Two Seven One Three

Joe, IT guy, when scanning the entire internal network to find all running PHP web servers (following the boss’s order to patch the php2shell ): A server named TEST-WEB-SERVER : no one knows which intern set it up or when A server named PHP-CRITICAL-TEST: it’s been there since the previous IT guy quit 3 years ago A server named INTERNAL-BACKUP : He know about it. It doesn’t show up in the scan results because last night he listened to the “security experts” and upgraded PHP from the ancient version to 8 and it refuses to start now A typical victim of php2shell

Keep your certificates safe, or one day they'll ruin you. -----BEGIN EC PRIVATE KEY----- 4 -----END EC PRIVATE KEY----- #eMudhra

Yep

free lunch

More is better 🤣

*#Cybersecurity #Interview tip* A bonus question I often ask candidates during interviews: If you're in a room with a laptop that has a #Windows locked screen, and you're the only one there, can you unlock it and get to the Desktop? If so, how would you do it? I've received quite a few very creative answers 😁

That is why they get rich

Using SendMessage with WM_SETTEXT, we can perform stealth injection and bypass EDR, even with high-end Endpoint Detection and Response systems 🛡️ Github: TwoSevenOneT/PhantomBuffer #CyberSecurityAwareness #Pentesting #redteam

The Rusty guys at Microsoft are messing around with WinDbg 🙃 After stopping the debugging process, the DbgEng engine fails to release all objects, preventing a second dump file from being opened. A golden rule: Always release what you allocate. While building an automated analysis tool, I spent the whole day scratching my head over this bug in the latest WinDbg version 🤯

🥷 Now we can inject a payload into a remote process without using VirtualAllocEx and WriteProcessMemory. No need to suspend the target process New technique to evade EDRs: Github: TwoSevenOneT/InjectSetConsole #redteam #pentest #antimalware