Tessera
Folgen

Mänu

@emanuelduss.ch

IT security. Linux & network protocols. Pentesting web applications, networks & AD infrastructures. Mostly technical stuff here. https://emanuelduss.ch

26 Posts77 Follower108 Folgt
Mänu@emanuelduss.ch · 4mo ago

On sshlabs.compass-security.training you can find a presentation and a Docker-based hands-on lab in which you can learn how SSH works, how it can be attacked and how to protect it. #security #infosec #network #ssh #openssh #pentest

SSH Labs - SSH Labs

Labs to learn about SSH security.

sshlabs.compass-security.training

Compass Security@compass-security.com · 4mo ago

SSH everywhere, misconfigurations somewhere. Our new SSH Labs let you get your hands dirty: slides, video, and a Docker-based lab. Created by our Security Analyst @emanuelduss.ch, learn how SSH breaks and how to fix it: blog.compass-security.com/2026/05/ssh-... #SSH #InfoSec #Security

TrendAI Zero Day Initiative@thezdi.bsky.social · 4mo ago

Collision! Although successful on stage, Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller (@compasssecurity) of Compass Security targeted Anthropic Claude Code, hitting a one-vulnerability collision with a previous attempt and earning $20,000 & 2 Master of Pwn points. #Pwn2Own

BildBild
Mänu@emanuelduss.ch · 8mo ago

This was a really cool and awesome course ❤️! I learned so much in these two days and did a lot of stuff I never did and never heard about before. It was cool when (after some nasty debugging 🫠) the encryption key could finally be sniffed 🤘. Thanks a lot for your training, you guys rock!

Open notebook from the backside where the mainboard can be seen, tiny wires are soldered on the SPI flash. These are soldered to a PCB which is connected to a logic analyzer.
Pascal Gujer@evilmaid.bsky.social · 8mo ago

Still on the “wanting to do this stuff” side? Join our mailing list and get alerted when we host the next hands-on training. www.hands-on-security.com/#trainings

Mänu@emanuelduss.ch · 8mo ago

This is probably the easiest way to perform reverse DNS lookups over IP address ranges using the built-in tool getent and bash brace expansion: getent hosts 130.59.{20,31}.{0..255} Useful if you are on a system/container with limited tools. #pentest #dns #linux

Output of the command showing multiple IP addresses and their hostnames assigned via reverse DNS entries.
SpecterOps@specterops.io · 10mo ago

NTLM relays failing because of EPA? 😒 Nick Powers & @tw1sm.bsky.social break down how to enumerate EPA settings across more protocols + drop new tooling (RelayInformer) to make relays predictable. Check out their blog for more: ghst.ly/4rqwpRs

Less Praying More Relaying - Enumerating EPA Enforcement for MSSQL and HTTPS - SpecterOps

It's important to know if your NTLM relay will be prevented by integrity protections such as EPA, before setting up for and attempting the attack. In this post, we share how to solve this problem for ...

ghst.ly

Mänu@emanuelduss.ch · 11mo ago

802.11evil now shows a Wi-Fi QR code, sends router advertisements for IPv6 support, can set static routes via DHCP and disable Wi-Fi to only act as a router. See changelog: emanuelduss.ch/posts/create... #pentest #network #tls #mitm

Create Evil Wi-Fi Access Point (802.11evil)

Introduction In pentests, connecting devices to your own network can be very useful. This enables you to exfiltrate data, download tools, analyze the network traffic and even use a transparent HTTP pr...

emanuelduss.ch

TrendAI Zero Day Initiative@thezdi.bsky.social · 11mo ago

📢 Confirmed! Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller of Compass Security combined an arbitrary file write & cleartext transmission of sensitive data to exploit the @home_assistant Green. Their third round win earns them $20,000 and 4 Master of Pwn points. #Pwn2Own

Dirk-jan@dirkjanm.io · 12mo ago

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-gl...

One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens

While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise ...

dirkjanm.io