Joined March 2016
- Tweets 237
- Following 106
- Followers 1,738
- Likes 265
42 Photos and videos
Arris Huijgen retweeted
Mar 28
Small updated to DRSAT just pushed that will also allow Group Policy Editor and Certificate Authority / Templates MMC snap-ins work over a TCP only SOCKS connection.
github.com/CCob/DRSAT
4
62
155
14,915
4 Nov 2025
Because the last release of #NoPowerShell was 2 years ago and to celebrate the repo has 999 stars, I just merged DEV ➡️ MASTER and published Release 1.50 containing over 60 offensive cmdlets! 🥳
github.com/bitsadmin/nopower…
See examples of some of the cmdlets below 👇
1
46
139
8,358
4 Nov 2025
🔎 Inspecting ACLs and file hashes using the Get-Acl and Get-FileHash cmdlets.
1
222
4 Nov 2025
Many more examples are in the CHEATSHEET at github.com/bitsadmin/nopower… or use the Get-Help/man command followed by the cmdlet, e.g. man iwr.
Regularly new cmdlets are added in NoPowerShell's DEV branch so keep an eye there to get the latest and greatest! 🔥
github.com/bitsadmin/nopower…
1
2
201
Arris Huijgen retweeted
21 May 2025
🚀 We just released my research on BadSuccessor - a new unpatched Active Directory privilege escalation vulnerability
It allows compromising any user in AD, it works with the default config, and.. Microsoft currently won't fix it 🤷♂️
Read Here - akamai.com/blog/security-res…
22
371
876
167,702
Arris Huijgen retweeted
16 May 2025
What if you skipped VirtualAlloc, skipped WriteProcessMemory and still got code execution?
We explored process injection using nothing but thread context.
Full write-up PoCs:
blog.fndsec.net/2025/05/16/t…
6
75
222
13,869
Arris Huijgen retweeted
7 May 2025
Blogpost from my colleague about what’s still possible with recently published COM/DCOM toolings, Cross Session Activation and Kerberos relaying 🔥
r-tec.net/r-tec-blog-windows…
3
111
304
26,067
ProxyBlob is alive ! We’ve open-sourced our stealthy reverse SOCKS proxy over Azure Blob Storage that can help you operate in restricted environments 🔒
🌐 github.com/quarkslab/proxybl…
Blog post for more details right below ⬇️
29 Apr 2025
Look at those cute little blobs in your internal network. They look harmless, but how about the one carrying SOCKS? It's ProxyBlob, a reverse proxy over Azure.
Check out @_atsika's article on how it came to exist after an assumed breach mission ⤵️
👉 blog.quarkslab.com/proxyblob…
ALT Proxybloby is the red teamer's mascot. Be careful, if left alone in you network it will byte your SOCKS
3
45
111
9,155
29 Apr 2025
Cool, novel, lateral movement technique by @william_knows by dropping a .dll file on a remote host obtaining code execution! 💡
28 Apr 2025
.NET GAC and NIC hijacking for lateral movement: williamknowles.io/net-gac-an…
23
153
16,932
Arris Huijgen retweeted
24 Apr 2025
I just published a blog post where I try to explain and demystify Kerberos relay attacks. I hope it’s a good and comprehensive starting point for anyone looking to learn more about this topic. ➡️decoder.cloud/2025/04/24/fro…
2
150
352
19,640
Arris Huijgen retweeted
14 Apr 2025
The S is for Security. How to use WinRMS as a solid NTLM relay target, and why it’s less secure than WinRM over HTTP. By @Defte_
Writeup: sensepost.com/blog/2025/is-t…
PR to impacket:
github.com/fortra/impacket/p…
Demo: youtu.be/3mG2Ouu3Umk
1
43
119
9,938
Arris Huijgen retweeted
3 Feb 2025
We’re glad to announce we released Soxy!🚀
A Rust-powered suite of services for Citrix, VMware Horizon & Windows RDP.
Red teams & pentesters can use it to pivot for deeper access.
Get the tool and more details: 🔗 github.com/airbus-seclab/sox…
61
147
7,472
Your laptop was stolen. It’s running Windows 11, fully up-to-date, device encryption (BitLocker) and Secure Boot enabled. Your data is safe, right? Think again! This software-only attack grabs your encryption key. Following up on our #38C3 talk: neodyme.io/blog/bitlocker_sc…
2
29
85
5,923
How to bypass BitLocker encryption on Windows 11 noinitrd.github.io/Memory-Du…
42
167
12,371
Just released SCCMHound! A BloodHound collector for SCCM. SCCMHound allows both attackers and defenders to construct BloodHound datasets using the vast
amount of information that is stored/retrievable through SCCM. Feel free to take it for a spin!
github.com/CrowdStrike/sccmh…
101
341
26,953