codewhisperer84 retweeted
CVE-2026-24294 - Local NTLM Reflection LPE via SMB Arbitrary Port:
github.com/0xNDI/CVE-2026-24…
#smb #vulnerability #infomationsecurity #infosec #cybersecurity #exploit #exploitation
codewhisperer84 retweeted
Published two new tool drops this morning to enhance your cloud hacking privilege escalation game. Enjoy! #Azure #CloudHacking
TrustedSec | The Art of Hunting Azure Cloud Secrets trustedsec.com/blog/the-art-…
Titanis v0.9.330 => github.com/trustedsec/Titani…
Featuring support for Kerberos ticket forging, FAST armoring, and several usability enhancements like a .deb for easy installation, shell completion and manual pages.
I've been working on a Titanis documentation site => trustedsec.github.io/Titanis…
Source tree now includes completions for bash and zsh, let me know what you think!
Added Kerberos ticket forging and armoring. release coming soon!
github.com/trustedsec/Titani…
codewhisperer84 retweeted
Confirmed that miniplasma works on Win11 22H2-25H2 (fully patched). Pretty cool seeing that system shell come in. 😎
Note - fails on 21H2. Seems like somewhere on 22H2, the CloudFiles key owner got set to the calling user, but on 21H2, it was set to Administrators.
codewhisperer84 retweeted
Sometimes you don't need to build the nest yourself. In this blog, @Coontzy1 explains how trusted Group Policy UNC paths can be turned into code execution and NTLM relay without building rogue GPO infrastructure or modifying SYSVOL. Read it now!
hubs.la/Q04d-LsP0
codewhisperer84 retweeted
How well do you really understand what's happening inside a #Kerberos exchange? In our latest blog, @codewhisperer84 breaks down the full authentication flow and demonstrates how to interact with every stage using the #Titanis toolset. Read it now! hubs.la/Q04dcFgv0
New Titanis release => github.com/trustedsec/Titani…
The new Dsrep lets you dump secrets from AD, Ldap supports queries for DNS records and timestamp conversions, Dcom supports dotted-property notation, along with other enhancements and fixes.
codewhisperer84 retweeted
I caught my first CVE :D
msrc.microsoft.com/update-gu…
Blog post inbound at TrustedSec.com tomorrow!
Titanis v0.9.205 released => github.com/trustedsec/Titani…
Major enhancements include an LDAP client, Kerberos PKINIT across the tool set, registry tool (Reg), and Sddl tool for describing/converting SDDL.
codewhisperer84 retweeted
This week’s video is a quick peek at Titanis by @codewhisperer84 at @TrustedSec , a comprehensive Impacket alternative. It’s cross-platform, extensively documented, and written directly from the protocol specification 🌶️ Link down below
New Titanis release => github.com/trustedsec/Titani…
Mostly Kerberos enhancements:
- S4U2self and S4U2proxy
- Change/Set password
- Generate crypto key on command line
ASN.1 saw some major changes to pave the way for some upcoming enhancements
codewhisperer84 retweeted
Get the first look at @codewhisperer84's new tool Titanis next week! Join us on Discord for a live demo on October 23, 11am ET. Find out how to join on our website: trustedsec.com/about-us/even…
New Titanis release => github.com/trustedsec/Titani…
Added Smb2 touch and timestomp (@freefirex2 ), Kerberos cross-realm support, and all commands support SOCKS 5. I also added build instructions for Linux/Windows.
Check out Titanis, my new C#-based protocol library! It features implementations of SMB and various Windows RPC protocols along with Kerberos and NTLM.
github.com/trustedsec/Titani…
codewhisperer84 retweeted
Who doesn't love a new tool? In this episode of #SecurityNoise, we talk with @codewhisperer84 about his new open-source tool DIT Explorer. Watch it now to learn what it can do and what exciting updates are coming soon! youtu.be/ifttRCPiLHU
I published a new version of DIT Explorer. This is the version I used during the live stream with the enhanced Credential Extractor and search capabilities.
github.com/trustedsec/DitExp…
codewhisperer84 retweeted
Join us for an exclusive live Discord session on Thursday, March 13 at 10:30AM ET where @codewhisperer84 will showcase his new tool, DIT Explorer and talk about his recent blog. See our website for more info about how to join the event! hubs.la/Q039tt290
Check out my latest blog post on how the NTDS.dit file is used by Active Directory, and my accompanying tool, DIT Explorer, for browing the data contained within NTDS.dit.
Blog post: trustedsec.com/blog/explorin…
DIT Explorer on Github: github.com/trustedsec/DitExp…
