Updated Corporate Masks for red team/pentesters looking to get higher cracking rates without needing a 6 figure GPU rig: github.com/golem445/Corporat…
Chris retweeted
Tired of your password rules being half-baked?
The CsP kitchen’s been cooking up something better.
RuleChef serves Markov-seasoned rules that actually make sense.
No more recipe-for-disaster rule sets.
github.com/Cynosureprime/rul…
Chris retweeted
We just posted our 2023 @CrackMeIfYouCan write-up.
blog.cynosureprime.com/2023/…
Chris retweeted
CMIYC 2023 coming soon to DEF CON and an Internet near you! contest-2023.korelogic.com/
In the next couple weeks we'll open preregistration and release test hashes that are equal parts hint and misdirection.
Chris retweeted
#crackthecon starts in about 48 hours! If you have not registered yet better get registered soon. Testing will end tomorrow! Head over to crackthecon.com to register. Cannot wait to see some of you @CypherCon
Chris retweeted
Our KoreLogic's @CrackMeIfYouCan 2021 write-up is live come take a look. blog.cynosureprime.com/2021/…
@hashcat @john_users @defcon
Chris retweeted
Another great @CrackMeIfYouCan and another win for Team Hashcat! @CynoPrime put up quite the fight, well played by all teams. Huge thank you to KoreLogic for hosting the @defcon @PasswordVillage and keeping this contest running for so many years, hopefully with many more to come.
Chris retweeted
🎉We're super excited to publicly release assless-chaps, our super fast MSCHAPv2 cracking tool github.com/sensepost/assless…
Our DEF CON @rfhackers Village talk with @_cablethief & me explaining it is out youtube.com/watch?v=lm7Cuktp…
Our new hashcat modes 27000/27100 have been merged too!
Excited for this years competition! If you want to jump in but not quite ready to battle Cynosureprime, Hashcat or John, there’s good competition in the “Street” league as well
Registration for @CrackMeIfYouCan - the premiere password cracking contest @DEFCON is now open.
contest-2021.korelogic.com/
@PasswordVillage
3070ti hashcat bench, speeds appear a slight improvement over 3070's.
github.com/golem445/benchmar…
Chris retweeted
[New Release] Inveigh 2.0: Rebuilt for C#, cross-platform (Windows, Linux, macOS), new listeners (SMB, LDAP, WebDAV, HTTPS), improved interactive console (tab complete, real time stats). github.com/Kevin-Robertson/I…
Chris retweeted
I also recommend that you never hire an information security employee who has ever worked for a firm that has had a security incident…
… as my company is hiring experienced infosec professionals and it would be a lot easier if other people weren’t trying to hire them too.
Handy tool, trying to understand the love for program logos though
github.com/odedshimon/BruteS…
Chris retweeted
Virtual Infrastructure is often forgotten when it comes to security.
Image from my DEFCON talk this year discussing how virtual Domain Controllers (& thus Active Directory) can be compromised. Many VMWare environments we’ve seen are vulnerable beyond missing/incomplete patches
This Post is from an account that no longer exists. Learn more
Chris retweeted
It has a few more prerequisites, but I finally managed to get a #Zerologon exploit working that doesn't rely on resetting passwords to exploit. Use the printerbug to make DC1 connect to you, then with lots of magic relay that to DC2 directly to DRSUAPI to DCSync 😁
