Glad to be mentioned in such a great company! 😆 @chudypb.bsky.social 🔥

Bad Sector Labs@badsectorlabs.com · last yr.

Evilginx Pro (@mrgretzky.breakdev.org ), Pre-auth RCE in a CMS (@chudypb.bsky.social), GOAD ADCS, YouTube email disclosure (@brutecat.com), SAML parser bug (ulldma.bsky.social), and more! blog.badsectorlabs.com/last-week-in...

🚨 Evilginx Pro is finally here! 🚨🎣🐟 This is it! After over two years of development, countless delays, and hundreds of manual company verifications, Evilginx Pro is finally live! Thank you all for your invaluable support 💗 breakdev.org/evilginx-pro...

Evilginx Pro is finally here!

After over two years of development, Evilginx Pro reverse proxy phishing framework for red teams is finally live!

breakdev.org

Since last year, I thought Ivanti Endpoint Manager was the most insecure tool you could use. This year, I know it’s been Elon all along.

Big news: our trainings are live! This year, we’re offering 13 courses led by top-notch experts. Whether you're red, blue, or somewhere in between, come sharpen your skills, break stuff, and learn from the best! 📅 1–4 Sept 📍 Meervaart, Amsterdam 🎟 Tickets available now! 👉 weeztix.shop/qt2kzq6g

Excellent research by Sagi Olshansky shows how even a simple "Terms of Service" conditional access option in Entra ID can become a thorn in the side of phishing threat actors. Evilginx phishlet development action included 🎣 medium.com/@Sniffler/te...

Terms of What?

tl;dr

medium.com

I've been dealing with mysterious high CPU utilization from WmiPrvSE.exe for MONTHS. I finally did some digging using github.com/luctalpe/WMI... (run wmimon from an elevated cmd prompt). Guess what the culprit was?

GitHub - luctalpe/WMIMon: Tool to monitor WMI activity on Windows

Tool to monitor WMI activity on Windows. Contribute to luctalpe/WMIMon development by creating an account on GitHub.

github.com

The BREAKDEV RED software shop engine is finally finished 🎉 Out of respect to all Evilginx fans, the purchase experience will be as friendly and fair as possible: - Floating licenses ONLY - No minimum cap for license purchases Evilginx Pro release date: February 2025 Merry Christmas everyone! 🎄

New #PEsieve & #HollowsHunter (v0.4.0) are released: github.com/hasherezade/... & github.com/hasherezade/... - A lot has changed in the new version, check it out!

I wrote a fun, little blog post. Remote pre-auth file deletion in SolarWinds ARM allowed to achieve LPE on AD machines 🙃

TrendAI Zero Day Initiative@thezdi.bsky.social · 2y ago

In his latest blog, @chudypb.bsky.social covers a pre-auth Arbitrary File Deletion bug he discovered in the SolarWinds Access Rights Manager (ARM). It may not sound exciting, but it can lead to an LPE on domain-joined Windows machines. Read the details at www.zerodayinitiative.com/blog/2024/12...

🚨 BLACK FRIDAY 50% OFF 24-HOUR SALE 🚨 Today I'm running the biggest sale, since the course release in 2023! Get Evilginx Mastery course with lifetime access for 199 EUR ONLY today! 🤩 Upgrade your phishing skills before Evilginx Pro drops! 🔗Link: academy.breakdev.org/evilginx-mas...

🚨 BLACK FRIDAY 50% OFF 24-HOUR SALE 🚨 Today I'm running the biggest sale, since the course release in 2023! Get Evilginx Mastery course with lifetime access for 199 EUR ONLY today! 🤩 Upgrade your phishing skills before Evilginx Pro drops! 🔗Link: academy.breakdev.org/evilginx-mas...

🚨 The Black Friday sale is coming! The sale drops at midnight today! (UTC+1) It will be the biggest sale yet! 🤩

I want to do a little promotion here as well: For the dutch people following me: last year me and 2 other folks from HITB dutch crew started orangecon.nl. Its a nonprofit which focusses on knowledge sharing with affordable trainings followed by a very affordable conference. Do check it out please!

I'm currently doing super exciting research (that's a joke 😭) trying to decide which invoicing platform with API access to use. Can anyone confirm if Zoho Books is a good platform or if there is any alternative worth considering? I'm having the time of my life 😆

I keep catching myself referring to "Linkin Park" as "LinkedIn Park". Is it a sign of growing old? 👴

Paged Out! #5 is out – enjoy! pagedout.institute And if you like the cover, we have wallpapers!

Paged Out!@pagedout.bsky.social · 2y ago

Paged Out! Issue #5 is out now! pagedout.institute?page=issues.... Happy reading!

Evilginx Pro Update: Tool is ready and awaits release. I'm now creating an online shop engine, because why not 😜 I hope one day it becomes Steam for cybersecurity tools with Evilginx Pro its first release, like Half-Life 2 on Steam exactly 20 years ago. Red team tools unite!

Defenders use cross-origin requests through CSS url() or injected JS to leak your phishing URL in the HTTP Referer header. Today, I've been reminded about the excellent post by Keanu Nys, which contains a lot of great evasion ideas! insights.spotit.be/2024/06/03/c...

Beyond good ol’ Run key, Part 144 www.hexacorn.com/blog/2024/11...

Does anyone else feel Bluesky has finally solved the notification stacking/clutter problem Twitter has been unable to solve since its beginning?

I'm reaching the point where most of the Twitter accounts I followed for news, have migrated to Bluesky. Soon I may have no reason to go there anymore! 🥳

🎂 BREAKDEV RED launched a year ago on 9th Nov 2023. It's a closed community for red teamers where every member is approved by hand. Takeaways: 👫 1203 members approved & joined 🤗 Made lots of new friends 📚 Learned from the best Thank you for making it extraordinary! 💗

if you’re trying to find the people you follow on twitter, check out @kawamataryo.bsky.social’s www.sky-follower-bridge.dev it found a full 1/3 of the people i follow. impressive work by the developer, but also impressive to see that that many twitter people are setting up here.

Early Cascade Injection PoC by C5pider github.com/Cracked5pide... Based on research by Outflank: www.outflank.nl/blog/2024/10...

GitHub - Cracked5pider/earlycascade-injection: early cascade injection PoC based on Outflanks blog post

early cascade injection PoC based on Outflanks blog post - Cracked5pider/earlycascade-injection

github.com

😳

Procmonning the Win11_24H2 build www.hexacorn.com/blog/2024/11... #DFIR

Good luck, America!

Just found out about this. Super neat feature! If you own a domain, you can change your bsky handle to point to it by adding just a single DNS TXT record. I changed mine to @mrgretzky.breakdev.org 🔥

Thomas Vochten ☕️👨‍💻🏃‍♂️@thomasvochten.com · 2y ago

Essential beginner tip for people with their own domain (that should be everyone): set your domain name as handle. bsky.social/about/blog/4...

Hello brave new world!