InfoSec Professional | Trainer | Developer | ADRecon | AzureADRecon | OzHack
Sydney, New South Wales
Joined May 2008
- Tweets2.2K
- Following490
- Followers1.4K
- Likes244
Prashant Mahajan retweeted
Starting on November 4th, Entra ID users will be able to create agent identity blueprints unless this capability is disabled. I strongly recommend you disable this capability so you don't have users creating agent identity blueprints.
There's a setting to turn this off in Entra ID under User Settings: "Users can register agent blueprints".
Switch it to "No" to prevent users from being able to do this.
Agent identity blueprints are templates that define identity configuration and credentials for AI agents. This is similar in capability to app registrations but for agent identities.
Allowing all users to create blueprints has similar risk to allowing all users to register applications (default is enabled as well). When a user creates an agent identity blueprint, they become the owner of it until removed. This provides full control access to the blueprint.
Agent ID Developer and Agent ID Administrator will still have the ability to create them.
More details here (including searching for existing blueprints):
lazyadmin.nl/office-365/micr…
Prashant Mahajan retweeted
1/2
LDAP signing was supposed to stop NTLM relay to LDAP. I found a way to relay coerced SMB auth to a DC with LDAP signing and channel binding enforced.
Patched in October.
Blog: specterops.io/blog/2026/10/2…
PoC: github.com/grayhatkiller/swi…
Prashant Mahajan retweeted
T2 Training Is LIVE at c0c0n 2026
The pre-conference sessions are in full swing at Grand Hyatt Kochi, with T2 LIVE NOW.
Participants are deep into the session, engaging with the training and putting their knowledge into practice as the c0c0n 2026 pre-conference programme continues.
Pre-Conference Trainings | 6–8 October 2026
Grand Hyatt Kochi
The room is active. The learning is underway.
#c0c0n2026 #c0c0n #CyberSecurity #SecurityTraining #CyberSecurityTraining #InfoSec #Kochi
Prashant Mahajan retweeted
Microsoft has dropped CVE-2026-69730: a Windows DNS Server RCE with a 9.8 CVSS score.
No authentication. No user interaction. Low complexity. No mitigation. No workaround.
Basically, it doesn’t knock on the door; it lets itself in, makes a brew and starts executing code.
Patch it. 😂
Prashant Mahajan retweeted
If you’ve ever wanted to learn more about Active Directory, now is your chance.
A list of Active Directory Domain Services modules on Microsoft Learn sorted from introductory to advanced.
Thank you Orin!
techcommunity.microsoft.com/…
Prashant Mahajan retweeted
🚨 Proxmark5 Iceman Edition by @RFIDResearch is now in stock at OzHack 🇦🇺
Tri-band RF • WiFi + BLE • Battery Add-On • Built for RFID/NFC research.
Shop now:
ozhack.com/products/proxmark…
#OzHack #Proxmark5 #RFID #NFC #CyberSecurity
🤖 Made with AI
Prashant Mahajan retweeted
Big week for Proxmark5.
The GitHub PR for the Proxmark5 firmware lands this week.
If you ordered the black case, good news: we are fulfilling all black case orders first, both pre-DEF CON and post-DEF CON. Production is running at 400 units a day. 1600 units have already shipped as of today. Most backers will have tracking numbers this week heading into DEF CON.
This is really happening.
Prashant Mahajan retweeted
For those that missed it the Active Directory tier model documentation recently had a huge uplift, and even more importantly, the scripts used to configure your AD in line with this tiered model (tier 0-1-2) have been fully open sourced for your use.
The updated repo also contains scripts to audit drift from the baselines, and a detailed FAQ to help you deploy the model.
github.com/microsoft/ActiveD…
Prashant Mahajan retweeted
Just open-sourced CredSpy
Couldn't find any tools that allowed unauthenticated enumeration of auth methods for @Microsoft accounts, so I created it.
Shows whether target accounts use Passkeys, certificate auth, passwordless push, etc...
Find it here: github.com/RedByte1337/CredS…
Prashant Mahajan retweeted
PositiveIntent - Evasive loader for .NET Framework assemblies github.com/depthsecurity/Pos… #redteam
Prashant Mahajan retweeted
c0c0n Training Announcement
Applied Infrastructure Security Assessment – 3 Day Intensive Workshop
Step into the world of real-world enterprise attacks with this hands-on, deep-dive training designed for security professionals who want to go beyond theory and into action.
What to Expect:
▪️ End-to-end attack lifecycle: from reconnaissance to full compromise
▪️ Internal pivoting & Active Directory exploitation
▪️ Bypassing layered defenses in hardened environments
▪️ Developing and adapting real-world exploits
▪️ Leveraging AI in modern penetration testing
▪️ Immersive, realistic lab environment
Outcome:
▪️ Walk away with practical skills, real attack experience, and the confidence to assess complex enterprise infrastructures.
Trainers:
▪️ @gehaxelt – Technical University of Berlin, Germany
▪️ @prashant3535 – Payatu Australia Pty Ltd, Australia
Limited seats. High impact. Real skills.
For more information, visit - c0c0n.org/applied-infrastruc…
Prashant Mahajan retweeted
"Why take notes?"
Not to collect. To think.
Note-taking frees your mind in the moment and gives you building blocks for the future. Capture ideas like LEGO bricks: small, atomic, reusable, composable.
Prashant Mahajan retweeted
Brief announcement: Launching Unprompted.au later this year in Sydney — a new conference focused on offensive and defensive security research using AI, and on how AI is reshaping the field. Sister conference to Unprompted. Follow @UnpromptedAU for updates.
Prashant Mahajan retweeted
Releasing KslKatz. Combining KslDump and GhostKatz to dump LSASS using no-fix KslD.sys memory read to bypass PPL. Extracts MSV1_0 NT hashes and WDigest cleartext passwords (if enabled) from LSASS using a Microsoft-signed driver.
github.com/S1lkys/KslKatz
Prashant Mahajan retweeted
🔮 What does the future of cybersecurity look like? That's the question at the heart of #NullconGoa2026 CFP.
If your work pushes boundaries, challenges the present, and dares to predict what's next, we want your voice on our stage.
👉nullcon.net/goa-2026/cfp
#CFP #cybersecurity
Prashant Mahajan retweeted
Dumping LSASS is old school. If an admin is connected on a server you are local admin on, just create a scheduled task asking for a certificate on his behalf, get the cert, get its privs. All automatized in the schtask_as module for NetExec 🥳🥳🥳
Prashant Mahajan retweeted
AWSDoor: Persistence on AWS riskinsight-wavestone.com/en…
Prashant Mahajan retweeted
For those of you who couldn't make it in person today, join us online at youtube.com/watch?v=jC1jxbsB…
Prashant Mahajan retweeted
Cybersecurity enthusiasts in AU & NZ, prepare to be electrified! OzHack is now an official reseller of @electronicats
New Arrivals - Faulty Cat & CatSniffer
Best-selling gear is back in stock - Flipper Zero Add-Ons - Modbus, Magspoof & CANBus
ozhack.com/collections/elect…
