Did you know that LSASS has the ability to execute arbitrary kernel-mode addresses? I wrote a small proof of concept that allows administrators to execute unsigned code in the kernel if LSA Protection is disabled.

github.com/floesen/KExecDD

Hello to all those who do CTF, what do you like/dislike in Forensic challenges?

I just published a blog and tool for the LSA Whisperer work that was presented at the SpecterOps Conference (SOCON) back in March.

If you are interested in getting credentials from LSASS without accessing its memory, check it out!
medium.com/specter-ops-po…

The video on how we hacked Google VRP (Google Bug Hunters) AI Scope and made 50,000$ out of it is out ! 🔥

youtube.com/watch?v=-StKWo…

Thanks a lot to Kévin - Mizu and BitK for the challenge during the FCSC :)

I've made two write ups for 'Twisty Python' and 'monopoly', you can found them here : github.com/W0rty/WU-FCSC2…

Moreover, thanks again to ANSSI the CTF was amazing as every year 🩵

Active Directory - Certificate Services - ADCS Cheatsheet
swisskyrepo.github.io/InternalAllThe…

☁️ Whether it's on premises or in the cloud, a domain is a domain.

💪 Flex your intrusion muscles with Wil and Hugow's training!

➡️ hexacon.fr/trainer/vincen…
📆 30/09-03/10 2024
📍Espace Vinci, Rue des Jeuneurs, Paris

Place purchased 🎟️
See you at #SSTIC 2024 🥳

github.com/Icare1337/Libr…
#BugBounty #bugbountytips #libreoffice

🎉 Announcing DFIR Labs! 🎉

Introducing our DFIR Labs based on real intrusions from our public reports and private threat briefs! Whether you're starting out or looking to deepen your skills, our labs can help.

1/2

Hey ! I didn't found any detailed tutorial to setup an Interactsh self-hosted server from ProjectDiscovery.io, so I built one. Bonus scripts to monitor and log long-running sessions to avoid losing your precious callbacks ;)

blog.doomer.fr/install-config…

Excited to share that I've successfully passed the OSEP (PEN-300) exam from OffSec 🥳

#PEN300 #OSEP #offsec

A seven nation army couldn't hold us back... 💪
Because #HTB is celebrating 7 years of bringing you top #cybersecurity upskilling content! So, how about wishing us happy birthday at #Defcon and #BlackHat US?
#HackTheBox #CyberSecurity #InformationSecurity #Discord

Merci à ecole2600 PHREAKS 2600 de leur confiance ! C’est avec une grande fierté que j’ai pu coacher cette excellente équipe.

4 podiums, 3ème place au classement général, difficile d’espérer mieux !

Forensic 🥇
CTF 🥉
Hardware 🥉
Speedrun 🥈

Merci aux organisateurs !

Très heureux d'avoir terminé premier à l'épreuve de #Forensic 🥇, en plus de notre troisième place au classement général de l’European Cyber Cup ! 🥉

Un grand merci à ecole2600 et Deloitte France pour leur soutien ❤️

GG à GCC-ENSIBS et ESNA de Bretagne pour leurs performances 👏🏼

Les équipes sur le podium pour cette édition de l' #EC2 2024, avec en troisième position :
3⃣ PHREAKS 2600 (422 points)

In two weeks I am teaching Breaching the Cloud at HackSpaceCon at Kennedy Space Center! 🚀🪐🛰️💻
Register here: hackspacecon.com/breaching-the-…

I have one free conference ticket (not training) to giveaway to someone who RTs this. Will randomly pick a winner in a couple days.

Fin du premier jour de l’European Cyber Cup pour l’équipe et le coach (@_nwodtuhs) :
- Première place à l’épreuve de #Forensic
- Deuxième place à l’épreuve de #Hardware 🚀

Stay tuned pour la suite de la compétition demain 👀