Secator : new pentester's Swiss knife
"Secator is a Python-based swiss-knife tool that standardizes input / output for many recon (& others) tools that you use daily, like ffuf, subfinder, nmap, nuclei, … and many others"
https://github.com/freelabz/secator
https://medium.com/@ocervell/secator-the-pentesters-swiss-knife-09333f3d3682
https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/
Very very critical vuln in GitLab.
Attack is very simple and permits account takeover (not vulnerable if MFA or external accounts).
Exploit:
user[email][][email protected]&user[email][][email protected]
CVE-2023-7028
Forensic Insights into Apple Watch Data Extraction
https://blog.elcomsoft.com/2023/11/forensic-insights-into-apple-watch-data-extraction/
The latest update to the iOS Forensic Toolkit has expanded data extraction support for older models of Apple Watch, introducing low-level extraction capabilities for Apple Watch Series 0, Series 1, and Series 2. In a landscape where new devices are released on a yearly schedule, we stand committed t
Conditional Access evaluation engine in Powershell for Entra ID (Azure AD)
https://danielchronlund.com/2023/11/24/conditional-access-what-if-simulation-with-powershell/
Very good course about regex from zero :
https://www.executeprogram.com/courses/regexes
And another one to visualize regex:
https://jex.im/regulex/#!flags=&re=%5E(a%7Cb)*%3F%24
Interesting 3 articles "Attacking EDR"
by @her0_it & @dottor_morte
Part 1: https://her0ness.github.io/2023-08-03-c2-Attacking-an-EDR-Part-1/
Part 2: https://her0ness.github.io/2023-09-14-Attacking-an-EDR-Part-2/
Part 3: https://her0ness.github.io/2023-11-07-Attacking-an-EDR-Part-3/
Abusing Microsoft access "linked table" feature to perform NTLM forced authentication attacks
What is NTLM? What common attacks exist against it? NTLM is an extremely deprecated authentication protocol introduced by Microsoft in 1993. It is a challenge-response protocol: the server keeps a secret called an “NTLM hash” derived from the user’s password, then every time that user wants to log in, the server issues a randomized “challenge” […]
The Triforce of Initial Access
- Evilginx
- ROADtools
- TeamFiltration
PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction
:snowflake: PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction -...
