#redteamers — Public Fediverse posts

#Identity Providers for #RedTeamers 🚩

// by @xpn

https://blog.xpnsec.com/identity-providers-redteamers/

Join us next week at #FiestaCon - formerly ArcticCon - for a presentation by @moloch, "Offensive #WASM." This is an in-person conference by #RedTeamers for Red Teamers. See more details on the presentation below:

"Offensive WASM"

A brief history of WASM/WASI and then dive into the upcoming Sliver v1.6 release, which includes a prototype feature that allows operators to encode C2 traffic using WASM-based callback functions. These WASM-based encoder functions can be dynamically loaded at runtime by both the server and the implant. We’ll discuss the limitations of the technology (e.g., performance), how the network encoder interface works, as well as potential future applications of the technology.

Find more info here: https://bfx.social/3yaCk2g

Hey #pentesters and #redteamers

Is there any cyber conference worth attending in Europe?

#infosec #blueteam #redteam #dfir #pentesters #redteamers

#hack100days : Day 3b : Working on cleaning up notes from yesterday. Need to capture lesson learned from Friday, as well--when searching for vhosts using fuff, check the http headers to see if "Host: FUZZ.${TARGET}" or "Host: FUZZ" is needed.

Also a note for #redteamers, are you testing USB detective controls every now and then? My next test is going to be with a #FlipperZero--if the tooling doesn't recognize it, gonna amp it up w/some BadUSB shennanigans. #infosec

🐮 A Pirate Moo's Pentest Checklist

A working/living curated checklist that can be modified as needed for various pentest engagements. Please feel free to build, modify and edit this list as you like.

https://github.com/piratemoo/pentestchecklist

Oi! #redteamers! For inside services, do you carry out any password spray attack exercises? #redteaming #redteam