Joas A Santos’ Post

Red Team Exercises #3 - AMSI Bypass Unfortunately AMSI won't let me run Invoke-Mimikatz, and now how do I bypass it, do you have any ideas? Could using Frida to monitor API calls and obfuscate words be something I can do??? What problem would you detect in this solution? Images credits: Payatu - Google Images #redteam #cybersecurity #amsibypass #redteamexercises

CNPen Done! Thank you The SecOps Group for Excellent Exam and Support My Review Article: https://lnkd.in/detfbCUJ Coupon: CNPen-80-OFF #hacking #thesecopsgroup #cnpen #pentest #redteam

CNPen Review #Hacking #redteam #cnpen #pentest

Black Hat Marketing If you are a marketing professional and want to learn how to use OSINT techniques and apply some footprint concepts. This ebook is very interesting, especially for those who work with SEO. I received a copy and the book is good. Congratulations Mohamed Selim Selling link https://cutt.ly/pw6Q3vHq #hacking #osint #blackhat

Threat Hunter Playbook Created: Roberto Rodriguez @Cyb3rWard0g Link: https://lnkd.in/dabzyiMe #threathunting #soc #blueteam #cybersecurity

LLM (Large Language Model) Hacking LLM Security 101 by Seezo-io https://lnkd.in/dPXNwVTp Awesome LLM Security by corca-ai https://lnkd.in/duu7Q-yp DamnVulnerableLLMProject by harishsg993010 https://lnkd.in/diYsJPxZ OWASP LLM Top 10 by imhego https://lnkd.in/dz2e4vab LLM Test Findings by Bishop Fox https://lnkd.in/d5i5x2Ej #hacking #llm #pentest #redteam

Github Dorks for Finding Files, APIs and Passwords (repost) Credits: Anton (therceman) #github #githubdorks #pentest #bugbounty #Bughunting #hacking #redteam

Once again, it is an honor to contribute to Mitre Att&ck. See the new interesting updates that came in, mainly for existing container-related techniques that I had the opportunity to contribute https://lnkd.in/dYpF6rqh #hacking #redteam #mitre #pentest #infosec

Okay, All Right Credits: A friend sent it to me, but I don't know the creator #hacking #redteam #cybersecurity #malwareanalysis #infosecmeme

Red Team Exercises #2 - What can't be missing from your nginx redirectors? Pwndrop is excellent and I like it for forwarding beacons, payloads, agents, grunts or whatever you want to propagate. But generally when uploading a cobalt strike, havoc or sliver, I like to configure a redirector with nginx for many purposes. Starting the discussion: For me, I think it's essential that it doesn't directly reveal the IP address or make the target download a different file than the one it thinks it is downloading, changing the path And you, how would you configure your redirector? And for what purpose? I thank everyone who gave their insights in the last post, it's cool to see interactions and everyone giving their vision in a healthy and peaceful way, it reduces my boredom during the day. #hacking #redteam #cybersecurity #informationsecurity #pentest #redteamexercises