iiinova — where your digital self keeps evolving

Reposted by David McGuire

Evan McBroom @evanmcbroom.bsky.social · 16/10/2025

@reconmtl.bsky.social has uploaded the majority of the 2025 talks, including my talk on LSA. You can check it out at the below link if you'd like. Thank you again to the organizers and everyone else who helps put on the conference. I look forward to coming back! youtu.be/G2CfMWXLU1U?...

youtu.be

Recon 2025 - The Finer Details of LSA Credential Recovery

YouTube video by Recon Conference

0115

Reposted by David McGuire

SpecterOps @specterops.io · 29/07/2025

BloodHound v8.0 is here! 🎉 This update introduces BloodHound OpenGraph, revolutionizing Identity Attack Path Management by exposing attack paths throughout your entire tech stack, not just AD/Entra ID. Read more from Justin Kohler: ghst.ly/bloodhoundv8 🧵: 1/7

1139

Reposted by David McGuire

SpecterOps @specterops.io · 25/07/2025

Classic NTLM relay problem: Stuck on port 445/TCP, can't use WMI (needs 135/TCP), and dumping hashes triggers EDR alerts. So what's a stealthy attacker to do? 🤔 Our latest blog post explores evasive alternatives beyond the old techniques. ghst.ly/3ILR1l0

ghst.ly

Escaping the Confines of Port 445 - SpecterOps

NTLM relay attacks targeting SMB restrict lateral movement options to those that solely require port 445/TCP. Learn at least one method of overcoming this restriction to enable additional lateral move...

082

Reposted by David McGuire

SpecterOps @specterops.io · 25/07/2025

@logangoins.bsky.social is dropping knowledge on ADWS exploitation. 🧠 Learn how attackers use the SOAP protocol for LDAP collection on Domain Controllers & dive into maximizing OPSEC-considerate collection workflows while exploring detection methods. ghst.ly/4lPodH4

ghst.ly

Make Sure to Use SOAP(y) - An Operators Guide to Stealthy AD Collection Using ADWS - SpecterOps

Learn how to perform stealthy recon of Active Directory environments over ADWS for Red Team Assessments

061

Reposted by David McGuire

SpecterOps @specterops.io · 27/05/2025

BadSuccessor is a new AD attack primitive that abuses dMSAs, allowing an attacker who can modify or create a dMSA to escalate privileges and take over the forest. Check out @jimsycurity.adminsdholder.com's latest blog post to understand how you can mitigate risk. ghst.ly/4kXTLd9

ghst.ly

Understanding & Mitigating BadSuccessor - SpecterOps

Understanding the impact of the BadSuccessor AD attack primitive and mitigating the abuse via targeted Deny ACEs on Organizational Units.

0169

Reposted by David McGuire

SpecterOps @specterops.io · 02/05/2025

We're proud to sponsor BSides Groningen, happening today. Find our team at the event and say hi! 👋

041

Reposted by David McGuire

SpecterOps @specterops.io · 09/04/2025

Think NTLM relay is a solved problem? Think again. Relay attacks are more complicated than many people realize. Check out this deep dive from Elad Shamir on NTLM relay attacks & the new edges we recently added to BloodHound. ghst.ly/4lv3E31

12720

Reposted by David McGuire

SpecterOps @specterops.io · 24/03/2025

Our team is at #GartnerIAM! Come find our team at Booth 407. 🔍 Talk with Specters about BloodHound Enterprise, our open source tools, and get answers on Identity Attack Path Management.

121

Reposted by David McGuire

SpecterOps @specterops.io · 20/03/2025

Attackers see what you don't: paths between your cloud & on-prem systems. Our Chief Product Officer Justin Kohler will be at #GartnerIAM demonstrating how attackers exploit these connections & how Attack Path Management can help close these gaps. ghst.ly/4kzkFbB

043

Reposted by David McGuire

SpecterOps @specterops.io · 28/02/2025

Hear how State Street Bank tackled #identitysecurity compliance using the adversary’s view of #AttackPaths. Join Justin Kohler & State Street's Eric McGuffin at #FSISAC as they unpack the process & tools used to secure AD & Azure. Learn more ▶️ ghst.ly/3D61s0s

001

Reposted by David McGuire

SpecterOps @specterops.io · 16/01/2025

Our Consulting Services team is growing! 🙌 We are now hiring Consultants and Senior Consultants to join the team as operators, trainers, and program developers. Learn more & apply today! ghst.ly/3PBmGFZ

153

Reposted by David McGuire

SpecterOps @specterops.io · 11/12/2024

What can you expect to learn in our Azure Security Fundamentals training at #SOCON2025? Course architect @1cemoon.bsky.social shares that students will dive into: ➡️ Azure Resource Manager ➡️ Common security misconfigurations ➡️ Entra ID authentication Register today: ghst.ly/reg-socon25-...

022

Reposted by David McGuire

SpecterOps @specterops.io · 12/12/2024

Good news, BloodHound users! 🎉 We’ve rolled out v6.3 with new features & improvements to help you visualize #AttackPaths more clearly & show progress in reducing identity risks over time. Check out Justin Kohler's blog post to learn more: ghst.ly/49wB23L

042

David McGuire @davidmcguire.bsky.social · 05/12/2024

Proud to share that SpecterOps has earned FedRAMP High Authorization for BloodHound Enterprise! Government agencies are at high risk for identity-based attacks, and now BHE is available to those that operate at the FedRAMP High baseline. Learn more: ghst.ly/bhe-fedramp-...

ghst.ly

FedRAMP High Authorization for BloodHound Enterprise is a Critical Win for the Public Sector - SpecterOps

Author: David McGuire, CEO, SpecterOps Today, we’re thrilled to announce that SpecterOps has earned FedRAMP High Authorization for BloodHound Enterprise! This is no small achievement, as it makes our...

020

Reposted by David McGuire

Andy Robbins @andyrobbins.bsky.social · 20/11/2024

A quick tour of new functions in BARK that support Azure Key Vault tradecraft research, including a walk-through of how an adversary may chain these functions together as part of an attack path: posts.specterops.io/azure-key-va...

0178

Reposted by David McGuire

SpecterOps @specterops.io · 20/11/2024

Our RTO course is going to London! 🇬🇧 Join our training at #BHEU December 9-12, and test your offensive skills in a hardened enterprise environment with live defenders hunting you down. Learn more & register 👉 ghst.ly/4hT39xN

Adversary Tactics: Red Team Operations
December 9-12, 2024
Black Hat Europe

131