Red Teamer, this is the neglected home of my security ramblings. Sometimes there's useful stuff.
South East, England
- Tweets 624
- Following 511
- Followers 314
- Likes 1,343
tzar retweeted
What a week at @OutflankNL!
> Release: Cobalt Strike Research Labs - research form the CS R&D team straight to OST customers
> Release: InfraRed - automated deployment of RT infra
> Nifty AI evasion research from @kyleavery added to OST
> @fortraofficial acquires @_ZeroPointSec
4
10
74
3,447
tzar retweeted
Finally releasing Sekken-Enum, an ADWS enumeration BOF we've been using internally for a while now.
Based on the research from SOAPHound/SoaPy moving away from relying on .NET execution or proxying.
Output works with BOFHound for Bloodhound ingesting.
github.com/Nomad0x7/sekken-e…
1
35
136
10,247
Password cracking with vast.ai made easier :) Enjoy.
github.com/d-sec-net/VPK
1
1
13
808
tzar retweeted
My hot take on AI 🌶️. It's less about efficincy and more about scale.
byt3bl33d3r.substack.com/p/a…
2
15
44
6,879
Another awesome bit of linux Maldev research work from @k0zmer
single-threaded event driven sleep obfuscation poc for linux utilizing file descriptors, inspired by "pendulum" from @kyleavery
github.com/kozmer/silentpuls…
7
383
Nice new feature incoming for those RT's out there using Tailscale for inf.
tailscale.com/kb/1226/tailne…
This change imo, addresses the what if on tail-scale being compromised. Cant really see any reason for headscale in prod if this is correctly rolled out now?
2
5
1,412
Looks sick, gui and automate all the things :)
I know AI isn’t for everyone, but I’ve been tinkering with it to make my engagement process a bit easier.
I built a small tool inspired by @dsec_net’s Red Commander demos that lets you plug in your API keys (Mailgun/SendGrid, GoDaddy/Namecheap) and handles the work for you.
240
We've been putting these to good use lately on some ops.
github.com/kozmer/aad-bofs
Keep an eye on future updates from @k0zmer.
#redteam
25
95
5,213
tzar retweeted
I'm calling it. Security has been solved.
“Microsoft Defender XDR demonstrates 100% detection coverage across all cyberattack stages in the 2024 MITRE ATT&CK® Evaluations”
microsoft.com/en-us/security…
5
3
57
4,510
tzar retweeted
Excited to share that the @malcrove Red Team just dropped new blog and new tool SeamlessPass!
utilizing Microsoft’s Seamless SSO feature to acquire access tokens for Microsoft 365 services by leveraging on-premises Active Directory Kerberos tickets
malcrove.com/seamlesspass-le…
2
54
159
19,038
tzar retweeted
I haven't posted anything about Havoc in a while so imma share something I have been working on. Wrote a custom VM/Interpreter (based on the RISC-V instruction set) to execute exploits and other arbitrary code.
The client is now fully extendable and scriptable via the Python API
28
76
533
71,607
One persons outage, is another persons OSINT op 😂
11
462
My talk on automating red team inf is out!
There is a slight change to the release schedule mentioned in the talk. The API poc will be coming soon, but there have been some delays. Keep an eye out.
Thanks for having me #x33fcon ! Looking forward to the next one!
4
23
88
7,349
Linux symbol obfuscation using `dl_iterate_phdr`. Great bit of research and blog from @k0zmer
bulletproof.co.uk/blog/tech-…
2
5
185
tzar retweeted
I can make you click a phishing link. Want to know how? Just click this link and I will teach you ;) Don't worry. This is not a test. Nobody will know. Just do it: posts.specterops.io/i-will-m…
18
49
4,955