Microsoft Shift F10 bypass + Autopilot privilege escalation
🗣k4m1ll0

Am i missing something, or could you just as easily pop out the harddisk and put it in another machine to remove the DisableCMDRequest.TAG file/do whatever you want?
👤Bl00dsoul

There are ways to disable it: https://call4cloud.nl/2022/01/the-oobe-massacre-the-beginning-of-shift-f10/

Another attack vector would be audit mode at beginning of setup. After creating admin accounts or whatever sysprep back to OOBE to continue with autopilot
👤HankMardukasNY

This vuln is fairly well-known in the Intune community, but mostly theoretical - great to see a writeup and full attack chain. Do you have any recommendations for mitigating it? I've focused on using preprovisioning to lock down the system and defaultuser0, but being able to alt-tab and modify system state at all seems like a huge attack surface
👤Pl4nty


🎖@malwr

Tips and tricks for reversing foreign architecture games
🗣jeandrew

Um, no, the 6809 is not the same as m68k. The latter is the later 68000 series.
👤ohmantics


🎖@malwr

Hardware encrypted usb suggestions??
What products are we using for hardware encrypted drives to move data around and store forensic data securely?
🗣dfzachary

I’ve used Aegis and SiForce. I much prefer the latter as they are more reliable and less prone to disconnection due to power consumption issues.
👤ucfmsdf

Apricorn Aegis Padlock drives are the best!
👤no_sushi_4_u


🎖@malwr

A technical analysis of Pegasus for Android – Part 2

First part: https://cybergeeks.tech/a-technical-analysis-of-pegasus-for-android-part-1/


🗣CyberMasterV


🎖@malwr

Blue Team Lab guide 7 - End Devices
Hello everyone, after a small break I wrote another article in my series for Blue Team Home Lab, this time the focus was on end devices, that represent the corporate devices. Hope you'll like it. :)

https://facyber.me/posts/blue-team-lab-guide-part-7/
🗣facyber


🎖@malwr

monomorph: MD5-Monomorphic Shellcode Packer - Pack arbitrary shellcode into an executable that always has the same MD5 hash
🗣sanitybit

It’s interesting though, next step is to cause collisions with system files hashes and see what happens with AVs 😁
👤mrdantesque

Lmao
👤EvenIfIWantedTo

The output file will always have the same MD5 hash: 3cebbe60d91ce760409bbe513593e401


Well there we go AV vendors…
👤littlejob


🎖@malwr