Reposted by bohopsHexacorn @hexacorn.bsky.social · 01/06/2025mscoree.dll, RunDll32ShimW lolbin www.hexacorn.com/blog/2025/05... 073
bohops @bohops.bsky.social · 28/04/2025Moving from pizza box servers and large tower PCs to mini and pico-style PCs has been absolutely amazing. A few NUCs and Pi s going along way. 000
bohops @bohops.bsky.social · 27/04/2025When I was doing sysadmin work back in the day, I inherited a few systems like this. Legacy but rock solid. Worse part was no one knew what it was used for until we decided to disconnect the network cable one day.... 😀 110
bohops @bohops.bsky.social · 25/03/2025Thank you, Casey! It definitely means a lot coming from you. 000
bohops @bohops.bsky.social · 25/03/2025[Blog] This ended up being a great applied research project with my co-worker Dylan Tran on weaponizing a technique for fileless DCOM lateral movement based on the original work of James Forshaw. Defensive recommendations provided. - Blog: ibm.com/think/news/f... - PoC: github.com/xforcered/Fo...ibm.comFileless lateral movement with trapped COM objects | IBMNew research from IBM X-Force Red has led to the development of a proof-of-concept fileless lateral movement technique by abusing trapped Component Object Model (COM) objects. Get the details. 01511
Reposted by bohopsChris Thompson @retbandit.bsky.social · 19/03/2025I am excited to announce the first conference dedicated to the offensive use of AI in security! Request an invite at offensiveaicon.com. Co-organized by RemoteThreat, Dreadnode, & DEVSEC. 173
Reposted by bohopsClément Labro @itm4n.bsky.social · 19/02/2025In this blog post, I explain how I was able to create a PowerShell console in C/C++, and disable all its security features (AMSI, logging, transcription, execution policy, CLM) in doing so. 💪 👉 blog.scrt.ch/2025/02/18/r... 24319
Reposted by bohopsJames Forshaw @tiraniddo.dev · 30/01/2025New blog post on the abuse of the IDispatch COM interface to get unexpected objects loaded into a process. Demoed by using this to get arbitrary code execution in a PPL process. googleprojectzero.blogspot.com/2025/01/wind...googleprojectzero.blogspot.comWindows Bug Class: Accessing Trapped COM Objects with IDispatchPosted by James Forshaw, Google Project Zero Object orientated remoting technologies such as DCOM and .NET Remoting make it very easy ... 26541
Reposted by bohopsBrett Hawkins @h4wkst3r.bsky.social · 12/01/2025You can find our @shmoocon.bsky.social presentation slides at the below GitHub repo. Thanks again to all that attended. Also, thank you to the conference organizers for putting on a great con and having us! #shmoocon github.com/h4wkst3r/Con...github.com 11612
