kinako
@kinako_software
Followers
3K
Following
47K
Media
486
Statuses
13K
Redteamer@🇯🇵 / OSCE3
Joined September 2018
昨日はCTFer時代からの友人とロシア料理を頂いてきました！ お互いCTFからは離れてしまったけど、こうした繋がりが続くのはありがたいですね😌
0
0
30
Exciting news, infosec community! 🎉 The Call for Proposals for x33fcon is officially OPEN! Got a brilliant talk idea, a hands-on workshop, or an in-depth training you're eager to share? We want to hear from you! Conference dates: June 11-12, 2026 Training dates: June 8-10,
1
11
32
1ヶ月かけて250ページの英文を読みつつrevを頑張り、やっと脆弱性のあるコードブロックに到達... exploit developmentとはこういうもの、という著者の声が聞こえてきた(助けてw)
0
0
10
👀
''When Azure Relay Becomes a Red Teamer’s Highway – Hackers Hermanos'' #infosec #pentest #redteam #blueteam
https://t.co/74Btyja0Db
0
0
3
AVTokyoに参加予定でAWE受講された方がいらっしゃれば是非対面でお話ししたいのですが、TLにいらっしゃったりするかな…？😳
2
1
16
I reported a tiny bug to BitDefender. They handled it very kindly and added me to their Hall of Fame😄 Might write a blog post in the future. Bug Bounty Hall of Fame
bitdefender.com
1
0
8
haha nice naming(石鹸🧼)
Finally releasing Sekken-Enum, an ADWS enumeration BOF we've been using internally for a while now. Based on the research from SOAPHound/SoaPy moving away from relying on .NET execution or proxying. Output works with BOFHound for Bloodhound ingesting. https://t.co/wVF2safhXC
0
0
7
This commit on July 17 removed DevToolsDebuggingRestrictions feature so now it is impossible to bypass --user-data-dir flag🤮 https://t.co/Fz8RNAj5bZ
github.com
This feature has been enabled since Chrome 136 and there is no need to have it around any more. Tests that relied on the feature to control behavior are reworked to use a ForTesting interface to m...
0
0
6
Dumping LSASS is old school. If an admin is connected on a server you are local admin on, just create a scheduled task asking for a certificate on his behalf, get the cert, get its privs. All automatized in the schtask_as module for NetExec 🥳🥳🥳
5
192
929
woah interesting...
Since this is on here now, here's how to avoid the ADExplorer `(objectGUID=*)` IoC
0
1
1
My PR for https://t.co/JmXAdJJa56 just got merged. cert_dump.py now runs without errors! Fix import errors and undefined constants in cert_dump.py by KinakoExE · Pull Request #73 · c3c/ADExplorerSnapshot.py · GitHub
github.com
@c3c Hello, thank you for the great project. I noticed that cert_dump.py no longer works due to some import errors and undefined constants. After investigating, I found that the issues are similar ...
0
0
10