Tessera

Yehuda Smirnov

@yudasm.bsky.social

Passionate about learning and researching cybersecurity stuff. Opinions are my own. #RedTeam #InfoSec Blog at blog.fndsec.net

3 Posts64 Follower 92 Folgt

Yehuda Smirnov @yudasm.bsky.social · last yr.

Excited to release a tool I've been working on lately - ShareFiltrator ShareFiltrator finds credentials exposed in SharePoint/OneDrive via the Search API (_api/search/query) and also automates mass downloading of the discovered items. Blog: blog.fndsec.net/2025/04/02/b...

netbiosX @netbiosx.bsky.social · 2y ago

GitHub - CrowdStrike/sccmhound: A BloodHound collector for Microsoft Configuration Manager

A BloodHound collector for Microsoft Configuration Manager - CrowdStrike/sccmhound

github.com

Yehuda Smirnov @yudasm.bsky.social · 2y ago

Excited to share a tool I've been working on - ShadowHound. ShadowHound is a PowerShell alternative to SharpHound for Active Directory enumeration, using native PowerShell or ADModule (ADWS). As a bonus I also talk about some MDI detections and how to avoid them. blog.fndsec.net/2024/11/25/s...

netbiosX @netbiosx.bsky.social · 2y ago

How To Use MSSQL CLR Assembly To Bypass EDR

BackgroundA few days ago, I dealt with a blackmail incident involving an MSSQL database, which potentially evaded EDR detection. I intend to share the entire process. Upon analyzing the situation, I f

blog.pyn3rd.com

netbiosX @netbiosx.bsky.social · 2y ago

GitHub - matro7sh/myph: shellcode loader for your evasion needs

shellcode loader for your evasion needs. Contribute to matro7sh/myph development by creating an account on GitHub.

github.com

netbiosX @netbiosx.bsky.social · 2y ago

GitHub - som3canadian/Mythic_NimSyscallPacker_Wrapper: Mythic C2 wrapper for NimSyscallPacker

Mythic C2 wrapper for NimSyscallPacker. Contribute to som3canadian/Mythic_NimSyscallPacker_Wrapper development by creating an account on GitHub.

github.com

Ron Bowes @iagox86.bsky.social · 2y ago

Favorite quote from WatchTowr's blog about PAN-OS vuln: > I guess auto_prepend_file actually has legitimate use besides writing PHP exploits. labs.watchtowr.com/pots-and-pan...

Pots and Pans, AKA an SSLVPN - Palo Alto PAN-OS CVE-2024-0012 and CVE-2024-9474

Note: Since this is 'breaking' news and more details are being released, we're updating this post as more details become available (and as we think of better memes). Mash that F5 key every so often fo...

labs.watchtowr.com

Justin Elze @handle.invalid · 2y ago

TrustedSec Tech Brief 00:30 - NTLM Hash Disclosure Zero-Day 01:45 - Task Scheduler Vulnerability 02:30 - Exchange Server Issues 03:15 - AD Certificate Services Flaw 04:00 - Vulnerability Breakdown 04:45 - Palo Alto Zero-Day 05:30 - FortiGate VPN Update www.youtube.com/watch?v=3mSD...

TrustedSec Tech Brief - November 2024

YouTube video by TrustedSec

youtube.com

Bad Sector Labs @badsectorlabs.com · 2y ago

Arc browser RCE, more Fortinet woes (@sinsinology.bsky.social), PowerHuntShares v2, make_token_cert, BOFs without DFR (@netbiosx.bsky.social), and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2024-11-18

Arc browser RCE (@RenwaX23), more Fortinet woes (@SinSinology), PowerHuntShares v2 (@_nullbind), make_token_cert (@freefirex2), BOFs without DFR (@netbiosX), and more!

blog.badsectorlabs.com

Hexacorn @hexacorn.bsky.social · 2y ago

AdobeFips - Adobe Reader Lolbin www.hexacorn.com/blog/2024/11...

Hexacorn @hexacorn.bsky.social · 2y ago

Beyond good ol’ Run key, Part 144 www.hexacorn.com/blog/2024/11...