stumblebot retweeted
A few hours left - leaving it open until the morning on West Coast. Only 3 winners 🤭. Congrats @malware_owl and @_dru1d !!
Player weaponized_autism (@droogie1xp) has won the Phrack CTF!
CTF is 2 binary exploitation challenges containing realistic vulns across 2 different targets. It began on Aug 7 and remained unsolved until now. So 1337 😎
Keep playing - all who finish will get a special prize!
ALT Player weaponized_autism won the Phrack CTF
stumblebot retweeted
hashcat v7.0.0 released!
After nearly 3 years of development and over 900,000 lines of code changed, this is easily the largest release we have ever had.
Detailed writeup is available here: hashcat.net/forum/thread-133…
stumblebot retweeted
Had some fun with PDQ deploy/inventory credential decryption and wrote about it here: unsigned-sh0rt.net/posts/pdq… thanks to @_dru1d for write a BOF out of the POC
tl;dr get admin on PDQ box, decrypt privileged creds
stumblebot retweeted
tables.blurbdust.pw/netntlmv…
It might be a bit rocky for the next couple days as I work out a couple issues with magnet links and the self-hosted tracker but its up and working
stumblebot retweeted
I did not approve of the timing of this release but here it is. Blog coming soon.
github.com/ly4k/Certipy/pull…
stumblebot retweeted
CMIYC 2024 has finished! HashMob won first place in Pro:
infosec.exchange/@CrackMeIfY…
stumblebot retweeted
I highly recommend Joe's courses. They're a great mix of CS/EE degree program foundations/theory and "I need to check that when I get home" practical.
Even if you're not particularly into the hardware side of things, learning about it changes the way you think about software.
Hey!
Early registration discounts for @BlackHatEvents USA end Friday, going up $300.
All 4 Applied Physical Attacks courses will be offered, on-site and in-person this year:
ALT a blue mat with a black zippered pouch, circuitboards, wires, a microscope, and a wifi router on top
stumblebot retweeted
Did you know Entra stores LAPS password history? :)
The Entra/Intune portal only shows the most recent one, so if you happen to do a lot of snapshots/reverts for testing like I do, the below command will show you all passwords and when they changed
$name is device name
$name = 'abc'
(Get-MgDirectoryDeviceLocalCredential -deviceLocalCredentialInfoId (Get-MgDevice -Filter "DisplayName eq '$name'").DeviceId -Property credentials).credentials | % { $_.BackupDateTime,[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String($_.PasswordBase64)) }
stumblebot retweeted
New blog: Lateral movement and on-prem NT hash dumping with Microsoft Entra Temporary Access Passes.
Some tips and tricks on abusing TAPs for Windows Hello persistence and NT hash recovery over Cloud Kerberos Trust. dirkjanm.io/lateral-movement…
stumblebot retweeted
Here's the biggest solutions to all my shenanigans:
Require signing - for SMB and LDAP
Don't have unsupported OS's
Run Certipy in your environment and consult the SpecterOps ADCS whitepaper for solutions
Disable the NAA accounts and use Enhanced HTTPS
Go through all the Misconfiguration Manager repo and apply solutions where necessary
Restrict ability to add computer accounts to admins
Crawl your own shares with Snaffler
Check your GPO permissions to make sure users can't change stuff - same with logon scripts
Cease using deprecated protocols - I love'em!
Increase password length for users, despite what NIST says. NIST is wrong :P
Firewall and VLANs all the things
Practice least privilege on shares
stumblebot retweeted
Active Directory hardening blog post series, like a boss, by Jerry Devore. Posting this so I can reference it later!
Disabling NTLMv1 techcommunity.microsoft.com/…
Removing SMBv1 techcommunity.microsoft.com/…
Enforcing LDAP Signing -techcommunity.microsoft.com/…
Enforcing AES for Kerberos techcommunity.microsoft.com/…
stumblebot retweeted
Oh yeah I forgot to mention the reason I was failing at highschool is I was addicted to editing Wikipedia I’m still a top-1000 account and built a part of some tooling still in use today.
I failed school because I just read the encyclopedia instead. My life is so fucking dumb.
stumblebot retweeted
Here’s a short write-up covering some research Ian Odette (@wikibinge) and I conducted so that our team would have a documented method for cracking Citrix NetScaler system user passwords.
github.com/CDW-OffSec/NetSca…
stumblebot retweeted
The FEYNMAN technique of learning:
STEP 1 - Pick and study a topic
STEP 2 - Explain the topic to someone, like a child, who is unfamiliar with the topic
STEP 3 - Identify any gaps in your understanding
STEP 4 - Review and Simplify! 🧠
stumblebot retweeted
I just published a write-up where I abused a known vulnerable driver found in a DFIR product. blog.dru1d.ninja/windows-dri…