😈 [ nas_bench, Nasreddine Bencherchali ]

In addition to the documented "-e/--exec" flag in #lolbas about the "wsl.exe" binary (https://t.co/OrgJ7c7o9N). We can also use the "--system" flag to run Linux (as root) /Windows commands.

wsl --system [Command]

🔗 https://lolbas-project.github.io/lolbas/OtherMSBinaries/Wsl/

🐥 [ tweet ]

😈 [ Flangvik, Melvin langvik ]

👀👀 @_RastaMouse https://t.co/QIeLHNngVz

🔗 https://training.zeropointsecurity.co.uk/courses/red-team-ops-II

🐥 [ tweet ]

😈 [ reverseame, reverseame ]

The curious case of mavinject.exe https://t.co/UcUjZ2wsFR

🔗 https://fourcore.io/blogs/mavinject-curious-process-injection

🐥 [ tweet ]

😈 [ elkement, elkement ]

One more post about Microsoft's recent security updates - re changes to Kerberos and the new certificate extension containing the requester's SID: https://t.co/TbACZaFARl

🔗 https://elkement.blog/2022/06/13/defused-that-san-flag/

🐥 [ tweet ]

😈 [ 0gtweet, Grzegorz Tworek ]

Looks like the only purpose of the undocumented "/debug" parameter for qwinsta.exe is to mess with the output in a way making it useless for bad actors 🙃

🐥 [ tweet ]

😈 [ ORCA10K, ORCA ]

just published "RelocAlloc", a poc to allocate memory for your shellcode, using .reloc section(s), avoiding VirtualAlloc and others
https://t.co/9UNT0aDnJJ

🔗 https://gitlab.com/ORCA666/relocalloc

🐥 [ tweet ]

😈 [ x86matthew, x86matthew ]

ProcEnvInjection - Remote code injection by abusing process environment strings in CreateProcess.

Another method of injecting code into a remote process without using WriteProcessMemory. 🙂

https://t.co/PxaiiFVjV8

🔗 https://www.x86matthew.com/view_post?id=proc_env_injection

🐥 [ tweet ]

😈 [ DebugPrivilege, • ]

The right answer:
I've seen lots of incomplete answers, but only a few people got it right. Also, no. We technically don't even need SeDebugPrivilege :)

🐥 [ tweet ][ quote ]

😈 [ PortSwiggerRes, PortSwigger Research ]

Bypassing CSP with dangling iframes by @garethheyes

https://t.co/G3yPQQfYR2

🔗 https://portswigger.net/research/bypassing-csp-with-dangling-iframes

🐥 [ tweet ]

😈 [ hasherezade, hasherezade ]

Updated #mal_unpack (v0.9.5) is ready! check it out: https://t.co/OCcdgd5AiO // (#PEsieve-based)

🔗 https://github.com/hasherezade/mal_unpack/releases

🐥 [ tweet ]

😈 [ Tyl0us, Matt Eidelberg ]

Small update to ScareCrow. Shoutout to @mariuszbit for the feature request. Check it out: https://t.co/VIQVnKd2tJ
#netsec #redteam #EDR #evasion

🔗 https://github.com/optiv/ScareCrow

🐥 [ tweet ]

😈 [ tiraniddo, James Forshaw ]

The reason I didn't open my RCG bug last month was because MS didn't fix it correctly. As I found out before the 30 day patch soak time was up they got the remainder of the 90 days to really fix it. I guess we'll find out if they did or not soon enough😁https://t.co/YxbpQTR7La

🔗 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30150

🐥 [ tweet ]

😈 [ mariuszbit, Mariusz Banach ]

🔥Working hard on a public release of my Malware Dev CI/CD toolkit

☢️ProtectMyTooling - Multi-Packer, supporting 23+ obfuscators
☢️RedBackdoorer - PE shellcode injection via 6 techniques
☢️RedWatermarker - IOC injector for implants tracking

Already available to my sponsors 😁✨

🐥 [ tweet ]

😈 [ 0gtweet, Grzegorz Tworek ]

A new tool has arrived! 😎
Somewhat like netstat, but with timestamps for connections!⏱
The C source code, and the compiled exe, as usual - https://t.co/dz7BOPzOpW

🔗 https://github.com/gtworek/PSBits/tree/master/NetstatWithTimestamps

🐥 [ tweet ]

😈 [ mubix, Rob Fuller ]

Internet Explorer EOL is today. We never really got along but that doesn’t mean I don’t respect the service you provided all red teamers as an initial infection vector for 27 years, good bye. #IEEoL

🐥 [ tweet ]

😈 [ DirectoryRanger, DirectoryRanger ]

Post Compromise Active Directory Checklist
https://t.co/e85wblANnW

🔗 https://www.pwndefend.com/2021/09/15/post-compromise-active-directory-checklist/

🐥 [ tweet ]

😈 [ SEKTOR7net, SEKTOR7 Institute ]

Hollowing a shell process to run a shellcode, all with just a 'dd'. Introducing DDExec by arget13

https://t.co/njGfKGSUmx

🔗 https://github.com/arget13/DDexec

🐥 [ tweet ]

😈 [ FuzzySec, b33f | 🇺🇦✊ ]

This is great stuff! https://t.co/9hWHgRDu65

🔗 https://zeronetworks.com/blog/stopping_lateral_movement_via_the_rpc_firewall/

🐥 [ tweet ][ quote ]