Monday's fuck up - This Time great Citrix - U.S. CISA adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog
securityaffairs.com/199891/hacki... #redteam #citrix #real #attack #cisa #exploit #0day #critical
@toxy4ny.bsky.social
@toxy4ny.bsky.social@toxy4ny.bsky.social
@r1cksec.bsky.socialInjectSetConsole performs process code injection by leveraging a Windows named pipe.
@r1cksec.bsky.socialA single-pass Active Directory enumerator for an anonymous (null) session, using the \samr and \lsarpc named pipes. No credentials required.
@fallenangelc2.bsky.socialAnd special thanks to @5pider.net for recommending this technique to me
Refs: github.com/susMdT/LoudS...
dtsec.us/2023-09-15-S...
#redteam #C2 #windows #EDR #CRTL
@offseq.bsky.socialOffSeq is an European offensive security company. Pentesting, red teaming, OT/ICS security and NIS2/DORA work across the EU.
Here we post vulnerability research, honeypot field reports and open-source tools. Open to collaboration.
@jaceblog.bsky.socialWhat if an AI attack does not target a weakness directly?
What if it changes the conditions under which the next interaction occurs?
The interesting part is not the individual prompt. It is what happens when the interaction itself becomes part of the attack surface.
@r1cksec.bsky.socialDrop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Offline, CLI + web UI.
@factionsecurity.comWe just released some new pentesting reporting features into OWASP Faction!
#pentest #appsec #owasp #redteam #cybersecurity #pentesttools
@r1cksec.bsky.socialTool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust.
@alcarciandamalga.bsky.socialHackeed Martin MK1 - Producto Bajo Demanda:
La máquina de pentesting remota sobre Raspberry Pi 4.
Sale a internet por su propia SIM 4G LTE. Entras por VPN desde donde estés (probado con @tailscale.com ). UPS con 2 baterias 18650 ; y RTC: hackeed.es/on-demand
@toxy4ny.bsky.social@toxy4ny.bsky.social@r1cksec.bsky.socialOneDrive as a covert C2 transport for Cobalt Strike
@atomicedge.bsky.socialCVE-2025-39399 license-envato (CVSS Score 9.8) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept
@atomicedge.bsky.socialCVE-2023-41954 wp-user-avatar (CVSS Score 7.3) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept
@atomicedge.bsky.socialCVE-2023-44150 wp-user-avatar (CVSS Score 5.3) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept
@atomicedge.bsky.socialCVE-2024-11083 wp-user-avatar (CVSS Score 5.3) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept
L'incendie est éteint, mais vos systèmes tiendront-ils la prochaine attaque ? Place au Red Team.
Avec Thomas Veynachter, Dominique Derrier, Cédric Boivin, Steve Lavoie et Mickael Nadeau.
#Cybersécurité #Pentest #RedTeam
🎧 Web: bit.ly/3UKXkLP
🎧 Spotify: bit.ly/4xiGjWU
🎧 YouTube: bit.ly/4A7Ovff
