Luhko retweeted
Two new logical flaws in Kerberos just dropped at Black Hat. Low-privileged user to full domain takeover, including domain admins.
If you're doing Active Directory pentesting, Kerberos attacks, red teaming, identity security, or detection engineering, read this.
KerberLoss (CVE-2026-25177) and ResetNightmare (CVE-2026-27912). Both are logical bugs, not memory corruption. Described as surprisingly easy to exploit.
semperis.com/blog/identity-c…
#Infosec #RedTeam #DetectionEngineering
Yay, I was awarded a $3000 bounty on @Hacker0x01! hackerone.com/luhko
Yay, I was awarded a $3,000 bounty on @Hacker0x01! hackerone.com/luhko
Bug type: Improper Access Control leads to 0 click account takeover
Luhko retweeted
We paid $1 million to hackers to harden our firewall defenses.
Today we're telling the story of how we strengthened our WAF, disclosing a runtime mitigation layer for the first time, and how we partnered with
@Hacker0x01 to defend against React2Shell.
vercel.com/blog/our-million-…
Luhko retweeted
''Weaponizing WDAC: Killing the Dreams of EDR''
#infosec #pentest #redteam #blueteam
beierle.win/2024-12-20-Weapo…
Luhko retweeted
Improved bypass for Windows 11 OOBE:
1. Shift-F10
2. start ms-cxh:localonly
Only required on Home and Pro editions.
Luhko retweeted
As we continue to grow in size, collect malware, malware papers, and malware source code — we thought, "wow, kitty cats are pretty cool. It's a shame we can't spam them on Xitter."
Then we had the idea of collecting every photo of a cat on the internet. Why? No idea
Luhko retweeted
After reading @_RastaMouse's blog post about Crystal (rastamouse.me/crystal-malwar…) I created CrystalDump, a port of NativeDump written entirely in Crystal, designed to dump lsass using only NTAPI functions - github.com/ricardojoserf/Nat… #redteam #offsec #cybersecurity
Luhko retweeted
The year is 2024, we have the most advanced EDRs and Malware Sandboxes
Threat actors:
It is really interesting to find anti-VM techniques being used by threat actors in the wild.
This is a PowerShell script protecting a #Lumma Stealer build and being spread on YouTube videos.
In this case, this was enough to make @anyrun_app to fail based on Screen Resolution
Luhko retweeted
This weekend I gave a workshop on #GEOINT @_barbhack_
I had a blast 🔥
Many thanks to all participants🙏
FYI, the slides are here : blog.volkercarstein.com/geoi…
Exercices will stay online until 31/08, 11 pm (and don't forget you can still win stickers👀)
Luhko retweeted
📢 A talk by @kevin_mizu : "Found an XSS? Alright! But what's next?"🎉on July 28, 8pm! 🎁Win a Burp Suite Cert. Practitioner certification! ⏰Like, share by July 26 : 2 Twitter/LinkedIn followers chosen at random Winners announced July 27 #RootMeContest twitch.tv/rootme_org
Luhko retweeted
Introducing the: LOLOL project
A collection of Living Off the Living Off the Land projects
lolol.farm
Luhko retweeted
haha ok one more GPT-4 game:
try to buy the rug for as cheap as possible.
play link: aiadventure.spiel.com/carpet
my record so far is $400
Luhko retweeted
holy FUCK.
Windows Snipping Tool is vulnerable to Acropalypse too.
An entirely unrelated codebase.
The same exploit script works with minor changes (the pixel format is RGBA not RGB)
Tested myself on Windows 11
Luhko retweeted
Releasing a Windows 11 LPE exploit by @FuzzySec and I. Exploits CVE-2023-21768, a vuln in afd.sys. Blog post soon!
github.com/xforcered/Windows…
