Hello Twitter! #myfirstTweet

New blog! Abusing Exchange: One API call away from Domain Admin. From any user with a mailbox to Domain Admin. Probably affects the majority of orgs using AD and Exchange. dirkjanm.io/abusing-exchan…

Real World CTF challenge "flaglab" - Two CVEs were combined to achieve full remote code execution on GitLab 11.4.7 Thanks to Patreon/YT Members you can not only watch the video, but alternatively read the write-up here: liveoverflow.com/gitlab-11-4-7-…

Windows 10 1903 Gets Rid of Password Expiration Policies bleepingcomputer.com/news/microsoft…

Just got the news that my talk about Azure security has been accepted for #DEFCON 😁😁😁 super happy right now and very excited to share my latest research! 😀

I am looking for a senior software developer / architect in Jona Switzerland. We need a skilled person for the new Hacking-Lab 2.0 platform and beyond that wants both, agile software development and leadership. bit.ly/join-compass-s…

Here is my biggest article so far! It talks about NTLM Relay, in depth. Relay, session & authentication signing, channel binding, we'll unravel all mysteries behind these words. I hope it can be useful for you, because it was an amazing journey for me 🙃 en.hackndo.com/ntlm-relay/

NTLM Relay over RPC again! Our analyst Sylvain Heiniger Sylvain Heiniger could abuse the DCOM service, but Dlive had already reported it to m.ali sürücü. blog.compass-security.com/2021/08/relayi…

Bypass Defender AV static detection: If you name a malicious file DumpStack.log Defender doesn't scan it.

FYI:

HACKvent2022 awaits! At Dec. 1st 2022, 00:00 CET the first challenge will be released. Ready for sleep-deprivation? 😉 Enter the free competition here: competition.hacking-lab.com Leaderboard: ranking.hackvent.hacking-lab.com #HV22 #ctf