@_Hubbl3

CEO at BC Security LLC Infosec Professional | Engineer | Skier

Joined February 2020
  • Tweets444
  • Following25
  • Followers483
1Media
Our new #blog from @_Hubbl3 breaks down how Offensive IronPython techniques remain a powerful threat to networks, even 4 years after Turla's initial deployment of these TTPs.

20
86
4,056
Code & Cask | IronPython TTPs xitter.cf/i/broadcasts/1LyGBgXze…
3
2
527
I'll just leave this here with a reminder that a free workshop is starting at noon est logout.gitbook.io/ad-privesc…

SANS Workshop: Active Directory Privilege Escalation with Empire! | AD Privesc with Empire

Welcome to this workshop where we are going to dive into a core active directory component - Kerberos!

sec565.gitbook.io
2
48
1
183
11,957
Empire has come a long way since its humble beginnings. If you haven't used it in some time, take a look at how it's grown into a multi-language powerhouse. For our dedicated users check out the post for exciting news about the upcoming release!

1
14
39
2,486
Hubbl3 retweeted
Cx01N@Cx01N_20 Sep 2024
Most importantly, you will be "hacking" into Wells Fargoat as part of this class. Note: No goats were harmed in the making of this CTF.
BC Security@bcsecurity20 Sep 2024
Don't miss your chance to sign up and dive into the core principles of command and control frameworks while mastering Sliver. This course emphasizes practical, hands-on experience in a lab environment and concludes with an exciting capstone CTF challenge. Secure your spot now!

2
4
643
Don't miss the next episode of Code & Cask today at 5pm EST. We will be looking at python and webdav along with looking at Microsoft's new Python in Excel feature. twitch.tv/bcsecurity
1
1
570
Wow another wave of explosions in Lebanon through radios. Starting to think this is more about PsyOps and creating a deep mistrust of communication devices by Hezbollah
4
221
Does anybody know how/where you can download older versions of KB4052623 (i.e. Defender Definition Updates)? Microsoft Update Catalog only provides the latest version.
6
1
1
15
7,749
We are excited to be heading to @Blackhatmea! Come upgrade your skills with our Evasion course. Learn how open-source tools & custom toolsets remain stealthy through application of code obfuscation & TTPs like API unhooking & C2 traffic modification.

4
12
688
BlackSuit Ransomware 🌟Analysis & reporting completed by @MetallicHack, @yatinwad, & @malforsec. 🎵Audio: Available on Spotify, Apple, YouTube and more! 📚Report: thedfirreport.com/2024/08/26…

BlackSuit Ransomware - The DFIR Report

Key Takeaways In December 2023, we observed an intrusion that started with the execution of a Cobalt Strike beacon and ended in the deployment of BlackSuit ransomware. The threat actor leveraged...

thedfirreport.com
1
52
3
129
14,180
Interested in getting started with offensive security? Our new Sliver Ops course is designed as an introduction to command and control frameworks, guiding students through the basics of the Sliver framework while familiarizing them with attacking Windows and Linux systems

9
2
39
22,358
On today's episode of "do you know your tools", did you know that both CrackMapExec and NetExec both make TWO connections to each target? And that the first one (for enum) uses an empty user/hostname/domain name? And that both connections ALWAYS try SMB1 first?
5
48
1
248
23,489
For more context: thehackernews.com/2024/08/mi…

Microsoft Patches Zero-Day Flaw Exploited by North Korea’s Lazarus Group

North Korean hackers exploit Windows zero-day flaw for system privileges. Microsoft patches vulnerability in June update.

thehackernews.com
BC Security@bcsecurity19 Aug 2024
Lazarus Group continues to enhance their capabilities, deploying zero-days such as CVE-2024-38193 for privilege escalation, enabling BYOVD TTPs, & advancing their financial goals. Take a deep dive into their TTPs & learn to emulate them in our latest Empire Ops: Tactics course

92
As we come back from Hacker Summer Camp, we will be moving Code & Cask to every other Thursday. Join us tomorrow for a review of the happenings at @defcon and, as always, some new code development.
1
2
8
926
Did hacker summer camp spark an interest in upgrading your skills? Checkout some of our upcoming live and on-demand courses. If you stopped by @RedTeamVillage_ don't forget to use your discount code!

2
5
824
Goodbye @defcon. See you next year!
4
36
1,312
Amazing party put on by @RedTeamVillage_! Glad to be able to support the village and meet some talented hackers last night.
3
12
1,458
Empire 5.11 is now public - Just in Time for @defcon! - @CrowdStrike Emulator (Invoke-BSOD) - ThreadlessInject - IronPython Ticketdumper

4
57
2
223
15,507
The @EmpireC2Project challenge coin is awesome! Long Live Empire!
1
4
1
15
1,367
We will be showcasing Moriarty at both Black Hat Arsenal and DEF CON Demo Labs! Come learn how you can leverage it to identify potential local privilege escalation paths Black Hat - Aug 7, 1:55pm blackhat.com/us-24/arsenal/s… DEF CON - Aug 10, 2pm defcon.org/html/defcon-32/dc…
1
2
533
Load more