Tweetovi
- Tweetovi, trenutna stranica.
- Tweetovi i odgovori
- Medijski sadržaj
Blokirali ste korisnika/cu @HackAndDo
Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @HackAndDo
-
Prikvačeni tweet
Do you struggle to understand
#Kerberos in#ActiveDirectory environment ? This new article may help clarify things by simply explaining how Kerberos works. It is the first of a serie of posts about attacking Active Directory. Stay tuned
https://en.hackndo.com/kerberos/ Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Pixis proslijedio/la je Tweet
Really glad to finally get a blogpost out about this. Hopefully this is useful and gives Red Teamers ideas on how to use the BYOI concept in their own payloads. If anyone is interested in a few more follow up posts about this will gladly oblige :)https://www.blackhillsinfosec.com/red-teamers-cookbook-byoi-bring-your-own-interpreter/ …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
J'ai eu l'honneur de faire un
#TEDx à Limoges ce 30 janvier sous le joug de l'INVISIBLE. Ma présentation abordait la simplicité apparente des technologies derrière laquelle se cache une invisible complexité que les hackers explorent. Merci@TEDxLimoges !#videoSoonpic.twitter.com/zT6F6GdWZ5
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Pixis proslijedio/la je Tweet
Burp Suite Pro / Community 2020.1 released, with major enhancements to HTTP message editor and more, https://portswigger.net/burp/releases/professional-community-2020-1 …pic.twitter.com/Y29Wtco6vg
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Pixis proslijedio/la je Tweet
#PingCastle 2.8.0.0 released !!! https://pingcastle.com/download/ 4 clicks and 2 <enter>, that what's between you and the hard truth of your AD security. Example of report: https://pingcastle.com/PingCastleFiles/ad_hc_test.mysmartlogon.com.html … github: https://github.com/vletoux/pingcastle … Changelog: https://raw.githubusercontent.com/vletoux/pingcastle/2.8.0.0/changelog.txt …pic.twitter.com/1oQXuIJcdiHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Pixis proslijedio/la je Tweet
RSA's Lee Kirkpatrick continues his
#ProfilingAttackers series on#RSALink with a new blog post on using the RSA#NetWitness Platform to detect credential harvesting performed by the new#lsassy tool developed by@HackAndDo. https://rsa.im/37uI7AU#SIEM#DFIR#ThreatDetectionpic.twitter.com/ofj5rwgdJ6
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Pixis proslijedio/la je Tweet
Pushed a new Rubeus release after getting some additional feedback from our most recent AT:RTO students. The full changes are detailed here https://github.com/GhostPack/Rubeus/blob/master/CHANGELOG.md#150---2020-01-31 … . To highlight a few new features- "/nowrap" globally prevents base64 blobs from line-wrapping, (1/4)
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Really
@urssaf ? Ça sent le bon vieux mainframe derrière tout ça.
#weakpasswordpolicypic.twitter.com/GKlVq6Xsq9
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Pixis proslijedio/la je Tweet
Join me and
@CptJesus on Tuesday, February 11th as we unveil#BloodHound 3.0! We will demo new attack primitives, performance improvements, and changes in the GUI. Register for the webinar here (recording available afterwards): https://specterops.zoom.us/webinar/register/WN_Ak7pi_zxSM28HBIl5RIVWw …pic.twitter.com/pP4BxRE0tN
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Pixis proslijedio/la je Tweet
Bonjour à tous ! Nous devions vous annoncer une bonne nouvelle pour commencer l'année, les meets reviennent :D Voici le lien des inscriptions avec les informations nécessaires :) https://framadate.org/gieNLQ41pnJlmVfs …pic.twitter.com/aGPy2R8RJ1
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Pixis proslijedio/la je Tweet
We have just pushed some *big* updates to Ghostwriter's master branch that I think you'll like. We've got WYSIWIG editors, autocomplete, new reports, and more! Check it out:https://posts.specterops.io/ghostwriter-2020-feature-update-1cb8348f48a3 …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Pixis proslijedio/la je TweetHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Woh, being tweeted by
@DirectoryRanger, that's a first !
This post about #Kerberos tries to explain how does Kerberos work in#ActiveDirectory in a simple and concise-ish way. More articles very, very soon !
https://twitter.com/DirectoryRanger/status/1221929636185169921 …Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Pixis proslijedio/la je Tweet
Kali 2020.1 is up for download! Big changes yet again, with non-root user by default, a single installer image for multiple desktop enviroments, updates to themes, and more! Not to mention Rootless NetHunter! https://www.kali.org/releases/kali-linux-2020-1-release/ …pic.twitter.com/TkyPisbEQu
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Pixis proslijedio/la je Tweet
New blog (and tool): Attacking Azure, Azure AD, and Introducing PowerZurehttps://posts.specterops.io/attacking-azure-azure-ad-and-introducing-powerzure-ca70b330511a …
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Pixis proslijedio/la je Tweet
Some study notes on LSASS hooking for harvesting interactive logon credentials. https://ired.team/offensive-security/credential-access-and-credential-dumping/intercepting-logon-credentials-by-hooking-msv1_0-spacceptcredentials … Thanks to
@_xpn_ for his inspiring posts about mimikatz.Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Pixis proslijedio/la je Tweet
Quickly identify users / groups / password policy of the domain with prettyloot after dumping domain info using ntlmrelayx ! https://github.com/mpgn/prettyloot The script reads all files from the loot directory and prints information like a classic enum4linux output
https://twitter.com/ditrizna/status/1103964505510416384 …pic.twitter.com/H52izvze1Z
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Pixis proslijedio/la je Tweet
Starting to put together a Linux Privesc Video. Can anyone spot something non-network that I'm missing? - Recon (linPEAS/LinEnum) - Sudo - Permission Overview (file writes - sshKey/cron) - SetUID - Kernel - Cron - Network [mysql, postgres, erlang cookie (couchDb)]
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Pixis proslijedio/la je Tweet
Et booooom ! Un nouveau chall sur NC ! Une petite forensics by Lovenunu :) Ça occupe pour le vendredi au boulot !https://www.newbiecontest.org/index.php?page=epreuve&no=327 …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
#lsassy v2 is out
Dump credentials on multiple hosts
New dumping method using #dumpert (@OutflankNL) thanks to@Blurbdust
Can be used as a #library in other python project
Fully documented wiki !
Needs some testing, open issues if need be
https://github.com/Hackndo/lsassy Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.
