There are likely Ligolo servers on the Internet that you can connect to with a Ligolo agent. 1. Ligolo has 3 JARM signatures. 2. Ligolo-MP's JARM is the same as Sliver C2. 3. We do not advise or condone connecting to potential Ligolo servers. https://t.co/IYCIFmwEy5

ProxyBlob is alive ! We’ve open-sourced our stealthy reverse SOCKS proxy over Azure Blob Storage that can help you operate in restricted environments 🔒 🌐 https://t.co/KO4AYUDTmb Blog post for more details right below ⬇️

🇬🇧 DEFCON Paris on NOV-04 🇫🇷 DEFCON Paris le 04/11 - "New cyber visualisation tool", by Adem Ali Cherif - "RedTeaming and Tunneling – Stop using Raspberry Pi!", by Nicolas Chatelain (@Nicocha30) 📍 Le Carlie, 177 rue Saint Martin, Paris 🕖 19:00 🎟️

Wireless hacking doesn't have to be a mess of dongles and ad-hoc code anymore. Yesterday @virtualabs and @CayreRomain from @Eurecom released WHAD, a set of open source tools, libraries and firmware to make wireless security research easier. The code repo: https://t.co/KtacDBecg7

How to fix the Crowdstrike thing: 1. Boot Windows into safe mode 2. Go to C:\Windows\System32\drivers\CrowdStrike 3. Delete C-00000291*.sys 4. Repeat for every host in your enterprise network including remote workers 5. If you're using BitLocker jump off a bridge

💪🏻

Plans to literally "hack the planet" foiled due to 500ms of latency that Andres instinctually investigated. The latency was due how the malicious code parsed symbol tables in memory. https://t.co/WNExkhVbTx

“It’s almost like people are making more money teaching hacking than actually doing it.” -- @assume_breach https://t.co/2OIGpqk7hS ^ 100% true statement, and most don't teach good habits, they teach run and gun cowboy BS.

LocalPotato - When Swapping The Context Leads You To SYSTEM

#Cloning #Fingerprints Like A Boss: 101 Edition https://t.co/KqFMAhYznK

Lol?

A fun little canary for you all in cyber defence to help detect breaches/data theft. QT & MP4 files can reference external urls via 'rdrf' sections. These can be URLs and thus you can get a DNS resolution and/or HTTP request on open. Have an MP4 working example in VLC...

CVE-2020-19909 is everything that is wrong with CVEs Another 9.8 CRITICAL curl problem. All made up. https://t.co/iiWAnJHCYh

Our team released a new PoC of the recently discovered Nerftoken antivirus bypass technique, written in Golang! https://t.co/Mq1sHE1j6r #golang #nerftoken #pentest #avbypass #infosec #redteam

We can confirm that VMWare vCenter is affected by the Log4j vulnerability. #log4j #vcenter #Log4Shell

Our IT Security Lab discovered several critical vulnerabilities affecting Cobbler <= 3.2.1 https://t.co/YUbnROJDDR We would like to thank @cobblerproject and @SUSE for seriously and quickly handling this vulnerability. #oss #vulnerability #security

In 2020, we discovered a vulnerability in Sonos speakers and worked with them following a Responsible Disclosure policy. Very smooth and kind collaboration, thanks @Sonos! https://t.co/VRMuq3zavr #Hardware #Hacking #Infosec #IoT #pcileech

We released our first public tool, Ligolo-ng : An advanced, yet simple, tunneling tool that uses a TUN interface. https://t.co/RdaXbSW2FW #redteam #pentesting #pentest #infosec #golang

The Corellium Cloud has been updated to support the latest iOS 14.5! ✨📱 Want to start testing your apps without the need to jailbreak your device? Corellium makes it possible for as little as $0.50/hour, with fully integrated security testing tools! https://t.co/XpMpAUcfFa

New Post: The Universal Loader for Go