Bypass Windows protection mechanisms & Playing with OffensiveNim
🗣S3cur3Th1sSh1t

Good writeup! There are things in here I know a lot of companies would want to take a look at for their own security.
👤PwnistryCR

Java strikes again lol
👤cluberti

This is a great explanation. Really great work so thank you!
👤flani00


🎖@malwr

Monitoring with PowerShell: Monitoring Storage Sense
Hi all,

First off; I wish you all the best for the coming year. May it be filled with a 100% increase in MRR, no security incidents and lot's of easy clients.

As the year is ending I figured to release some blogs I still had waiting, this one is about StorageSense. Storage Sense is a sort of automated disk cleanup that works a lot more efficient than the standard disk cleanup. The blog can be found here https://www.cyberdrain.com/monitoring-with-powershell-monitoring-storage-sense-settings/.

Best wishes to you all! :)
🗣Lime-TeGek

I currently deploy storage sense settings via GPO but I’ve been working on ways to monitor this and other things that probably require impersonation. Maybe even something older like like folder redirection status.

I’m a little concerned about deploying something like this via RMM and being dependent package repo. (Both having the module and taking supply chain into account)
Is there anyway repackage a module like this into a single script?
👤mspit

2 two many doors. Nice ride.
👤Gatorvw

This is great. Thanks!
👤pinncomp


🎖@malwr

Ways to practice Windows PrivEsc
Hello community,

I am not really good (awful to be honest) with windows privilege escalation, and i am looking for resources to practice it. Are there any VMs that can be downloaded for that purpose?

Thanks in advance.

Happy hacking :)
🗣sakas4

Consider looking into the CRTP cert from Pen tester academy. I am currently working on this cert. there are many ways to escalate privileges locally on a windows machine but this cert focuses on NOT using exploits in order to escalate privileges in an enterprise network.
👤Redteamer1995

I am huge fan and admirer of Vulnhub myself but HTB is a bit more challenging and it makes your mind think like in a different way.
Vulnhub in general is easier than HTB. So, giving HTB a shot is not a bad idea.
👤skinny3l3phant

VMs that can be downloaded for that purpose?

HTB VIP or OFF SEC Playground is must for practicing Windows boxes.
👤skinny3l3phant


🎖@malwr

PCAP Forensics
🗣johnhammond010

Neat. I love capture the flag challenges.
👤maledependa


🎖@malwr

diodb: Open-source vulnerability disclosure and bug bounty program database by disclose.io
🗣yesnet0

Met the diodb database while doing "contact tracing" for a CVE recently.

Now I use it to find random companies to look for bugs in, rather than the other way around.

Extremely fast to Ctrl+F through the json, rather than load up 50+ vendor websites.
👤docker-osx


🎖@malwr

I just published my first step-by-step reverse engineering/game patching tutorial using Ghidra, x64dbg, and Python. I tried to make it fun & balance the technical aspects for newcomers to RE. I really hope it helps someone here. Feedback is appreciated.
🗣0xFF0F

I nearly stopped watching instantly when you said "everybody in Cyber", but I stuck with it and really enjoyed it :) You're a natural teacher, I'm sure this will be a go-to video for many people getting into RE. Good job!
👤mrverybored

This is really good, already shared it with my ctf teams
👤cents02


🎖@malwr

Reversing Go - Part 2
🗣digicat

This can and should be great content, but it is written poorly imo. Almost like a manual. No engagement for the reader, not even an introduction (not even for the first part), mostly spewed assembly with assumptions and explanations. Some people might be into this though, so thanks!
👤saudi_hacker1337


🎖@malwr

Beginners: Here is an Easy-To-Use Packet Sniffing Tool
Espionage: A Network Packet and Traffic Interceptor For Linux. Spoof ARP & Wiretap A Network.

https://github.com/DoubleThreatSecurity/Espionage

Espionage is a network packet sniffer that intercepts large amounts of data being passed through an interface. The tool allows users to to run normal and verbose traffic analysis that shows a live feed of traffic, revealing packet direction, protocols, flags, etc. Espionage can also spoof ARP so, all data sent by the target gets redirected through the attacker (MiTM). Espionage supports IPv4, TCP/UDP, ICMP, and HTTP. Espionage was written in Python 3.8 but it also supports version 3.6.
🗣overflow1n


🎖@malwr

Undocumented user account in Zyxel products (CVE-2020-29583)
🗣digicat

🤬 “According to Zyxel, the account was designed to deliver automatic firmware updates for access points via FTP.”
👤1128327


🎖@malwr

Overthewire: Learn Hacking By Playing Games
🗣spectnullbyte

Cool! Thanks for sharing this!
👤AtlanticDipper


🎖@malwr