ret2src
@ret2src
Followers
352
Following
1K
Media
20
Statuses
687
Breaker of Stuff | Injector of 0x41 | Discoverer of Dumb Things | Creator of Glitches. Dropping shells since 0x7DC.
On your Domain Controller
Joined July 2021
Here we go again, more hardcoded Cisco creds.
lefover root credential 🫨. 🟥 CVE-2025-20309, CVSS: 10.0 (#Critical, #Highest). #Cisco Unified Communications Manager and Session Management Edition. #Vulnerability allows unauthenticated remote access via static root credentials. #CyberSecurity #CVE.
0
1
0
RT @vxunderground: There's a guy on Xitter who claims to be the highest IQ person in the world and he is, quite possibly, the best scammer….
0
122
0
Had this exact same scenario a few weeks ago. root:calvin to DA.
iDRAC to Domain Admin.
0
0
0
RT @MarcOverIP: Go read this if you’re into EDR evasion. Its *really* cool research. Plus lots of details in the blog post 👌.
0
9
0
RT @al3x_n3ff: Did you know that you can kerberoast without any valid credentials? All you need is an account that is ASREProastable. This….
0
115
0
If, like me, you're wondering what this magical string "srv11UWhRCAAAAAAAAAAAAAAAAAAAAAAAAAAAAwbEAYBAAAA" does or means: It's seemingly additional information added to the SPN and interpreted by Microsoft's SMB client implementation (see
0
1
2
This is huge. compromise any machine with SMB signing not enforced 🔥.
Microsoft just released the patch for CVE-2025-33073, a critical vulnerability allowing a standard user to remotely compromise any machine with SMB signing not enforced! Checkout the details in the blogpost by @yaumn_ and @wil_fri3d.
1
0
6
RT @xvonfers: 0day "In the Wild". Spreadsheet:. It is still updated regularly. https://t.co….
0
16
0
RT @RedTeamPT: Newer Windows clients often enforce signing ✍️ when using SMB fileshares. To quickly deploy an SMB server with signing suppo….
0
24
0
RT @infosec_au: We scanned 18,206,880 (us-east-1 AWS) hosts from outside of us-east-1 AWS on port 443, using masscan. This returned 2,574,….
0
4
0
RT @I_Am_Jakoby: well i have something unfortunate to share.last night they gave my bounty an important rating, but marked it out of scope….
0
37
0
RT @sekurlsa_pw: Great post with 3 mitigations:. 1️⃣ Add-BadSuccessorOUDenyACEs.ps1.This script will set 3 deny ACE….
0
29
0
RT @snovvcrash: Why're we still doing the Impacket thing when @skelsec's stuff is so sick?. (just kidding ofc, Impa….
0
55
0