HanseSecure GmbH retweeted
Next level microsoft device code phishing to bypass everything 💥💥💥
PoC video in comments 😎
Thanks for sharing @dennis_kniep
#infosec #pentest #redteam #phishing
github.com/denniskniep/Devic…
HanseSecure GmbH retweeted
Cutting-Edge-Applikations- und API-Sicherheit in Kubernetes
@ErgonAirlock #APISecurity #APISicherheit #Authentifizierung @ErgonAG @HanseSecure #IAM #Kubernetes #Risikoeinschätzung @secunet_AG @terreactive @IT_KafkaPR
netzpalaver.de/2023/09/07/cu…
HanseSecure GmbH retweeted
📢 Only 67 days left until "Munich Cyber Tactics, Techniques and Procedures", MCTTP! -- 13-15th of September 📢
(one day before the octoberfest, just saying ;-)
Germany's new conference with world-class speakers && content.
1/*
🎫 mcttp.de/?utm_source=CO&utm_…
HanseSecure GmbH retweeted
The first edition of @MCTTP_Con is going to be a blast 💥💥💥
The inner circle of our small #infosec family is already in 😎
Accepted speakers
@Oddvarmoe
@kmkz_security
@byt3bl33d3r
@ShitSecure
Waiting for the submit!
@bohops
@FuzzySec
@harmj0y
#infosec
HanseSecure GmbH retweeted
Hallo @vodafoneservice @vodafone_de
Genau so sollte man als seriöser Dienstleister keine Emails versenden, denn wie soll ein Kunde dies von Phishing unterscheiden?
- keine Anrede
- Kein Bezug
#infosec #awareness
HanseSecure GmbH retweeted
As promised: Here's the first $10,000 @Intel bug (aka CVE-2022-33942) that allows to bypass the authentication of Intel's DCM by spoofing Kerberos and LDAP responses.
Exploit inside, enjoy 🥳
rcesecurity.com/2022/11/from…
#BugBounty #security
HanseSecure GmbH retweeted
OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises
#infosec #pentest #redteam
github.com/Aetsu/OffensivePi…
HanseSecure GmbH retweeted
I am very happy to introduce our very first technical cooperation partner:
@CorporateTrust
They will support us in the area of incident response, forensic and risk management so that we can keep our focus on offensive Security.
#infosec #blueteam #redteam
HanseSecure GmbH retweeted
Normally trying to focus this channel to blueteam relevant technical info ... BUT I am really happy that @CorporateTrust and @HanseSecure entered a cooperation agreement. I really enjoy watching @CyberWarship work - this will be a great team.
HanseSecure GmbH retweeted
New post up on the @trustedsec blog looking at how we can patch Cobalt Strike beacon on target, blend in a little better with generated user-agents, and set C2 destinations dynamically. trustedsec.com/blog/tailorin…
HanseSecure GmbH retweeted
I Like to Move It: Windows Lateral Movement
Part 1 - WMI Event Subscription
mdsec.co.uk/2020/09/i-like-t…
Part 2 - DCOM
mdsec.co.uk/2020/09/i-like-t…
Part 3 - DLL Hijacking
mdsec.co.uk/2020/10/i-live-t…
- thanks for sharing @domchell
#infosec #pentest #redteam
HanseSecure GmbH retweeted
Customizing C2-Frameworks for AV-Evasion
- great & useful post by @ShitSecure
#infosec #pentest #redteam
s3cur3th1ssh1t.github.io/Cus…
HanseSecure GmbH retweeted
AD Attack
1) Performing domain recon using PS
blog.stealthbits.com/perform…
2) Attack mapping with bloodhound
blog.stealthbits.com/local-a…
3) Extracting passwd hashes
blog.stealthbits.com/extract…
4) Pass-the-hash attacks with mimikatz
blog.stealthbits.com/passing…
#infosec #pentest #redteam
HanseSecure GmbH retweeted
Evading Detection with Excel 4.0 Macros and the BIFF8 XLS Format
#infosec #pentest #redteam
malware.pizza/2020/05/12/eva…
HanseSecure GmbH retweeted
My #FF list. People with immense knowledge & experience.
@H3KTlC
@jwgoerlich
@PhillipWylie
@kim_crawley
@cyb3rops
@hacks4pancakes
@happygeek
@HackingDave
@CyberWarship
@shehackspurple
@NicoleBeckwith
@safe_secs
@UKZak
@cybersecboardrm
@ADanielHill
@j_opdenakker
HanseSecure GmbH retweeted
Hide your Powershell script in plain sight. Bypass all (a lot of ;-) Powershell security features
#infosec #pentest #redteam
github.com/OmerYa/Invisi-She…










