bofhound now supports parsing ldapsearch logs from Brute Ratel's LDAP Sentinel

RT @pentest_swissky: BOFHound: AD CS Integration by Matt Creel (@Tw1sm)

RT @SpecterOps: SlackPirate sets sail again! 🏴‍☠️ In his latest blog post, Dan Mayer intros his new PR to SlackPirate that lets you loot S…

RT @_xpn_: Achievement unlocked, my first blog with SoecterOps 🤗 This post looks at ADFS OAuth2 support, Device Registration, Enterprise PR…

Worked through the CloudBreach Breaching AWS course and exam over the last two weeks. Didn't see a ton of info out there on it prior to buying the course so wrote a small review with my thoughts

RT @hotnops: A new fun way to set shadow credentials

RT @0xthirteen: I’ve always thought Seatbelt was a great situational awareness tool, I created a python implementation of it. Due to the na…

RT @_Mayyhem: Want to move laterally from C2 on an Intune admin's workstation to any Intune-enrolled device? Check out Maestro ( https://t.c…

Updates also include the ability to parse log files from Havoc (support for a non-commercial C2), ideally making it easier for anyone who wants to test in a lab, or follow along with the blog

RT @0xthirteen: Looking around I hadn’t seen any python tools to interact with the registry that doesn’t use remote registry. So I made one…

@synzack21 And the link to those

RT @hotnops: It's alive! Apeman is a graph-based tool to model AWS IAM permissions. This marks the start of a new journey to methodically i…

RT @zyn3rgy: [Tool & Blog release] - smbtakeover, a technique to unbind/rebind port 445 without loading a driver, loading a module into LSA…

RT @its_a_feature_: The Mythic 3.3 Beta just dropped! All sorts of new features including a new Eventing System, more container types, more…

RT @sanjivkawa: I've made some long awaited updates to SQLRecon! Here's a couple of videos highlighting some of the big additions. Tool: h…

RT @FKasler: I can make you click a phishing link. Want to know how? Just click this link and I will teach you ;) Don't worry. This is not…

Catch up on Forrest's phishing blogs if you haven't been following. Whole series is 🔥

RT @nickvourd: Thanks @Tw1sm for this!