CTF Team || IIIT-Allahabad
Allahabad, India
Joined November 2018
- Tweets34
- Following137
- Followers93
- Likes116
NULLKrypt3rs retweeted
Added a new technique in Patriot to identify suspicious CONTEXT structures used in the rop/callback chains of foliage, #nighthawk, #brc4, gargoyle, etc. github.com/joe-desimone/patr…
NULLKrypt3rs retweeted
Open redirect vulnerability and how to use it "correctly" in bug bounty 🙃
link.medium.com/ftOSGKkZtqb
NULLKrypt3rs retweeted
This PowerShell one-liner will open a visible IE browser in Windows 11:
$(new-object -com internetexplorer.application).Visible=$true
NULLKrypt3rs retweeted
Interesting account takeover of the day.
The site was hosting their pentest.test.com on amazonaws
While resetting my password I have noticed that the host was getting passed in json body
NULLKrypt3rs retweeted
No PKINIT? No problem! Thanks to team members Yannick and @lowercase_drm, you now have a way to (ab)use your ill-earned ADCS certificates even when domain controllers do not support PKINIT
offsec.almond.consulting/aut…
NULLKrypt3rs retweeted
Here are the slides for my talk « Delegating Kerberos to bypass Kerberos delegation limitation » 😈 at @1ns0mn1h4ck #INS22 thehacker.recipes/ad/movemen…
NULLKrypt3rs retweeted
Trying to learn security research and getting overwhelmed by all the details?
I just published a guide showing my process for step-by-step analysis of a security feature: windows-internals.com/an-exe…
NULLKrypt3rs retweeted
New Interruptor 0.1 release 🔥 add Follow Thread 🥳, Kernel API constants usable by their names into hooks🥰, configurable output, smart modules/interrupts filtering
github.com/FrenchYeti/interr…
NULLKrypt3rs retweeted
[#thread 🧵] Last week in #Microsoft #PatchTuesday, a critical vulnerability was patched that theoretically allows attackers to achieve Remote Code Execution on a target #IIS server (CVE-2022-21907). I'll explain how it works in this thread ⬇️
NULLKrypt3rs retweeted
I'm proud to present a new tool, #LDAPmonitor! With this you can monitor creation, deletion and changes to LDAP objects live during your pentest or system administration! Lots of authentication types are supported, and output can be saved to a file.
github.com/p0dalirius/LDAPmo…
NULLKrypt3rs retweeted
Takeover an entire domain by resetting passwords! We detailed how to exploit CVE-2021-40539 on ManageEngine ADSelfService Plus in this blogpost synacktiv.com/publications/h… @acervoise - @tiyeuse
NULLKrypt3rs retweeted
Revisiting an old bug which paid off really well during a previous Red Team op.
The good old Microsoft Exchange unauthenticated email relay. This was particularly impactful. Here's why:
🌶️Unauthenticated
🌶️No phishing infra needed
🌶️Emails land directly in user's inbox
(1/4)
NULLKrypt3rs retweeted
New Write-up on InfoSec Write-ups publication : "Finding My First Bug: HTTP Request Smuggling" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3jM5DAu
NULLKrypt3rs retweeted
Containerd breakout PoC (@ChaosDatumz), the "glue" principle (@theluemmel), lockscreen bypass (@jonasLyk), VBox escape 0day (@Sauercl0ud), beacon shellcode generator (@ryanstvnson), browser backdoor (@_batsec_), nim obfuscation (@LittleJoeTables), + more! blog.badsectorlabs.com/last-…
b00t2root CTF ended! Hearty congratulations to team @ByteForc3, @Zh3r00 and @0x90r00t for bagging the top three positions! We would also like to thank our esteemed sponsors @offsectraining @vector35 for sponsoring the prizes. Adieu guys! See you all next year :)
15+ hrs into the CTF and we are seeing some intense competition here :P
If you havent registered yet shoot here: boot2root2020.tech/
#boot2r00tctf2020
