Author | Lightnews

r1cksec

r1cksec

@r1cksec.bsky.social

510 followers 70 following 77 posts

Data breach revealed, Malware lurks, silent, stealthy - OSINT tracks the thread. https://github.com/r1cksec infosec.exchange/@r1cksec

Posts Media Videos Starter Packs

r1cksec @r1cksec.bsky.social · 5h

Nice post that describes multiple vulnerabilities in Ivanti DSM (Desktop and Server Managment) that can be used for credential extraction and lateral movement🕵️‍♂️

code-white.com/blog/ivanti-...

#infosec #cybersecurity #redteam #pentest #windows

CODE WHITE | Analyzing the Attack Surface of Ivanti's DSM

Ivanti's Desktop & Server Management (DSM) product is an old acquaintance that we have encountered in numerous red team and internal assessments. The main purpose of the product is the centralized dis...

r1cksec @r1cksec.bsky.social · 1d

USB Army Knife – the ultimate close access tool for penetration testers and red teamers🕵️‍♂️

github.com/i-am-shodan/...

#infosec #cybersecurity #pentest #redteam

GitHub - i-am-shodan/USBArmyKnife: USB Army Knife – the ultimate close access tool for penetration testers and red teamers.

USB Army Knife – the ultimate close access tool for penetration testers and red teamers. - i-am-shodan/USBArmyKnife

r1cksec @r1cksec.bsky.social · 3d

A .NET assembly tracer using Harmony for runtime method interception🕵️‍♂️

github.com/eversinc33/N...

#infosec #cybersecurity #pentest #redteam #windows

GitHub - eversinc33/NetRunner: A .NET assembly tracer using Harmony for runtime method interception.

A .NET assembly tracer using Harmony for runtime method interception. - eversinc33/NetRunner

r1cksec @r1cksec.bsky.social · 5d

Great post about how to crack password protected zip archives using known plaintext attack🕵️‍♂️

badoption.eu/blog/2025/04...

#infosec #cybersecurity #pentest #redteam #zip

Practical Known Plaintext Attack Against ZIP Files

Sometimes in a network far away, which is most of the time not yours, you might encounter ZIP files protected with passwords. For example, for source code archives, there is quite a good chance to dec...

r1cksec @r1cksec.bsky.social · 8d

Windows protocol library, including SMB and RPC implementations, among others🕵️‍♂️

github.com/trustedsec/T...

#infosec #cybersecurity #pentest #redteam #windows #opensource

GitHub - trustedsec/Titanis: Windows protocol library, including SMB and RPC implementations, among others.

Windows protocol library, including SMB and RPC implementations, among others. - trustedsec/Titanis

r1cksec @r1cksec.bsky.social · 8d

This repository contains a proof of concept demonstrating the ClickFix attack technique via email - a CSS-based social engineering attack where visible text differs from the actual copied content🕵️‍♂️

github.com/0xagil/Click...

#infosec #cybersecurity #redteam #pentest #phishing #email #opensource

GitHub - 0xagil/Clickfix-Email

Contribute to 0xagil/Clickfix-Email development by creating an account on GitHub.

r1cksec @r1cksec.bsky.social · 10d

The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments🕵️‍♂️

github.com/0xflux/Wyrm

#infosec #cybersecurity #pentest #redteam #c2 #opensource

GitHub - 0xflux/Wyrm: The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.

The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments. - GitHub - 0xflux/Wyrm: The dragon in the dark. A red team post exploitat...

Reposted by r1cksec

malmoeb.bsky.social @malmoeb.bsky.social · 13d

Today I learned: SeManageVolumePrivilege

While reading the HTB write-up for Certificate, I learned about SeManageVolumePrivilege. [1]

A video by Grzegorz Tworek goes into great detail about how to abuse SeManageVolumePrivilege.[2]

r1cksec @r1cksec.bsky.social · 11d

A golang based dotnet ysoserial poc generation tool. Operated by cursor and metasploit🕵️‍♂️

github.com/Esonhugh/yso...

#infosec #cybersecurity #pentest #redteam #opensource

GitHub - Esonhugh/ysoysoserial.net: a golang based dotnet ysoserial poc generation tool. Operated by cursor and metasploit

a golang based dotnet ysoserial poc generation tool. Operated by cursor and metasploit - Esonhugh/ysoysoserial.net

r1cksec @r1cksec.bsky.social · 12d

How attackers can craft XML files to achieve command exeuction in the context of the XWizard ecosystem🕵️‍♂️

www.hackcraft.gr/2025/10/xwiz...

#infosec #cybersecurity #pentest #redteam

XWizard: From XML to ShellExec Using Wizardry - Hackcraft

This article highlights unexplored attack surfaces in the XWizard ecosystem and aims to inspire research to discover additional exploitation primitives.

www.hackcraft.gr

r1cksec @r1cksec.bsky.social · 14d

This site can be used to analyze email headers🕵️‍♂️

mha.azurewebsites.net/pages/mha.html

#infosec #cybersecurity #pentest #redteam #phishing #email

Message Header Analyzer

mha.azurewebsites.net

r1cksec @r1cksec.bsky.social · 15d

A Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache🕵️‍♂️

github.com/Shac0x/Wonka

#infosec #cybersecurity #pentest #redteam #kerberos

GitHub - Shac0x/Wonka: Wonka is a sweet Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache. Like finding a ticket, but for security research and penetration test...

Wonka is a sweet Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache. Like finding a ticket, but for security research and penetration testing! 🎫 - Shac0x/Wonka

r1cksec @r1cksec.bsky.social · 16d

A specially crafted repository can lead to an arbitrary code execution in TruffleHog version 3.90.2🕵️‍♂️

talosintelligence.com/vulnerabilit...

#infosec #cybersecurity #pentest #redteam #git #opensource

TALOS-2025-2243 || Cisco Talos Intelligence Group - Comprehensive Threat Intelligence

talosintelligence.com

r1cksec @r1cksec.bsky.social · 17d

How attackers can exploit browser-cache-smuggling in combination with COM hijacking🕵️‍♂️

medium.com/@danemeth90/...

#infosec #cybersecurity #pentest #redteam #phishing #windows

Revisiting Browser Cache Smuggling

I recently came across an article detailing a campaign using browser cache smuggling and ClickFix to deliver malware to a system. I found…

r1cksec @r1cksec.bsky.social · 20d

ClickForClickOnce - Generate configurable clickonce payloads🕵️‍♂️

github.com/whokilleddb/...

#infosec #cybersecurity #pentest #redteam #opensource

GitHub - whokilleddb/ClickForClickOnce: ClickForClickOnce - Generate configurable clickonce payloads

ClickForClickOnce - Generate configurable clickonce payloads - whokilleddb/ClickForClickOnce

r1cksec @r1cksec.bsky.social · 23d

Protection against Model Serialization Attacks🕵️‍♂️

github.com/protectai/mo...

#infosec #cybersecurity #pentest #redteam #opensource #ai

GitHub - protectai/modelscan: Protection against Model Serialization Attacks

Protection against Model Serialization Attacks. Contribute to protectai/modelscan development by creating an account on GitHub.

r1cksec @r1cksec.bsky.social · 24d

A Beacon Object File (BOF) for Active Directory enumeration through Active Directory Web Services (ADWS) compatible with BOFHound🕵️‍♂️

github.com/Nomad0x7/sek...

#infosec #cybersecurity #pentest #redteam #windows #opensource

GitHub - Nomad0x7/sekken-enum: adws enumeration bof

adws enumeration bof. Contribute to Nomad0x7/sekken-enum development by creating an account on GitHub.

r1cksec @r1cksec.bsky.social · 24d

Time-based user enum via Basic Auth in Azure against Autodiscover🕵️‍♂️

github.com/nyxgeek/oned...

#infosec #cybersecurity #pentest #redteam #osint

GitHub - nyxgeek/onedrive_user_enum: onedrive user enumeration - pentest tool to enumerate valid o365 users

onedrive user enumeration - pentest tool to enumerate valid o365 users - nyxgeek/onedrive_user_enum

r1cksec @r1cksec.bsky.social · 27d

A post about how Azure Relay Bridge (azbridge) can be abused by red teams to tunnel C2 traffic through Microsofts Azure Service Bus infrastructure🕵️‍♂️

hackerhermanos.com/azbridge

#infosec #cybersecurity #pentest #redteam #cloud #micorosoft

When Azure Relay Becomes a Red Teamer’s Highway – Hackers Hermanos

hackerhermanos.com

r1cksec @r1cksec.bsky.social · Oct 8

On r1cksec.de it is possible to search for URLs based on my cheatsheets🕵️‍♂️

#infosec #cybersecurity #redteam #pentest #malware #threatintel #dfir

r1cksec @r1cksec.bsky.social · Oct 6

New cheatsheets pushed🕵️‍♂️

github.com/r1cksec/chea...

#infosec #cybersecurity #pentest #redteam #cloud #malware #dfir

GitHub - r1cksec/cheatsheets: Collection of knowledge about information security

Collection of knowledge about information security - r1cksec/cheatsheets

r1cksec @r1cksec.bsky.social · Oct 4

A collection of different methods of stealing NetNTLM hashes🕵️‍♂️

www.securify.nl/blog/living-...

#infosec #cybersecurity #pentest #redteam #windows #activedirectory

Living off the land: stealing NetNTLM hashes

Securify provides reality checks to lower security risks and build up resilience against threats. Agile Security, Pentesting (scenario-based) and Red Teaming.

www.securify.nl

r1cksec @r1cksec.bsky.social · Oct 3

A collection of useful API endpoints for security operators and administrators🕵️‍♂️

github.com/toneillcodes...

#infosec #cybersecurity #pentest #redteam #cloud

GitHub - toneillcodes/EntraID-API-Library: A collection of useful API endpoints for security operators and administrators

A collection of useful API endpoints for security operators and administrators - toneillcodes/EntraID-API-Library

r1cksec @r1cksec.bsky.social · Oct 2

Exposing CharmingKitten's malicious activity for IRGC-IO devision Counterintelligence devision (1500)🕵️‍♂️

github.com/KittenBuster...

#infosec #cybersecurity #threatintel #malware #dfir

GitHub - KittenBusters/CharmingKitten: Exposing CharmingKitten's malicious activity for IRGC-IO devision Counterintelligence devision (1500)

Exposing CharmingKitten's malicious activity for IRGC-IO devision Counterintelligence devision (1500) - KittenBusters/CharmingKitten

r1cksec @r1cksec.bsky.social · Oct 1

This is the tool to dump the LSASS process on modern Windows 11🕵️‍♂️

github.com/TwoSevenOneT...

#infosec #cybersecurity #pentest #redteam #windows #opensource

GitHub - TwoSevenOneT/WSASS: This is the tool to dump the LSASS process on modern Windows 11

This is the tool to dump the LSASS process on modern Windows 11 - TwoSevenOneT/WSASS