Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

🗝️A skeleton key attack patches LSASS on the victim's domain controller. This enables the attacker to authenticate as any user with a master password. #ThreatHunting #DFIR

ACEResponder's profile picture

ACE Responder

17,765 subscribers

22,043 Aufrufe • vor 3 Jahren •via X (Twitter)

#ThreatHunting#DFIR
LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

How the new Bad Successor dMSA domain takeover attack works. #ThreatHunting #DFIR
0:50

How the new Bad Successor dMSA domain takeover attack works. #ThreatHunting #DFIR

ACE Responder

13,504 Aufrufe • vor 1 Jahr

How domain fronting works. #ThreatHunting #DFIR
0:29

How domain fronting works. #ThreatHunting #DFIR

ACE Responder

11,366 Aufrufe • vor 1 Jahr

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam
0:51

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam

ACE Responder

21,289 Aufrufe • vor 1 Jahr

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam
0:51

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam

ACE Responder

37,433 Aufrufe • vor 3 Jahren

How the golden ticket attack works. #ThreatHunting #DFIR
0:46

How the golden ticket attack works. #ThreatHunting #DFIR

ACE Responder

27,358 Aufrufe • vor 1 Jahr

How AS-REP Roasting works. 🔐 This animation demonstrates the more secure Kerberos pre-auth and contrasts it with an AS-REP roasting attack which abuses the 'Do not require Kerberos preauthentication' setting. #ThreatHunting #DFIR
1:07

How AS-REP Roasting works. 🔐 This animation demonstrates the more secure Kerberos pre-auth and contrasts it with an AS-REP roasting attack which abuses the 'Do not require Kerberos preauthentication' setting. #ThreatHunting #DFIR

ACE Responder

33,122 Aufrufe • vor 3 Jahren

The Windows startup process tree. #ThreatHunting #DFIR
0:28

The Windows startup process tree. #ThreatHunting #DFIR

ACE Responder

43,093 Aufrufe • vor 1 Jahr

Remote execution with scheduled tasks demonstration. #DFIR #ThreatHunting
0:40

Remote execution with scheduled tasks demonstration. #DFIR #ThreatHunting

ACE Responder

25,033 Aufrufe • vor 3 Jahren

How the #XZUtils SSHD backdoor works. #ThreatHunting #DFIR #xzbackdoor Based on Anthony Weems POC
1:06

How the #XZUtils SSHD backdoor works. #ThreatHunting #DFIR #xzbackdoor Based on Anthony Weems POC

ACE Responder

33,678 Aufrufe • vor 2 Jahren

An example of DCOM lateral movement - MMC20.Application with a mshta payload #ThreatHunting #DFIR
0:46

An example of DCOM lateral movement - MMC20.Application with a mshta payload #ThreatHunting #DFIR

ACE Responder

24,980 Aufrufe • vor 3 Jahren

WMI Lateral Movement Demonstration: SMB file transfer with Win32_Process execution #ThreatHunting #DFIR
0:35

WMI Lateral Movement Demonstration: SMB file transfer with Win32_Process execution #ThreatHunting #DFIR

ACE Responder

29,002 Aufrufe • vor 3 Jahren

How PsExec lateral movement works. #ThreatHunting #DFIR
0:37

How PsExec lateral movement works. #ThreatHunting #DFIR

ACE Responder

27,773 Aufrufe • vor 2 Jahren

📢Want to make cool animations like us? Check out our new free 🎞️Attack Animator tool: #DFIR #ThreatHunting #Pentesting #redteam #CyberSecurity #ACEResponder
2:21

📢Want to make cool animations like us? Check out our new free 🎞️Attack Animator tool: #DFIR #ThreatHunting #Pentesting #redteam #CyberSecurity #ACEResponder

ACE Responder

33,056 Aufrufe • vor 1 Jahr

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.
1:28

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

Dark Web Informer

71,789 Aufrufe • vor 4 Monaten

Detecting Remote Service Lateral Movement (formerly PsExec) #ThreatHunting #DFIR
5:23

Detecting Remote Service Lateral Movement (formerly PsExec) #ThreatHunting #DFIR

ACE Responder

21,063 Aufrufe • vor 1 Jahr

One example attack: 1. A Comet user sees a Reddit thread where one comment has hidden instructions. 2. The user asks Comet to summarize the thread. 3. Comet follows the malicious instructions to find the user's Perplexity login details and send them to the attacker.
2:30

One example attack: 1. A Comet user sees a Reddit thread where one comment has hidden instructions. 2. The user asks Comet to summarize the thread. 3. Comet follows the malicious instructions to find the user's Perplexity login details and send them to the attacker.

Brave

52,943 Aufrufe • vor 1 Jahr

Open any door in the world with this ultimate 12-gauge master key.
0:58

Open any door in the world with this ultimate 12-gauge master key.

Gun Lovers Club

776,867 Aufrufe • vor 6 Monaten