58 Photos and videos
Goad v3 merged into the main branch 🥳
Github : github.com/Orange-Cyberdefen…
Doc : orange-cyberdefense.github.i…
19
158
557
37,172
Mayfly retweeted
Jun 10
MSSQL has always been a favorite target. Now it ships its own egress channel.
@gershsec's latest research breaks down how SQL Server 2025's native AI features enable exfil, NTLM coercion, and C2 transport, all functioning as intended.
Read more 👇 ghst.ly/4e2L3JX
65
223
16,408
Mayfly retweeted
🎙 Retrouvez ce vendredi à Bordeaux nos speakers à l'événement @Sthack
🔸 @0x3lk : "Runtime blindspot : Abusing .NET Runtime Internals to Evade EDRs "
🔸 @M4yFly : Red Team : "20 missions plus tard : Autopsie de quatre années de mutation offensive"
👉 ow.ly/Zp1Y50Z4XkJ
3
9
1,838
Mayfly retweeted
May 2
Successfully Found my way up to Domain Admin
I made a walkthrough on how i did that here bl4ckarch.github.io/posts/GO…
Feel free to come and discuss about it 😉
3
33
124
6,669
Mayfly retweeted
May 1
@Octoberfest73 I remember you once posted a quirk of impacket that could be used as an ioc so I thought you’d like this list of 50 impacket IOCs😄 github.com/ThatTotallyRealMy…
3
55
229
24,655
Mayfly retweeted
Apr 30
This second blogpost concludes @yaumn_'s research on #Windows authentication reflection.
He discloses the new Kerberos authentication coercion technique he discovered to remotely compromise Windows systems 💥
A little bonus is even included at the end 👀👇
synacktiv.com/en/publication…
2
56
125
11,753
Mayfly retweeted
Apr 27
Authentication reflection attacks are still not dead!
In our new blogpost series, @yaumn_ shares his journey into bypassing the mitigations of CVE-2025-33073 to pop SYSTEM shells again🚀
👇
synacktiv.com/en/publication…
2
55
153
15,695
Mayfly retweeted
Apr 29
If you want to contribute to Hacker Recipes:
github.com/The-Hacker-Recipe…
Guide for authors:
thehacker.recipes/contributi…
The site needs more authors, anyone has interesting techniques to share —> PR plzzzzzz 🙏
2
11
35
3,324
Mayfly retweeted
The site needs more authors, anyone has interesting techniques to share —> PR plzzzzzz 🙏
2
5
14
4,571
Mayfly retweeted
Apr 14
Just shipped GraphSpy v1.7.0 ✨
Mostly under-the-hood work this time with major refactoring to speed up future development ⚙️
Huge shoutout to n3rada for leading the effort!
More exciting features coming soon 🚀
github.com/RedByte1337/Graph…
1
12
39
2,852
Mayfly retweeted
Publicly disclosing the bluehammer exploit, at the time of writing this, this vulnerability is still unpatched.
Full PoC source can be found here -
deadeclipse666.blogspot.com/…
22
155
923
274,256
Mayfly retweeted
Mar 24
Thanks to Azox, it is now possible to use psexecsvc (github.com/sensepost/susinte…) through a socks proxy like ntlmrelayx allowing executing system commands via a trusted service, as NT System, and evading EDR's. Also thanks to @HackAndDo for his fixes :D
2
74
238
12,465
Mayfly retweeted
Mar 24
If #RBCD has been thoroughly documented, only a few resources mention the workflow in cross-domain environment.
In our new blogpost, we dive into the cross-domain and cross-forest RBCD workflows.
Read it here 👇
synacktiv.com/en/publication…
44
108
10,153
Two bugs. One chain. Full RCE.
New research by Aleksandr Zhurnakov on Dell Wyse Management Suite shows how business logic flaws can be chained into complete system compromise.
Read the full writeup!
swarm.ptsecurity.com/busines…
1
80
345
25,111
Mayfly retweeted
Mar 19
Who knew a really long string could make an Entra ID login disappear from the logs entirely? In our #blog, @nyxgeek breaks down how overflowing #Azure's sign-in logging mechanism allowed access tokens to be issued without a single log entry. Read it now! hubs.la/Q047xTVc0
5
112
456
159,498
Mayfly retweeted
🏟️ Ludus launched 2 years ago and the community embraced and extended it with write-ups, roles, configs, and environments. We're excited to see what you build with Ludus 2! (1/4)
3
21
82
8,679
Mayfly retweeted
Mar 11
GraphSpy: A Hacker's Tooling Deep Dive, video demos with the creator @RedByte1337! 🤩 Keanu shows me the wild things you can do for post-exploitation in Entra ID -- even adding a physical security key for persistence and a ton of other tricks 🤯 Video: youtu.be/qEtoKC32UoE
6
69
394
53,358
🔥🐉 New GOAD Lab: DRACARYS
I’ve just released a new free lab environment on GOAD: DRACARYS.
The challenge includes 3 VMs and the objective is simple:
Start with no authentication and work your way up to Domain Admin.
Have fun exploiting it! 🔥🐉
mayfly277.github.io/posts/Dr…
12
98
298
17,711
Mayfly retweeted
Mar 3
🚨 YGG — C’est terminé. #YGGdown
Les serveurs auraient été vidés, puis détruits.
Dans un article publié sur yggleak.top/fr, Grolum détaille la compromission totale de l’infrastructure (code, bases, configs, logs), sur fond de crise autour du “Turbo Mode” et de la monétisation.
YGGLeak affirme aussi que le catalogue de torrents aurait été préservé avec l’aide du projet U2P, et annonce :
- un tracker temporaire : ygg[.]gratis
- des “nouveaux trackers” et une migration via ygg[.]gratis
98
235
1,688
418,480
Mayfly retweeted
Feb 26
Stuck Without Coercion options? Why not just Coerce MDE? medium.com/@Sniffler/stuck-w…
2
30
107
10,096