iiinova — where your digital self keeps evolving

Kuba Gretzky @mrgretzky.breakdev.org · 18/03/2025

Glad to be mentioned in such a great company! 😆 @chudypb.bsky.social 🔥

Kuba Gretzky @mrgretzky.breakdev.org · 12/03/2025

🚨 Evilginx Pro is finally here! 🚨🎣🐟 This is it! After over two years of development, countless delays, and hundreds of manual company verifications, Evilginx Pro is finally live! Thank you all for your invaluable support 💗 breakdev.org/evilginx-pro...

breakdev.org

Evilginx Pro is finally here!

After over two years of development, Evilginx Pro reverse proxy phishing framework for red teams is finally live!

0116

Kuba Gretzky @mrgretzky.breakdev.org · 12/03/2025

Since last year, I thought Ivanti Endpoint Manager was the most insecure tool you could use. This year, I know it’s been Elon all along.

030

Reposted by Kuba Gretzky

OrangeCon @orangecon.nl · 11/03/2025

Big news: our trainings are live! This year, we’re offering 13 courses led by top-notch experts. Whether you're red, blue, or somewhere in between, come sharpen your skills, break stuff, and learn from the best! 📅 1–4 Sept 📍 Meervaart, Amsterdam 🎟 Tickets available now! 👉 weeztix.shop/qt2kzq6g

01310

Kuba Gretzky @mrgretzky.breakdev.org · 27/02/2025

Excellent research by Sagi Olshansky shows how even a simple "Terms of Service" conditional access option in Entra ID can become a thorn in the side of phishing threat actors. Evilginx phishlet development action included 🎣 medium.com/@Sniffler/te...

medium.com

Terms of What?

tl;dr

001

Reposted by Kuba Gretzky

Frank Lesniak @franklesniak.com · 05/01/2025

I've been dealing with mysterious high CPU utilization from WmiPrvSE.exe for MONTHS. I finally did some digging using github.com/luctalpe/WMI... (run wmimon from an elevated cmd prompt). Guess what the culprit was?

github.com

GitHub - luctalpe/WMIMon: Tool to monitor WMI activity on Windows

Tool to monitor WMI activity on Windows. Contribute to luctalpe/WMIMon development by creating an account on GitHub.

3308

Kuba Gretzky @mrgretzky.breakdev.org · 20/12/2024

The BREAKDEV RED software shop engine is finally finished 🎉 Out of respect to all Evilginx fans, the purchase experience will be as friendly and fair as possible: - Floating licenses ONLY - No minimum cap for license purchases Evilginx Pro release date: February 2025 Merry Christmas everyone! 🎄

142

Reposted by Kuba Gretzky

hasherezade.bsky.social @hasherezade.bsky.social · 14/12/2024

New #PEsieve & #HollowsHunter (v0.4.0) are released: github.com/hasherezade/... & github.com/hasherezade/... - A lot has changed in the new version, check it out!

04518

Reposted by Kuba Gretzky

Piotr Bazydło @chudypb.bsky.social · 12/12/2024

I wrote a fun, little blog post. Remote pre-auth file deletion in SolarWinds ARM allowed to achieve LPE on AD machines 🙃

196

Reposted by Kuba Gretzky

Kuba Gretzky @mrgretzky.breakdev.org · 28/11/2024

🚨 BLACK FRIDAY 50% OFF 24-HOUR SALE 🚨 Today I'm running the biggest sale, since the course release in 2023! Get Evilginx Mastery course with lifetime access for 199 EUR ONLY today! 🤩 Upgrade your phishing skills before Evilginx Pro drops! 🔗Link: academy.breakdev.org/evilginx-mas...

043

Kuba Gretzky @mrgretzky.breakdev.org · 28/11/2024

043

Kuba Gretzky @mrgretzky.breakdev.org · 28/11/2024

🚨 The Black Friday sale is coming! The sale drops at midnight today! (UTC+1) It will be the biggest sale yet! 🤩

064

Reposted by Kuba Gretzky

Stef @stefvandop.nl · 27/11/2024

I want to do a little promotion here as well: For the dutch people following me: last year me and 2 other folks from HITB dutch crew started orangecon.nl. Its a nonprofit which focusses on knowledge sharing with affordable trainings followed by a very affordable conference. Do check it out please!

orangecon.nl

OrangeCon

186

Kuba Gretzky @mrgretzky.breakdev.org · 26/11/2024

I'm currently doing super exciting research (that's a joke 😭) trying to decide which invoicing platform with API access to use. Can anyone confirm if Zoho Books is a good platform or if there is any alternative worth considering? I'm having the time of my life 😆

131

Kuba Gretzky @mrgretzky.breakdev.org · 22/11/2024

I keep catching myself referring to "Linkin Park" as "LinkedIn Park". Is it a sign of growing old? 👴

3151

Reposted by Kuba Gretzky

Gynvael Coldwind @gynvael.bsky.social · 19/11/2024

Paged Out! #5 is out – enjoy! pagedout.institute And if you like the cover, we have wallpapers!

03616

Kuba Gretzky @mrgretzky.breakdev.org · 19/11/2024

Evilginx Pro Update: Tool is ready and awaits release. I'm now creating an online shop engine, because why not 😜 I hope one day it becomes Steam for cybersecurity tools with Evilginx Pro its first release, like Half-Life 2 on Steam exactly 20 years ago. Red team tools unite!

0201

Kuba Gretzky @mrgretzky.breakdev.org · 18/11/2024

Defenders use cross-origin requests through CSS url() or injected JS to leak your phishing URL in the HTTP Referer header. Today, I've been reminded about the excellent post by Keanu Nys, which contains a lot of great evasion ideas! insights.spotit.be/2024/06/03/c...

insights.spotit.be

Clipping the Canary’s wings: Bypassing AiTM Phishing Detections | Spotit insights

0133

Reposted by Kuba Gretzky

Hexacorn @hexacorn.bsky.social · 15/11/2024

Beyond good ol’ Run key, Part 144 www.hexacorn.com/blog/2024/11...

12310

Kuba Gretzky @mrgretzky.breakdev.org · 15/11/2024

Does anyone else feel Bluesky has finally solved the notification stacking/clutter problem Twitter has been unable to solve since its beginning?

090

Kuba Gretzky @mrgretzky.breakdev.org · 15/11/2024

I'm reaching the point where most of the Twitter accounts I followed for news, have migrated to Bluesky. Soon I may have no reason to go there anymore! 🥳

1230

Kuba Gretzky @mrgretzky.breakdev.org · 13/11/2024

🎂 BREAKDEV RED launched a year ago on 9th Nov 2023. It's a closed community for red teamers where every member is approved by hand. Takeaways: 👫 1203 members approved & joined 🤗 Made lots of new friends 📚 Learned from the best Thank you for making it extraordinary! 💗

1113

Reposted by Kuba Gretzky

Molly White @molly.wiki · 11/11/2024

if you’re trying to find the people you follow on twitter, check out @kawamataryo.bsky.social’s www.sky-follower-bridge.dev it found a full 1/3 of the people i follow. impressive work by the developer, but also impressive to see that that many twitter people are setting up here.

Sky Follower Bridge
Detected

689

users

Same handle name:
520
Same display name:
136
Included handle name in description:
33

47589245

Reposted by Kuba Gretzky

Hexacorn @hexacorn.bsky.social · 05/11/2024

Procmonning the Win11_24H2 build www.hexacorn.com/blog/2024/11... #DFIR

183

Kuba Gretzky @mrgretzky.breakdev.org · 02/11/2024

Just found out about this. Super neat feature! If you own a domain, you can change your bsky handle to point to it by adding just a single DNS TXT record. I changed mine to @mrgretzky.breakdev.org 🔥

1123