Traveling to /ˈziːf-kɒn/ next week for some great talks and of course, the pirate ship!😍

New tuto! Weaponize Mythic Apollo using MacroPack and ShellcodePack. Tested on EDRs of course. blog.balliskit.com/tutorial-mythi… #redteam

Today we're announcing a fundamental shift in how DeceptIQ delivers cyber deception. No more security theater. After years of red teaming and watching security teams struggle with implementing existing deception products, we've made a decision: we're moving from product to

Received the news today that my talk "Advanced Active Directory to Entra ID lateral movement techniques" was also accepted for DEF CON 🎉 hope to see everyone there!

Researchers at @Proofpoint expose threat actors’ attempt to hijack thousands of EntraID user accounts across almost 100 cloud tenants by leveraging TeamFiltration, a red teaming framework used by network defenders. brnw.ch/21wTk3G

Sooooooooooooooo 😶‍🌫️

Thank you so much to /ˈziːf-kɒn/ and its organizers for an awesome experience! Lee Chagolla-Christensen and I had a blast talking about the new Nemesis 2.0 rewrite (code live at github.com/SpecterOps/Nem… !) and hope to be back next year #x33fcon

Really looking forward to giving Nemesis a go after this re-focused rewrite from the ground up. Amazing stage delivery👏👏

Had an absolute blast at X33FCON last week, which is somewhat documented in today's video! Always great seeing familiar and new faces, Kuba Gretzky Oddvar Moe ☠️ Brandon getting some love in this one 😅 youtu.be/zajKNTLpckY

Well, it happened. The company I worked at for 6 years will be closing and thus I got laid off. This doesn't affect Octopwn operations in any negative ways, but I'm actively looking for a new day job. If someone has something please DM me. Retweets are appreciated.

The incredibly talented gentleman behind pypykatz, minikerberos, msldap, and jackdaw (to name a few) is currently looking for a new opportunity🚒retweet for exposure, best of luck my man!🫶

New video out, looking at freshly released Nemesis 2.0 by non other then Will Schroeder and Lee Chagolla-Christensen 🥵No doubt this is going to bring next-level efficiency and offload one of the most tedious manual workloads an operator can face! youtu.be/5P9N1OQTUqM

If you missed my CNBC interview yesterday, here it is! youtube.com/watch?v=ssOo6L…

I'm trying to push further with Impacket then I have before and am running into a wall. If you appreciate my opensource work and want to help me out I could use some community help figuring how what I've missed in my MS-EVEN6 method / struct definition github.com/fortra/impacke…

Here is a reminder that a Powerful DotNET obfuscator is available in MacroPack. Assembly level obfuscation (or course). With the latest 2.7.5 it supports all your favorite #redteam DotNET tools! And tested on major EDRs :) blog.balliskit.com/obfuscation-an…

Since several people already asked: the slides from Fabian Bader and myself for TROOPERS Conference are available! "Finding Entra ID CA bypasses-the structured way". We talked about FOCI, BroCI, CA bypasses, scopes and getting tons of tokens. Check it at dirkjanm.io/talks/

Happy Friday! Lee Chagolla-Christensen and I are happy to announce that we have cut the release for Nemesis 2.0.0 - check out the CHANGELOG for a (brief) summary of changes, and dive into our new docs for more detail! We're extremely proud and excited for this release github.com/SpecterOps/Nem…

Fresh video out on a new ClickFix variation, named FileFix by mr.d0x 💻 youtube.com/watch?v=k2jrOE…