RedTeam | PurpleTeam | PenTest | Chef . Views are mines 🇬🇧🇸🇬
Joined April 2018
- Tweets 276
- Following 838
- Followers 1,221
- Likes 59
34 Photos and videos
Pinned Tweet
8 Feb 2024
Full access now and no more issue with UAC.
1
3
32
4,359
Apr 14
One way to get around MOTW is to use ClickOnce to download a malicious doc. Since dfsvc.exe handles the download, the file doesn’t get tagged with the MOTW flag.
1
11
90
4,408
Weasel Sec retweeted
Apr 1
I uploaded all the malware samples used in my book #EvasiveMalware to my Github:
github.com/d4rksystem/Evasiv…
I received some questions about the lab samples, so just posting it for everyone here 🤓
4
79
338
12,767
Weasel Sec retweeted
Mar 15
Bypassing EDR in a Crystal Clear Way lorenzomeacci.com/bypassing-…
1
13
47
3,732
Weasel Sec retweeted
Feb 13
Why yes, yes we can use ESTSAUTH captured from evilginx to automatically register a passkey
Feb 9
This is super cool! (just catching up late after the weekend)
Is it possible to generate that passkey using the previously captured cookies or tokens, through phishing? (using browser cookies in general)
4
31
129
34,857
Weasel Sec retweeted
7 Aug 2025
GitHub - bats3c/shad0w: A post exploitation framework designed to operate covertly on heavily monitored environments github.com/bats3c/shad0w
2
50
240
15,564
Weasel Sec retweeted
25 Apr 2025
Goexec is a new take on some of the methods used to gain remote execution on Windows devices. Goexec implements a number of largely unrealized execution methods and provides significant OPSEC improvements overall
falconops.com/blog/introduci…
Github repo:
github.com/FalconOpsLLC/goex…
3
110
305
15,374
Weasel Sec retweeted
16 Dec 2024
I FINALLY got call stack spoofing working inside BeaconGate.
7
25
206
16,780
23 Oct 2024
Raw payload. No obfuscation, nothing. Just 9.31MB in size.
8
17
2,660
23 Oct 2024
Now, same payload increased to 250MB. Just added a lot of null bytes after the raw payload:
4
6
376
Weasel Sec retweeted
18 Oct 2024
🚨EDR Telemetry website is live! 🥳
I hope this makes it even easier for folks to compare the telemetry of EDR vendors and visualize their visibility gaps 🙂
‣ Website🔗edr-telemetry.com
‣ GitHub 🔗github.com/tsale/edr-telemet…
**Telemetry results reflect the most recent updates from the EDR Telemetry project.
14 Oct 2024
I created the first draft of a website for the EDR telemetry project to help people quickly compare vendor telemetry visibility. What do you think about it? Are there any specific features you want to see for the website?
Built with ChatGPT 4o with canvas (wanted to test it out😂)
EDR Telemetry project 🔗: github.com/tsale/EDR-Telemet…
19
281
890
127,221
0xC2 is now available and the site has been updated with a brief introduction
0xc2.io/posts/introduction-a…
10
57
231
22,932
Weasel Sec retweeted
14 Sep 2024
After a bit of trickery (inline-assembly and stack pivoting), No-Consolation can now run a PE within the main thread, meaning no new threads are created
github.com/fortra/No-Consola…
6
51
202
20,346
Weasel Sec retweeted
27 Jun 2024
Didn't check the code yet, but looks like SilverPotato and CertifiedDCOM have a working public weaponized tool by now:
github.com/CICADA8-Research/…
That's huge news from my perspective🔥
5
151
396
27,725
How named pipes and Powershell could be used for creating Windows bind / reverse shell re-using Windows SMB port ? I show you in this blog post 😉
v1k1ngfr.github.io/fuegoshel…
2
31
100
6,722
1 Apr 2024
For OPSEC, always specify the baseDN when using impacket or it will attempt an SMB authentication to derive the baseDN which can lead to detection.
7
44
2,803
1 Apr 2024
Some LDAP tools supporting channel bindings include SharpView, AD Explorer, and Certipy. While you can still use SharpHound, it's limited to DCOnly parameter, thereby ignoring LDAP.
5
28
3,183
21 Mar 2024
Apparently, ldap3 library doesn't support channel binding nor signing so how do I get impacket to work for Kerberoasting if this's the case ?
1
3
963
20 Mar 2024
setspn -T [domain] -Q */* is the best command for situational awareness. It helps you to identify Kerberoasting accounts, exchange servers, SQL servers, LDAP servers, domain computers, DCs, ADCS, potential RDP/WinRM hosts, shared folders, etc.
1
4
42
4,086
15 Mar 2024
I just found out you can just use net1.exe instead of net.exe.
2
1
8
832