Lightnews — Scholar-powered news

Yehuda Smirnov

@yudasm.bsky.social

58 followers 92 following 3 posts

Passionate about learning and researching cybersecurity stuff. Opinions are my own. #RedTeam #InfoSec Blog at blog.fndsec.net

Posts Media Videos Starter Packs

Yehuda Smirnov @yudasm.bsky.social · Apr 2

Excited to release a tool I've been working on lately - ShareFiltrator

ShareFiltrator finds credentials exposed in SharePoint/OneDrive via the Search API (_api/search/query) and also automates mass downloading of the discovered items.

Blog: blog.fndsec.net/2025/04/02/b...

Reposted by Yehuda Smirnov

netbiosX @netbiosx.bsky.social · Dec 22

GitHub - CrowdStrike/sccmhound: A BloodHound collector for Microsoft Configuration Manager

A BloodHound collector for Microsoft Configuration Manager - CrowdStrike/sccmhound

github.com

3 6

Yehuda Smirnov @yudasm.bsky.social · Nov 26

Thank you! Bofhound has been incredible for us!

Yehuda Smirnov @yudasm.bsky.social · Nov 25

Excited to share a tool I've been working on - ShadowHound.
ShadowHound is a PowerShell alternative to SharpHound for Active Directory enumeration, using native PowerShell or ADModule (ADWS). As a bonus I also talk about some MDI detections and how to avoid them.

blog.fndsec.net/2024/11/25/s...

10 32

Reposted by Yehuda Smirnov

netbiosX @netbiosx.bsky.social · Nov 25

How To Use MSSQL CLR Assembly To Bypass EDR

BackgroundA few days ago, I dealt with a blackmail incident involving an MSSQL database, which potentially evaded EDR detection. I intend to share the entire process. Upon analyzing the situation, I f

blog.pyn3rd.com

5 4

Reposted by Yehuda Smirnov

netbiosX @netbiosx.bsky.social · Nov 24

GitHub - matro7sh/myph: shellcode loader for your evasion needs

shellcode loader for your evasion needs. Contribute to matro7sh/myph development by creating an account on GitHub.

github.com

4 5

Reposted by Yehuda Smirnov

netbiosX @netbiosx.bsky.social · Nov 22

GitHub - som3canadian/Mythic_NimSyscallPacker_Wrapper: Mythic C2 wrapper for NimSyscallPacker

Mythic C2 wrapper for NimSyscallPacker. Contribute to som3canadian/Mythic_NimSyscallPacker_Wrapper development by creating an account on GitHub.

github.com

4 6

Reposted by Yehuda Smirnov

Ron Bowes @iagox86.bsky.social · Nov 19

Favorite quote from WatchTowr's blog about PAN-OS vuln:

> I guess auto_prepend_file actually has legitimate use besides writing PHP exploits.

labs.watchtowr.com/pots-and-pan...

Pots and Pans, AKA an SSLVPN - Palo Alto PAN-OS CVE-2024-0012 and CVE-2024-9474

Note: Since this is 'breaking' news and more details are being released, we're updating this post as more details become available (and as we think of better memes). Mash that F5 key every so often fo...

labs.watchtowr.com

1 1 3

Reposted by Yehuda Smirnov

Justin Elze @hackinglz.hackpwn.net · Nov 19

TrustedSec Tech Brief

00:30 - NTLM Hash Disclosure Zero-Day
01:45 - Task Scheduler Vulnerability
02:30 - Exchange Server Issues
03:15 - AD Certificate Services Flaw
04:00 - Vulnerability Breakdown
04:45 - Palo Alto Zero-Day
05:30 - FortiGate VPN Update

www.youtube.com/watch?v=3mSD...