Are you ready for an Attack? We are security professionals specializing in penetration testing, cybersecurity assessments, and social engineering training.
USA
Joined July 2022
- Tweets74
- Following55
- Followers2
- Likes1
Attack Security retweeted
🥷 Now we can inject a payload into a remote process without using VirtualAllocEx and WriteProcessMemory.
No need to suspend the target process
New technique to evade EDRs:
Github: TwoSevenOneT/InjectSetConsole
#redteam #pentest #antimalware
Font Based Deception toolkit for your phishing needs.
doctoreww.github.io/EvilFont…
Life is just easier without the WAF :)
Ghost in the Firewall
EvilWAF is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs)
github.com/matrixleons/evilw…
Attack Security retweeted
Claude tarafında Red Team Skillerini devreye almak isterseniz ( ki kendinizde yapabilirsiniz normalde ) auto bir tool üretmişler. Oldukça başarılı.
github.com/SnailSploit/claud…
#Claude #RedTeam #AI #YapayZeka #SiberGüvenlik
Attack Security retweeted
Unpatched NTLM Leakage in Windows search: URI Handler, Same Bug, No CVE, No Fix huntress.com/blog/unpatched-…
Attack Security retweeted
Just noticed this change in the @MITREattack Enterprise Matrix V19. Defense Evasion has been split into the tactics Stealth and Defense Impairment.
attack.mitre.org/resources/u…
Attack Security retweeted
Gaining Initial Access and Outsmarting SmartScreen
.zip email attachment that includes a VHDX (Hard Disk Image File) + Mark of the Web and SmartScreen bypass using Trusted Executable Reputation and DLL Sideloading
github.com/g3tsyst3m/Codefro…
#dfir #blueteam #redteam #pentesting #ThreatHunting
Attack Security retweeted
If you’re doing #cloud #security penetration testing and Azure is in scope, AZexec should already be in your toolkit!
AZexec brings a NetExec-style workflow to Azure & Entra ID, finally giving cloud pentesters the same speed, clarity, and offensive ergonomics we’re used to on-prem.
What makes it a must-have:
- Unauthenticated & guest-based enumeration (yes, the Azure “null session” problem is very real)
- Two-phase password spraying using Microsoft’s own APIs (stealthy, lockout-safe, MFA-aware)
- Deep Entra ID & ARM reconnaissance: users, roles, apps, Key Vaults, storage, networks, VMs
- Remote command execution across Azure VMs, Arc, MDE, and Intune
- Credential extraction & token abuse tailored for cloud-native environments
- NetExec-style output + reporting (CSV / JSON / HTML) for clean ops and clean reports
If you know CrackMapExec / NetExec, AZexec will feel instantly familiar, just adapted for how Azure actually works.
Cloud attacks deserve cloud-native tooling.
🔗 GitHub: github.com/Logisek/AZexec
#CloudSecurity #Azure #EntraID #Pentesting #RedTeam #OffensiveSecurity #AzureAD #NetExec #AZexec #Logisek
Attack Security retweeted
Excited to disclose my research allowing RCE in Kubernetes
It allows running arbitrary commands in EVERY pod in a cluster using a commonly granted "read only" RBAC permission. This is not logged and and allows for trivial Pod breakout.
Unfortunately, this will NOT be patched.
Impressive work from team at @burpsuite
Attack Security retweeted
3 words 👉 Reduce false positives. 😌
Burp AI can automatically audit broken access control vulnerabilities to reduce false positives.
Attack Security retweeted
24 million websites compromised. 🧵
PortSwigger's Director of Research, James Kettle (@albinowax), & AppSec expert John Hammond (@_JohnHammond) reveal the fatal flaws in HTTP/1.1 that attackers are abusing right now.
#HTTP1MustDie
Need to keep under the radar:
NativeDump: Stealthy LSASS Dumping Tool Bypasses EDRs Using Only NTAPIs
NativeDump allows to dump the lsass process using only NTAPIs generating a Minidump file with only the streams needed to be parsed by tools like Mimikatz or Pypykatz.
meterpreter.org/nativedump-s…
Attack Security retweeted
RemoteMonologue is a new Windows technique that uses DCOM to coerce NTLM authentications, enabling remote credential harvesting and privilege escalation for attackers.
#RemoteMonologue #CredentialHarvesting #WindowsSecurity #NTLM #Cybersecurity
meterpreter.org/remotemonolo…
Attack Security retweeted
‼️ Evilginx Pro 4.1 - Google Safe Browsing evasion 🛡️
I've just uploaded a short demo video demonstrating how Evilginx Pro is able to evade Enhanced protection in Google Chrome browser.
The update is coming soon!
🔗 youtube.com/watch?v=6AJ6dYt9…
Need another route to Active Directory? Check out SharpADWS, it has the ability to extract or modify Active Directory data without communicating directly with the LDAP server.
github.com/wh0amitz/SharpADW…
Attack Security retweeted
Building a custom Mimikatz binary by @ShitSecure
s3cur3th1ssh1t.github.io/Bui…
Source details: birkep.github.io/posts/Windo…
Privilege Escalation in Active Directory Domain Services: CVE-2025-21293 Exploit Revealed with PoC Code securityonline.info/privileg…
Need some cleartext password from TGT or NTLM hash? Always useful on internal penetration testing. Nice work @malcrove their blog post - malcrove.com/seamlesspass-le…
SeamlessPass: Leveraging Kerberos tickets to get Microsoft 365 access tokens meterpreter.org/seamlesspass…