NICE!!!! Thank you for covering the HTA (that I was too lazy to in the video 😆)! Would love to learn about your approach/how you cruised through that one, if it was mostly manual or you had any slick tricks 😎😁
Black Friday Comes Early 🦃 Code "BlackFriday25" active NOW for 25% off ALL courses on Just Hacking Training including Constructing Defense 2025! Excludes already discounted Bundles. Expires Nov 30 at Midnight ET.
There's an open role for a Staff CTI Analyst on my team here @HuntressLabs 📢💫
✨Do you love doing correlations between different incidents, sometimes digging into them, or doing malware analysis?
✨Do you like doing data analysis, and using this to make threat reports? 👇
Yesterday folks got a phishing email for a fake DMCA report-- myself included. Caught me at a good time so I could record poking at the scam and the malware it leads to: ultimately infostealer malware (the usual) from a fake domain & clearly AI slop site: piped.video/IzKjL16-sgY
Yesterday folks got a phishing email for a fake DMCA report-- myself included. Caught me at a good time so I could record poking at the scam and the malware it leads to: ultimately infostealer malware (the usual) from a fake domain & clearly AI slop site: piped.video/IzKjL16-sgY
Doing a bit of hunting on @ValidinLLC, let's see where I can get!
Looks like the IP address of the site a few days ago was 101.99.92[.]246. There are a number of other domains associated with this IP, as well:
Yesterday folks got a phishing email for a fake DMCA report-- myself included. Caught me at a good time so I could record poking at the scam and the malware it leads to: ultimately infostealer malware (the usual) from a fake domain & clearly AI slop site: piped.video/IzKjL16-sgY
The 2025 SANS #HolidayHack Challenge launched about an hour ago! Come have some fun building cybersecurity skills in this free @SANSInstitute gift to the community. sans.org/holidayhack
New micro-challenges, new gamified world, new music, new game dynamics! Check it out!
I had some time to work on the RE Rust Tickler challenges from @HuntressLabs recent CTF.
Specifically, I wanted to focus on @vector35 Binary Ninja's TTD implementation
Over weekend I made some quick write-ups on how I approached these easier challenges.
github.com/Rurik/CTF/tree/ma…
And a HUGE thank you to @runpanther for sponsoring this video! Take control of your security operations with Panther -- you can ditch legacy SIEMs and embrace an AI-driven, autonomous and engineer-first SOC platform and solution: jh.live/panther
Off the tails of a recent NightShade C2 writeup, experimenting with building a "UAC prompt bomb" (... best YouTube video title I could ask for 😅(plz dont ban me)) repeatedly asking for admin privileges -- short & sweet in just a line of PowerShell! Video: piped.video/JpWbytYrL2s