CEO at BC Security LLC Infosec Professional | Engineer | Skier

Joined February 2020
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Our new #blog from @_Hubbl3 breaks down how Offensive IronPython techniques remain a powerful threat to networks, even 4 years after Turla's initial deployment of these TTPs.

20
86
4,056
Code & Cask | IronPython TTPs xitter.cf/i/broadcasts/1LyGBgXze…
3
2
527
definitely gunna take a look!
28
Empire has come a long way since its humble beginnings. If you haven't used it in some time, take a look at how it's grown into a multi-language powerhouse. For our dedicated users check out the post for exciting news about the upcoming release!

1
14
39
2,486
Hubbl3 retweeted
Most importantly, you will be "hacking" into Wells Fargoat as part of this class. Note: No goats were harmed in the making of this CTF.
Don't miss your chance to sign up and dive into the core principles of command and control frameworks while mastering Sliver. This course emphasizes practical, hands-on experience in a lab environment and concludes with an exciting capstone CTF challenge. Secure your spot now!

2
4
643
Don't miss the next episode of Code & Cask today at 5pm EST. We will be looking at python and webdav along with looking at Microsoft's new Python in Excel feature. twitch.tv/bcsecurity
1
1
570
Wow another wave of explosions in Lebanon through radios. Starting to think this is more about PsyOps and creating a deep mistrust of communication devices by Hezbollah
4
221
Replying to @snehalantani
The Israelis aren't exactly shy about about civilian collateral and you could control the distribution of the trigger through targeting of known numbers. But we won't know more for a while and the strength of explosion does point to some kind of hardware modification
54
Replying to @snehalantani
Or just an entry point early enough in the supply chain and let the standard distribution network do the work for you. I'm seeing people claim that explosives had to have been installed but that hasn't been confirmed yet
2
74
Replying to @HackingLZ
I'm really curious to find out if there were hardware modifications or if it was purely a software/firmware attack.
2
153
Does anybody know how/where you can download older versions of KB4052623 (i.e. Defender Definition Updates)? Microsoft Update Catalog only provides the latest version.
6
1
1
15
7,749
Replying to @_RastaMouse
commenting just so I can follow because I would love to know too.
1
242
Replying to @ShitSecure
hmm, weird. I haven't tried a rust binary in a bit but I was planning on using it in a training in a few weeks😅 I wonder if an API changed? I have recently been unable to find a working python shellcode injector that doesn't crash the parent process either
1
192
Replying to @ShitSecure
I assume you have, but did you check that the binary is valid? I was getting a weird issue the other day where the first time I compiled a project the binary was invalid but subsequent compiles were fine
1
1
372
We are excited to be heading to @Blackhatmea! Come upgrade your skills with our Evasion course. Learn how open-source tools & custom toolsets remain stealthy through application of code obfuscation & TTPs like API unhooking & C2 traffic modification.

4
12
688
But wow I haven't seen spread through the C$ folder in a while. That is some old school TTPs
75
Cue the "I thought APT was supposed to stand for advance" comments 🙄
1
40
Interested in getting started with offensive security? Our new Sliver Ops course is designed as an introduction to command and control frameworks, guiding students through the basics of the Sliver framework while familiarizing them with attacking Windows and Linux systems

9
2
39
22,358