Solid Monday advice

Building a new web app? Check out our blog series on the top 5 security considerations to keep your app safe from cyber threats.

Read more: hubs.la/Q02tY8T80

#webapp #ProfessionallyEvil #SecureIdeas #blogseries

Just pushed an update to dredge to fix some bugs:

github.com/grahamhelton/d…

Somewhat related... Does anyone know of a wordlist of common terms that might prefix a credentials? IE: a wordlist that contains things like:
- password=
- key=
- token=

etc

Next question.

“How many of you all have Android phones?”

This is one of the better uses for LLM by a soc

Gpt isn't going to help (much) with log analysis.

7-Year-Old 0-Day in Microsoft Office Exploited to Drop Cobalt Strike buff.ly/3UBSJsX

7 Days... 72 backers till goal!

I made this last weekend to experiment w/ building an app end to end on LLMs: vibecheck.market

It's like Wirecutter, but uses an LLM to recommend product choices based on reddit conversations and reviews, so you don't have to spend 20-30min reading reddit

My experience:…

On location with my friend Mick Douglas 🇺🇦🌻

'Microsoft Teams, an essential tool for corporate communication, contains features and configurations that are susceptible to abuse...'
Learn more: blackhillsinfosec.com/wishing-webhoo…

Wishing: Webhook Phishing in Teams
by: Matthew Eidelberg
Published: 3/14/2024

Don’t say this enough.

But thanks!

Physical assessments are just adult hide and seek

Dropping a new initial access technique via RDP that I dubbed 'Rogue RDP'. Use malicious .RDP files to bypass email/servers/security gateways and then run code to binary plant/exfil from your own RDP server, blinding EDR. Bonus: Target runs HyperV? RCE! blackhillsinfosec.com/rogue-rdp-revi…

Just released a song to help get you hyped for hacking the planet today. Hope you enjoy it! 🤘

Check out Beau Bullock and Steve Borosh 's talk, 'GraphRunner: A Post-Exploitation Toolset for M365,' from WWHF - Deadwood 2023!

Grab your tickets for WWHF - Deadwood 2024! --> wildwesthackinfest.com/conference/reg…

youtube.com/watch?v=IDZzqg…

THIS. IS. AWESOME!

Get decks of Backdoors & Breaches, including the Consultants in the Expansion Deck at -- spearphish-general-store.myshopify.com/collections/ba…

**NEW** BHIS | Blog
Do you want to learn to set up your own Active Directory lab?

Deploy an Active Directory Lab Within Minutes
by: Alyssa Snow
Published: 4/25/2024
Learn more: blackhillsinfosec.com/deploy-an-acti…

Link fixed -- blackhillsinfosec.zoom.us/ze/hub/stadium

Rogue RDP – Revisiting Initial Access Methods, by Mike Felch (Stay Ready)
blackhillsinfosec.com/rogue-rdp-revi…

What!??! This looks awesome