's @jakekarnes42! This link is the intro post, but additional links are there for the two deep dive follow up posts on CVE-2020-17049.
blog.netspi.com/cve-2020-170…
Thomas Elling retweeted
Tomorrow, @CptJesus and I are releasing the newest version of #BloodHound: 4.0. See the new features, new GUI, and new attack primitives first during our SO-CON presentation called "Six Degrees of Global Admin". Register here: specterops.io/so-con2020/eve…
