@Defte_

Hacker, sysadmin and security researcher @OrangeCyberdef 💻 Calisthenic enthousiast 💪 and wannabe philosopher https://xitter.cf/t.co/SqDDhIGGGh 📖 🔥 Hide&Sec 🔥

 The grid
blog.whiteflag.io
Joined November 2017
  • Tweets1.7K
  • Following489
  • Followers4.5K
92Media
Aurélien Chalot retweeted
Abdul Mhanni
@abdo_mhanniSep 27
3 months of work later, MS-NEGOEX is merged into Impacket 🚀 First big step toward bringing Impacket on Entra ID-joined & hybrid machines. Next stop is PKU2U, after #2260 gets merged and soon after you will have SMB, LDAP & MSSQL on Azure with the tools you already know 👀 Be sure to check it out, research or/and build on it! Cant wait to see the sort of Azure offsec opportunities that may come out of this : ) github.com/fortra/impacket/p…

MS-NEGOEX Phase 3 Implementation by ThatTotallyRealMyth · Pull Request #2213 · fortra/impacket

Hey Hey, opening this PR to begin tracking work on the phase 3 of the ms-negoex implementation. So far the helper functions have been implemented, the proposed testcases from PR1/2 have been integr...

github.com
1
15
32
2,403
Aurélien Chalot retweeted
Alex Neff@al3x_n3ffSep 6
Are you (like me) constantly running into your own Responder? The days are finally over!🚀 @Defte_ and I finally finished up a PR by bdrogja that let's you define exclusions such as "yourself". You can also exclude entire ranges or IPv6 addresses (if anyone uses those lol).
Exclude yourself or IP (ranges) when using NetExec

ALT Exclude yourself or IP (ranges) when using NetExec

2
24
128
5,222
Aurélien Chalot retweeted
Jose Rodriguez@VBarraquitoSep 1
Be aware that your photos can be accessed without unlocking your phone when you receive a WhatsApp video call on Android. This is in plain sight. It's not hidden, not a secret feature. Not a hack. This has already been reported to Meta and Google. #Privacy #Security #Android17
83
242
33
3,416
633,392
Aurélien Chalot retweeted
Jaek@YJaeDukAug 28
Cet episode des "rires du Medef" est un tournant. Il vient adouber JLM en tant que seul défenseur des travailleurs/classe populaire Il vient le déclarer comme seul opposant au système eco/politique actuel Et il vient de souder toute une classe sociale derrière lui Game changer!
192
838
12
2,998
37,714
Aurélien Chalot retweeted
Boschko
@olivier_boschkoAug 27
I've published UniBLEed, a fully wormable proximity Bluetooth RCE affecting Unitree's G1 humanoids. Blog spans cloud, mobile, firmware, Bluetooth & hardware. Two multi-bug RCE chains. 3 months into ~80 minutes, $6,700 in bounties. Go jailbreak your G1s!! boschko.ca/g1-ble-rce/

UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range

Root on a $20,000 humanoid robot from Bluetooth range. One chain crossing Bluetooth, Unitree’s cloud, mobile, and the firmware running the G1 itself. Here’s the complete technical breakdown of the...

boschko.ca
9
83
10
226
24,329
Aurélien Chalot retweeted
Merill Fernando
@merillAug 17
He copied a value out of the Windows Event Log. Pasted it into his special browser. And he was signed into Microsoft Entra as the user who had just authenticated. No password. No phishing link. No stolen private key. @MGrafnetter's Black Hat USA 2026 research...
30
373
42
1,975
244,495
Aurélien Chalot retweeted
nafiez@zeifanAug 11
Found a heap overflow vulnerability in Windows SMB that leads to RCE and reported it to MSRC in June. The vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates. msrc.microsoft.com/update-gu…
9
81
1
475
31,707
Aurélien Chalot retweeted
Azox@azoxlpfAug 10
Exploit ResetNightmare with NetExec 🔥 CVE-2026-27912: a logical flaw in the Kerberos Change Password protocol lets an attacker with Generic Write on one account reset the password of ANY user/computer, including Domain Admins. Built a module to automate the full chain 🚀
3
63
284
14,913
Aurélien Chalot retweeted
Azox@azoxlpfAug 8
Yeah for those asking: NetExec now detects CVE-2026-27912 (ResetNightmare) via the enum_cve module. Patch or check exposure 🚀
Alex Neff@al3x_n3ffAug 8
Replying to @stratosberry @ThreatWire_
Funny that you ask, the PR by @azoxlpf just got merged today adding the detection😁
53
1
225
25,996
Aurélien Chalot retweeted
shif/tty/mike@shifttymikeJul 27
Replying to @singe @BlackHatEvents
It’s the default tool for WiFi hacking but there were a few things that bugged me, so I made it better. Then I made it nicer. Here’s the link: github.com/shifttymike/aircr… Static binaries available in releases :)

GitHub - shifttymike/aircrack-ng: WiFi security auditing tools suite

WiFi security auditing tools suite. Contribute to shifttymike/aircrack-ng development by creating an account on GitHub.

github.com
1
14
23
1,444
Aurélien Chalot retweeted
Dominic White 👾@singeJul 27
Every time we give our wifi hacking training @BlackHatEvents, we need to help people understand the vagaries of aircrack's airodump-ng, until now, because @shifttymike fixed it!
4
4
25
2,235
Aurélien Chalot retweeted
nix@aniqfakhrulJul 24
Happy to share a technical analysis by @h0j3n on our recent CVE-2026-54121 a.k.a Certighost. glhf🔥 Technical analysis: gist.github.com/H0j3n/a5ef26… POC: github.com/aniqfakhrul/CVE-2…
11
253
10
714
101,600
Aurélien Chalot retweeted
Merill Fernando
@merillJul 24
I don't usually post about Active Directory but I'm doing this for @techspence 😂 This is officially from Microsoft. Link below 👇
8
35
3
240
29,926
Aurélien Chalot retweeted
bl4ck4rch@bl4ckarchJun 25
I was playing around AMSI and came up with some interesting bypass techniques. 6 techniques validated with a live reverse shell on a fully patched Windows 11, Defender on. bl4ckarch.github.io/posts/On… #AMSI #RedTeam #WindowsSecurity #ReverseEngineering #Pentest

One Bool. Six Shells. AMSI’s Design Problem.

A research study into the Anti-Malware Scan Interface (AMSI) combining Ghidra decompilation of amsi.dll, Frida dynamic instrumentation, and live bypass testing with Windows Defender active. Six...

bl4ckarch.github.io
2
54
1
192
10,986
Aurélien Chalot retweeted
Two Seven One Three
@TwoSevenOneTJun 7
New #redteam tool for blocking EDRs: EDRChoker Instead of fully blocking the EDR agents' connections to their server, we can throttle their bandwidth so they consistently time out when sending data, which is effectively the same as blocking but avoids triggering "block" or "drop" packet events #pentest #cybersecurity Github: TwoSevenOneT/EDRChoker
EDRChoker run throttling EDR process list

ALT EDRChoker run throttling EDR process list

Elastic EDR blocked by EDRChoker

ALT Elastic EDR blocked by EDRChoker

EDRChoker run remove throttling EDR process

ALT EDRChoker run remove throttling EDR process

24
178
9
756
122,215
Aurélien Chalot retweeted
Alex Neff@al3x_n3ffJun 4
SMB share enumeration via ACLs with NetExec🔥 NetExec now detects share permissions via ACL enumeration, instead of trying to write a file. In addition, we can now detect if a user has indirect access to the share, e.g. by having ACL write permissions! Made by @PytelJack🚀
Enumerate SMB shares via ACLs with NetExec

ALT Enumerate SMB shares via ACLs with NetExec

3
53
1
267
16,594
Aurélien Chalot retweeted
Adam Chester 🏴‍☠️
@_xpn_May 28
4
100
4
570
16,182
Aurélien Chalot retweeted
Alex Neff@al3x_n3ffMay 25
Small QOL update for NetExec: Ctrl+C will now immediately exit NetExec without any weird stack traces🚀 However, keep in mind that this still does not exit gracefully, but immediately kills all existing threads. Only do so if necessary. Made by @T1erno_
Better Ctrl+C handling in NetExec

ALT Better Ctrl+C handling in NetExec

1
12
68
5,163
Aurélien Chalot retweeted
Abdelhamid Naceri@MSNightmare2000May 16
It's confirmed, CVE-2020-17103 patch is ineffective and the vulnerability still exists, A weaponized PoC can be found here - deadeclipse666.blogspot.com/… Tested against fully patched Windows 11 and Server 2025 machines.
7
137
5
603
98,747
Aurélien Chalot retweeted
Simone Margaritelli
@evilsocketMay 14
47
398
30
8,376
296,097
Load more