Pinned Tweet
I wrote a tool to extract all Kerberos tickets stored in the keyring of Linux systems enrolled in a Windows domain 🥳
Super useful for obtaining AD account access! 🚀
👉 Check it out: github.com/Hakumarachi/keyri…
I’m just releasing Nanorust — a Rust rewrite of nanodump!
- Low-level LSASS dumping
- Direct syscalls (Hell’s/Tartarus Gate)
Modular, research & red team ready ⚠️
🔗 github.com/Hakumarachi/Nanor…
#RustLang #RedTeam #Infosec #WindowsSecurity #OffensiveSecurity
I've just released ccacheExtractor, a tool to dump all kerberos tickets from KCM store.
This is pretty useful to obtain AD account ! 🚀
#CyberSecurity
👉 Check it out: github.com/Hakumarachi/ccach…
Aku retweeted
Release 2.2.1 of objectwalker is out! 🥳🎉
Fixes a few bugs and optimized the search!
Very useful for solving Python jails or finding Server Side Template Injection payloads in python
github.com/p0dalirius/object…
Aku retweeted
I am delighted to announce that Microsoft has awarded me the title of Microsoft MVP for my contributions in the security field.🥳
I want to thank all those with whom I have worked over the years, and in particular @_mudpak, @mpgn_x64, @NoobosaurusR3x, @HacktBack and @Akumarachi
Aku retweeted
I've just released GeoWordlists, a tool to generate wordlists of passwords containing cities at a defined distance around the client city.
This is pretty useful for spraying / bruteforcing in internal pentests on an Active directory domain for example!
➡️github.com/p0dalirius/GeoWor…
Aku retweeted
The DOJO challenge #23 is over!
We have our 3 winners! 🏆
Congrats to @PerceSecu, @Iknownaught , Aku
The swag are on their way!
Keep an eye on your mailbox 📬
You can find the solution and a write-up for the DOJO challenge on our blog 👇
blog.yeswehack.com/dojo/dojo…
#YesWeRHackers #BugBounty
Aku retweeted
(1/3) I've released publicly a new tool/library called #objectwalker that I have been working on for a few months. 🥳
ObjectWalker allows you to find paths into python objects to find interesting targets, in breadth first search or depth first search!
➡️github.com/p0dalirius/object…
Aku retweeted
Let’s goo, @EuCyberCup is over 🏴☠️
🥇 We won the bug bounty (@Wlayzz did it all)
🥉 We ended 3rd on Forensic
🥉 And we finished 3rd on general scoreboard (1st enterprise team)
We had a blast, great orgs, great challs, great teams, big improvement since 2022 ✌️
Voici le classement complet de cette #EC2 2023 ! 🏆
Un grand bravo aux ESNARCOTRAFIQUANTS pour leur victoire ! 👏
ALT Classement final de l'EC2 2023
Interested by cryptographic stuff?
I've just updated ctfrecipes.com, featuring cryptographic techniques such as AES padding oracle. Keep learning and take your skills to the next level! #CTF #Cybersecurity #AES #Crypto
Aku retweeted
Completed implementing built-in pass-the-hash in #BRc4 after spending a lot of time with Mimikatz and a great blog written by @ShitSecure . More interesting things are on the way. The below blog is a must read to understand the technique at code level.
s3cur3th1ssh1t.github.io/Nam…
Hey #CTF enthusiasts! Today I'm releasing the first version of CTF recipes!
This wiki mainly focuses on #pwn techniques for now, but stay tuned for future topics! #OpenSource #CyberSecurity
ctfrecipes.com
Aku retweeted
Big up to @Fransosiche and @Wlayzz for the new "HTTP Request Smuggling" page on The Hacker Recipes 🧑🍳
thehacker.recipes/web/config…
I've just published a little #pwn Blind ROP tool along with 3 custom vulnerable examples to try it.
Check it out and let me know what you think.
#infosec #hacking #ctf
github.com/Hakumarachi/Bropp…
Aku retweeted
I've just published a little #osint tool to extract all the users from a #GiTea server, with or without authentication. This is really useful to create wordlists of possible usernames in redteams for example ;)
github.com/p0dalirius/gitea-…
Aku retweeted
Last year, I tweeted about #Administrator accounts not following the #lockout policy.
Yesterday, @Microsoft issued an advisory (#KB5020282) solving this problem by adding an #account lockout to local administrators accounts: ⤵️
support.microsoft.com/en-us/…
xitter.cf/podalirius_/status/143…
Did you know that the Administrator account of a Windows domain is not subject to the lockout policy ? We tried this with @_nwodtuhs with our tool #smartbrute
This is intentional to prevent an attacker from performing a DoS by locking the Administrator account.
Recently, I generated loose compare tables for every version of every language. 🥳
In this repo you will find a list of all the results of comparisons between different data types, in #PHP, #MySQL, #Postgres, etc.
github.com/Hakumarachi/Loose…
Aku retweeted
Tired of having to record your actions by hand during your pentest? Don't panic, Exegol 4.0.5 is here with an automatic recording of your sessions (input and output)
Also a new system of filesystem rights shared between your host user and your container.
github.com/ShutdownRepo/Exeg…
