New release of github.com/zblurx/dploot (dump remotely credentials, vaults, certificates, browser and more): - Refacto: now available as an library that you can import in python code - Collect all wifi profiles - Added -quiet option - Kerberos authentication - Fix bugs

Direct RPC calls in BOFs! Very nice blog. Threat Hunters should consider learning RPCFirewall to collect telemetry from the table hosts being manipulated. trustedsec.com/blog/rpc-progr…

Offensive Windows IPC Internals, by Carsten Part 1: Named Pipes csandker.io/2021/01/10/Off… Part 2: RPC csandker.io/2021/02/21/Off… Part 3: ALPC csandker.io/2022/05/24/Off…

Curious about the inner workings of Windows Authentication APIs? Kiwids's new blog post is your guide to demystifying the magic hidden within these APIs, empowering you to unravel the RPC implementations using IDA and the power of static analysis! ghst.ly/46LIm94

Cybordelics - Aventures of Dama. [Harthouse]. 1993. youtu.be/2ZTBrrS9GNA?fe…

“It’s almost like people are making more money teaching hacking than actually doing it.” -- assume_breach link.medium.com/XLQADjq6HGb ^ 100% true statement, and most don't teach good habits, they teach run and gun cowboy BS.

Microsoft just open-sourced DOS 4 hanselman.com/blog/open-sour… (as well a release of beta binaries, disk images, and PDFs from ray ozzie's archives!) (but who did the PR?!)

Taking a cue from Dlive and Andrea Pierini's work on inducing authentication out of remote DCOM I thought I'd quickly write up a post about getting Kerberos authentication out of the initial OXID resolving call. tiraniddo.dev/2024/04/relayi…

youtu.be/LDUF-wd_aqE?fe…

I've published a blog post about engineering learnings from the CrowdStrike global outage. I break down what went wrong, and what engineering practices would have prevented this incident. mazinahmed.net/blog/crowdstri…

[Tool & Blog release] - smbtakeover, a technique to unbind/rebind port 445 without loading a driver, loading a module into LSASS, or rebooting the target machine. The goal is to ease exploitation of targeted NTLM relay primitives while operating over C2. Github repo is linked at

I am excited to share with you my latest research - "DCOM Upload & Execute" An advanced lateral movement technique to upload and execute custom payloads on remote targets Forget about PSEXEC and dive in! deepinstinct.com/blog/forget-ps… github.com/deepinstinct/D…

😳😱 SITUATION INEXPLICABLE A SAINT-ETIENNE ! Tolisso se fait plier la jambe par Stassin, Letexier sort d'abord le rouge... avant de se déjuger et ne mettre finalement que le carton jaune. 😳 💔 Tolisso sort en larmes et en civière, devant lui.

🚨📸 La notification LUNAIRE apparue sur l’écran de la VAR de François Letexier lors de l’annulation du rouge de Lucas Stassin. 😳😳 (crédit photo : le V) #ASSEOL #derby #Ligue1 #TeamOL

Je n’ai même plus les mots… Ces personnes ont eu une formation, obtenu des agrégations et ont un salaire. Tout ça pour nous pondre cette magnifique vidéo. Non franchement bravo. 👏 #TeamOL #Lyon

Automating MS-RPC vulnerability research incendium.rocks/posts/Automati…

youtube.com/watch?v=lIoZbZ…

Hello, friends! We started writing a series of articles about Impacket. This will be useful if you have long wanted to understand this tool and create your own tools for Coerce, Lateral Movement and other RPC Abuse :) medium.com/p/impacket-dev…

youtu.be/TDujPRi3q_8 " ça glisse " 😭😱