Excited to release a tool I've been working on lately - ShareFiltrator
ShareFiltrator finds credentials exposed in SharePoint/OneDrive via the Search API (_api/search/query) and also automates mass downloading of the discovered items.
Blog: blog.fndsec.net/2025/04/02/b...
Thank you! Bofhound has been incredible for us!
Excited to share a tool I've been working on - ShadowHound.
ShadowHound is a PowerShell alternative to SharpHound for Active Directory enumeration, using native PowerShell or ADModule (ADWS). As a bonus I also talk about some MDI detections and how to avoid them.
blog.fndsec.net/2024/11/25/s...
Favorite quote from WatchTowr's blog about PAN-OS vuln:
> I guess auto_prepend_file actually has legitimate use besides writing PHP exploits.
labs.watchtowr.com/pots-and-pan...
TrustedSec Tech Brief
00:30 - NTLM Hash Disclosure Zero-Day
01:45 - Task Scheduler Vulnerability
02:30 - Exchange Server Issues
03:15 - AD Certificate Services Flaw
04:00 - Vulnerability Breakdown
04:45 - Palo Alto Zero-Day
05:30 - FortiGate VPN Update
www.youtube.com/watch?v=3mSD...
Arc browser RCE, more Fortinet woes (@sinsinology.bsky.social), PowerHuntShares v2, make_token_cert, BOFs without DFR (@netbiosx.bsky.social), and more!
blog.badsectorlabs.com/last-week-in...
AdobeFips - Adobe Reader Lolbin
www.hexacorn.com/blog/2024/11...
Beyond good ol’ Run key, Part 144
www.hexacorn.com/blog/2024/11...
