Jörg retweeted
Folks, I'm excited to announce something for all the die hard Intune fans.
Check out daily.intune.admin.news today!
+ bookmark it.
BONUS: Sign up for the email newsletter to get the updates delivered straight to you inbox daily.
Jörg retweeted
From a normal domain user to Domain Admin, bypassing the SID patch.
ESC1 is alive again, under some conditions.
MSRC closed it as “By design.” Writeup and PoC below, judge for yourself.
0xmaz.me/posts/certsrv-id-cm…
Jörg retweeted
I made a thing that might help people: mr-r3b00t.github.io/net_draw…
Jörg retweeted
GPOHunter. tool designed to analyze and identify security misconfigurations in Active Directory Group Policy Objects (GPOs)
github.com/PShlyundin/GPOHun…
Jörg retweeted
NetExec v1.5.0 has been released!🔥
Merry Christmas everyone!🎉 It's been a very long time since the last release, so there are a TON of new features!
Some of the highlights:
- Built-in LDAP signing and channel binding checks
- RDP command execution
- certipy find integration
Jörg retweeted
Replying to @NathanMcNulty @fabian_bader
I see I'm not the only one going for unofficial API github.com/EvotecIT/O365Esse… where I target a lot of apis that have no proper equivalent. It's a bit of shame those actually exists but somehow they are not public.
Jörg retweeted
A couple weeks ago, @fabian_bader and I launched an unofficial PowerShell module for Defender XDR
With this module, you can perform tasks and access data that are not possible via official APIs 🔥
Check out the video below, we're just getting started
Welcome to XDRInternals :)
Replying to @fabian_bader
More information and the actual code available here
github.com/MSCloudInternals/…
I think an AADInternals Sticker would be the perfect fit. Should I ask the guy how normally a has a few if he can send you one 🤓
Jörg retweeted
NEED YOUR HELP!
My Friend/Teacher Soroush (@irsdl) Is looking for a new company to join, you know him as the .NET-God, the guy who has popped exchange, sharepoint, has maintained ysoserial_.net for years, contributed to the exploitation scene numerous times, taught all of you about what .net ghost webshells are, taught you about what viewstate exploitation is, how .net remoting exploitation issues can be solved, iis cookieless, web_config exploitation, countless of blogs, talks, techniques,...
but companies keep saying:
"we aren't hiring right now!"
if i was in position of hiring, woudln't wanna miss out on having one of THE BEST in my team
you're retweet is Extremely appreciated ❤️🔥
soroush, if you see this, don't hate me, had to do it without telling you
Fu**cking a**holes..
Hopefully there will be a way to bring it back online..
As some dipsh*t is again enumerating the whole universe using #AADInternals #OSINT tool, the service is now closed until further notice.
Jörg retweeted
After my talk at @identitysummit yesterday, there was a question regarding Continuous Access Evaluation (CAE) with third-party apps. It seems to be now supported!
learn.microsoft.com/en-us/en…
Jörg retweeted
(2025-09-02) From BadSuccessor To PatchedSuccessor jorgequestforknowledge.wordp…
Jörg retweeted
Replying to @sekurlsa_pw
I fixed it 😉
The OSINT tool is now using another publicly available endpoint for listing domains. Not sharing the details at the moment though 🤐
Jörg retweeted
Today, together with Jonathan Elkabas, we're releasing EntraGoat - A Deliberately Vulnerable Entra ID Environment.
Your own hands-on Entra lab for identity attack simulation.
Built for red teams, blue teams and identity nerds.
Check it out here👉github.com/semperis/entragoa…
Jörg retweeted
(2025-07-10) Re-Awarded for the 20th Time – MVP Identity & Access And This Year Also PowerShell jorgequestforknowledge.wordp…
Jörg retweeted
Exchange Server Subscription Edition (SE) is now available | Microsoft Community Hub techcommunity.microsoft.com/…
Jörg retweeted
Today's the day! Exchange Server SE and Skype for Business Server SE have both been released!
Blog post announcements:
techcommunity.microsoft.com/…
techcommunity.microsoft.com/…
#MSExchange #Skype4BusinessServer #RTM #Announcement
Jörg retweeted
We just sent out this week's Entra newsletter.
Get the latest at entra.news/p/entra-news-103-…
Jörg retweeted
1/2
1st conf day @ Troopers 2025, in AD/EntraID sec track, delivered my session “Demystifying (M)SAs: Unveiling Best Practices And Security Measures To Reduce Risk And Impact”. Shortly after start room filled up completely. HONORED to have lots of people attending & ask questions
Jörg retweeted
2/2
1st conf day @ Troopers 2025, for the evening I had signed up for some story telling.
“Once upon a time when I fixed an AD domain that had self-detonated!”
@WEareTROOPERS
























