VBA and exports parsing without GetProcAddress() or NtQueryInformationProcess(), by X-C3LL #redteam adepts.of0x.cc/vba-exports-ru…

A naughty owl in Las Vegas 👀

There will be owl stickers too 👀

Since one of the bugs has been fixed, it's time to confess: I've been tracking and pwning Red Teams and script kiddies using EvilNoVNC and similar shit based on NoVNC and "Browser in Browser".

I already made a post in Sept 2022 explaining why this technique is not mature enough to be used in real environments, and that the current tools were easily jailbreak-able, allowing anyone to get a shell. adepts.of0x.cc/novnc-phishing/

We are at that *secret place* 🌴🔴🌴. If you want stickers, let us know. Or just approach the guy with the Adepts T-shirt 🦉🦉

Woot Woot 🦉🦉🦉

H(owl) h(owl) h(owl)! We still alive and with holidays what means we have time to publish stuff! Check our last post by X-C3LL about lateral movements. Developers are juicy targets: DCOM & Visual Studio => adepts.of0x.cc/visual-studio-…

Dear Fellowlship, new post in our blog. This time X-C3LL decided to start the year talking about VBA & macros (we would say "enjoy it", but is VBA so... You know...): VBA: having fun with macros, overwritten pointers & R/W/X memory adepts.of0x.cc/vba-hijack-poi…

Dear Fell(owl)ship, we are experiencing a miracle. Two posts in our blog in the same month! This time X-C3LL's homily is about a product he pwned last xmas. A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108) adepts.of0x.cc/gtbcc-pwned/

Spotted an owl reference at OffensiveCon 🥳🦉

We are alive! We hope you like our new design for 2024 🦉 Thanks Heksiah !

It's always a pleasure to work with you 😊

🦉

You can find my slides for "Offensive VBA" talk here github.com/X-C3LL/congres…

Dear Fellowlship, Our owl X-C3LL showed during the EuskalHack VII conclave a technique to achieve stability when overwriting the R/W/X memory in VBA. Read this addendum in our homily: adepts.of0x.cc/vba-rwx-addend…

We hope our Fell(owl)ship is enjoying the summer! Time for beach/pool and a quick read of our new post by X-C3LL: Mixing watering hole attacks with history leak via CSS adepts.of0x.cc/css-history-le…

Our owl Mario just published a small VM to generate application-layer protocols. Define your protocol from scratch with opcodes! github.com/praetorian-inc…

New doormat 💜