Joined February 2009
- Tweets 947
- Following 354
- Followers 980
- Likes 528
74 Photos and videos
Cedric Van Bockhaven retweeted
In one week I will be presenting at @SpecterOps SO-CON 2026 about CyberArk PAM. I will share our practical experience and insights on PVWA edge cases and CCP API misconfigurations. #SOCON2026
More information and registration: specterops.io/so-con/
5
12
1,844
Cedric Van Bockhaven retweeted
Feb 16
Pushed a major redesign and improvement of amsi.fail for the old-school PowerShell warriors out there. Includes five more recent patch methods and tons of fixes, thanks to my best friend Claude 🤠
2
21
97
6,152
Cedric Van Bockhaven retweeted
1. There's little to no value giving away someone's hard work to public only to feed threat Intel feeds, signature databases and APTs in return for a few likes and kudos 🙃
2. Private Discord servers offer Signal/Noise ~ 1.0 friendly atmosphere🫢
Initial Access Guild FTW! 🍻
Jan 25
Feels like the infosec scene on social media is drying up for some reason. My infosec list is mostly cat pics and a few blog posts now. Makes me wonder if people are just sucked in to AI at the moment.
And before anyone cries bluesky at me, I checked and for the most part it's a bunch of dead accounts and political takes over there also.
5
7
87
13,154
Added a feature to ADExplorerSnapshot script today to gather useful information about the environment via the classes, now it will tell you if SCCM, ADCS etc are active in the environment github.com/c3c/ADExplorerSna… . Thank you @c3c for the awesome tool and the quick PR approval
13
52
4,379
Cedric Van Bockhaven retweeted
Jan 21
📢 Big News! @mariuszbit is joining Outflank! He ticks all the boxes:
Experienced #offsec researcher ✓
Respected name in red teaming ✓
Built RMF tooling for initial access ✓
His work is coming to OST✓
The red hoodie fits perfectly ✓
Welcome Mariusz!
outflank.nl/blog/2026/01/21/…
9
9
67
12,537
I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-global…
138
903
3,186
475,262
Awesome work by Lance, clear write-up on the issue, the solution, a PR to ROADtools and more tradecraft!
10 Dec 2024
New blog post alert! 🚨
Lance Cain shares insights from a recent security assessment about the attack surface of Single-Page Applications integrated w/ Azure and how to aid technology professionals in securing their Azure environment. ghst.ly/4gq8E5y
1
26
72
9,861
Cedric Van Bockhaven retweeted
22 Nov 2024
My first blog with @falconforceteam! Check it out if you want to learn a few things about Azure DevOps.
22 Nov 2024
Scrum teams assemble! Many companies have incorporated an agile #SDLC into their operations. With using DevOps also come new risks. In this new series of blogs, we have a look into #Azure #DevOps #security from an attacker’s and defender’s perspective. falconforce.nl/azure-devoops…
1
5
589
Cedric Van Bockhaven retweeted
31 Oct 2024
🚀 We're hiring a DevOps/Cloud Engineer at Outflank!
Join us to build and manage complex Azure environments that deliver our OST toolkit.
Skills: Kubernetes (AKS), GitOps, IaC, Tekton, Python💻 It's NOT an offensive role!
Based in NL or a time zone-friendly region? Let's chat!
2
8
13
2,707
Cedric Van Bockhaven retweeted
15 Oct 2024
New Blog Alert! 🚨
Introducing Early Cascade Injection, a stealthy process injection technique that targets Windows process creation, avoids cross-process APCs, and evades top-tier EDRs.
Learn how it combines Early Bird APC Injection & EDR-Preloading: outflank.nl/blog/2024/10/15/…
4
182
427
36,220
Cedric Van Bockhaven retweeted
13 Aug 2024
Who’s the real #GrimResource? Spoiler: It’s us! 😏
Here's our latest blog on using MSC files for initial access: outflank.nl/blog/2024/08/13/…
Fun fact: @elastic’s post on this technique came from a sample caught by a blue team, originally used by a red team through our OST offering.
1
51
114
16,422
Cedric Van Bockhaven retweeted
26 Jun 2024
5
7
64
6,472
Cedric Van Bockhaven retweeted
3 Jun 2024
It's not *always* about Windows--macOS and Linux #EDRs need attention, too! In our latest blog, @kyleavery explains more about the telemetry sources for these under-discussed #endpoint products>
outflank.nl/blog/2024/06/03/…
1
49
94
27,589
Cedric Van Bockhaven retweeted
26 Jan 2024
We are thrilled to publish SOAPHound: a custom-developed data collector tool to enumerate Active Directory environments via the ADWS-protocol. Enjoy!
falconforce.nl/soaphound-too…
1
37
123
10,291
Cedric Van Bockhaven retweeted
12 Oct 2023
Truly an honor to be amidst such brilliant minds and passionate red teamers. 🔥 And those stroopwafels are simply the cherry on top! 🍒 Together with @tijme and @royrndrs 🥳
12 Oct 2023
A TLP RED conference for red teamers.
👌 quality content, some of the best red team firms present, and a group sized small enough so you can speak to everybody and discuss your ideas.
This is 🔥af and what we think confs should be like. We need more like this. #redtreat23
2
8
2,137
Cedric Van Bockhaven retweeted
12 Oct 2023
3 years ago, me, @StanHacked and @MarcOverIP set about creating our own con, built by red teamers for red teamers. Today it finally happened and it was 🔥 #redtreat23 @MDSecLabs @OutflankNL
11
21
164
55,809
Cedric Van Bockhaven retweeted
15 Aug 2023
Excited to finally publish research which in the background I have been working on for several years!😃
Introducing Living Off the FOREIGN Land (#LOFL), using a Windows VM over SOCKS as offensive platform✨
📖 blog.bitsadmin.com/living-of…
🏝 lofl-project.github.io/
More info ⬇️
ALT Illustration of the Living Off the Foreign Land (LOFL) setup where an attacker can use Living Off the Foreign Land Cmdlets and Binaries (LOFLCABs) go over the Linux routing VM which uses SOCKS to reach the target network.
12
235
583
161,171
Dank dat je bij ons was: voormalig journaalanker en boegbeeld van de nieuwsdienst Martine Tanghe is overleden vrtnws.be/p.w7KJOnbMJ?t=1690… #vrtnws
190
289
2,451
540,061