Go to your camera roll and search “boat” and post one that you like

Show Post

A #BloodHoundBasics reminder from @scoubi.bsky.social ⤵️ Not into live chat? Join our new SpecterOps & BloodHound Community subreddit! Come for the AMA, stay for the discussions: https://www.reddit.com/r/SpecterOpsCommunity/

Show Post

Friday afternoon (vibe)coding project that was on my to-do for a while: obtaining Entra ID tokens from an endpoint by asking the WAM. This alternative to using the PRT cookie follows the legitimate SSO flow used by apps like Teams to obtain tokens. Code: github.com/dirkjanm/ask...

Show Post

Microsoft's 6-year-old Zerologon patches use AES-CFB8 incorrectly. The novel Onelogon attack provides two ways to take over a vulnerable AD account in apx 30 minutes. #AESCFB8fail #WONTFIX softsec.link/woot26.onelo... @al3x-n3ff.bsky.social @kevin.borgolte.me @ruhr-uni-bochum.de

Show Post

Supply chain attacks propagate through relationships. Shai-Hulud 2.0 proved it. JD Crandell breaks down the worm used in the attack as an attack graph & introduces NPMHound, which can be used to model NPM dependencies in BloodHound. Read for more! https://ghst.ly/46BMRFz

Show Post