Max dcb @max2cbx

OSCP|CRTO - Senior Information Security Engineer Joined December 2021

Tweets

13
Followers

105
Following

90
Likes

17

Max dcb @max2cbx

8 months ago

🕸 OpenShiftGrapher: A graph based tool to map, exploit & secure OpenShift clusters. Perfect for pentesters to uncover: 🔸 RBAC abuse paths 🔸 Privilege escalation via SCCs 🔸 Risky misconfigs 📝 Read: maxdcb.github.io/OpenShiftGraph… #RedTeam #Pentest #Kubernetes

0 0 1 125 0

View Details

SEKTOR7 Institute @SEKTOR7net

11 months ago

A new life of reflective DLLs - fixing call stacks. Registering a proper unwinding information from .pdata section with RtlAddFunctionTable() helps fixing the call stack of a function called from within reflective DLL. Example implementation called DreamWalkers and other details in a post by Max (@max2cbx). Source: maxdcb.github.io/DreamWalkers/ #redteam #maldev #malwaredevelopment.

1 65 230 12K 138

View Details

Max dcb @max2cbx

11 months ago

@SEKTOR7net Wow, thank you for sharing this — it truly made my week! I'm a great admirer of your work and have learned so much from your various courses. I'm honored that you found interest in my modest contribution.

0 0 3 500 2

View Details

Max dcb @max2cbx

11 months ago

🧪 New technique: DreamWalkers A reflective shellcode loader that crafts a synthetic, clean call stack. Achieving stealthy execution from memory-mapped modules. 🔗 maxdcb.github.io/DreamWalkers/ #MalwareResearch #RedTeam #WindowsInternals #OffSec

3 77 187 11K 124

View Details

Max dcb @max2cbx

a year ago

@UK_Daniel_Card If you want real risk management I can recommend the book "How to Measure Anything in Cybersecurity Risk" it points out why we need to stop using risk matrix with highs and lows and do the math!

0 0 1 54 0

View Details

Max dcb @max2cbx

3 years ago

@troyhunt Pp

0 0 0 124 0

View Details

Max dcb @max2cbx

4 years ago

@_RastaMouse @C5pider @NetworkChuck What about c++/cli... Fair compromise!

0 0 0 0 0

View Details

Max dcb @max2cbx

4 years ago

@ColeVanlanding1 @C5pider @securityonion Super cool video! Do you know good resources to set up the Security Onion environment, it seems super interesting!

1 0 0 0 0

View Details

Max dcb @max2cbx

4 years ago

@C5pider @Eaga11N Yeah for the windows exploit side but for exemple you could use protobuf to ease the message parsing. I come from a c++ dev background and I see a lot of possibilities in using higher level functionalities. Maybe their are things I don't see..

1 0 0 0 0

View Details

Max dcb @max2cbx

4 years ago

@C5pider @Eaga11N It s seems super cool! For my own culture could you imagine integrate some high level lib in you agent and staticly compiled it ? I don't understand why beacon have to be low level dev? Apart from the loader.

1 0 0 0 0

View Details

Max dcb @max2cbx

4 years ago

@VirtualAllocEx Very cool project, exactly what I was looking for. I am definitely going to try that. Thank you.

0 0 0 0 0

View Details

Max dcb @max2cbx

4 years ago

@VirtualAllocEx Very interesting. Can you use the same technique to execute arbitrary .exe like the execut-assembly function of cobalt strike does ? What would be the manipulation to get the hex of a compiled .exe ?

0 0 0 0 0

View Details

Max dcb @max2cbx

4 years ago

@ippsec @0xdf_ i started my jouney in cybersecurity 7 months ago with online courses and htb, and I passed the oscp in January. My plan to prep was to do as much box of the tjnull list as I could and watch your video afterward ! Your videos are gold mines ! Thanks for the incredible content !