Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

🗝️A skeleton key attack patches LSASS on the victim's domain controller. This enables the attacker to authenticate as any user with a master password. #ThreatHunting #DFIR

ACEResponder's profile picture

ACE Responder

17,765 subscribers

22,043 Aufrufe • vor 2 Jahren •via X (Twitter)

#ThreatHunting#DFIR
LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

How AS-REP Roasting works. 🔐 This animation demonstrates the more secure Kerberos pre-auth and contrasts it with an AS-REP roasting attack which abuses the 'Do not require Kerberos preauthentication' setting. #ThreatHunting #DFIR
1:07

How AS-REP Roasting works. 🔐 This animation demonstrates the more secure Kerberos pre-auth and contrasts it with an AS-REP roasting attack which abuses the 'Do not require Kerberos preauthentication' setting. #ThreatHunting #DFIR

ACE Responder

33,121 Aufrufe • vor 2 Jahren

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.
1:28

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

Dark Web Informer

71,433 Aufrufe • vor 1 Monat

One example attack: 1. A Comet user sees a Reddit thread where one comment has hidden instructions. 2. The user asks Comet to summarize the thread. 3. Comet follows the malicious instructions to find the user's Perplexity login details and send them to the attacker.
2:30

One example attack: 1. A Comet user sees a Reddit thread where one comment has hidden instructions. 2. The user asks Comet to summarize the thread. 3. Comet follows the malicious instructions to find the user's Perplexity login details and send them to the attacker.

Brave

52,919 Aufrufe • vor 11 Monaten

Google Chrome on macOS installs a background app called GoogleUpdater that starts automatically after a restart. With this macOS bug, its executable can be silently replaced with any code. No password. No warning. The user is completely unaware. Hers's a demo (clipboard spy)
1:34

Google Chrome on macOS installs a background app called GoogleUpdater that starts automatically after a restart. With this macOS bug, its executable can be silently replaced with any code. No password. No warning. The user is completely unaware. Hers's a demo (clipboard spy)

Mysk 🇨🇦🇩🇪

123,735 Aufrufe • vor 13 Tagen

In Northern Ireland, a man and his children assault this woman-s child. The attacker's mother and child attack the victim's mother. The Police Belfast City Centre are more bothered about the safety of the attacker and his family.
2:01

In Northern Ireland, a man and his children assault this woman-s child. The attacker's mother and child attack the victim's mother. The Police Belfast City Centre are more bothered about the safety of the attacker and his family.

David Atherton

16,746 Aufrufe • vor 5 Tagen

AutoComputer’s (YC F24) desktop AI enables workers to automate any workflow on their computer into steps they can accept with a single keystroke, providing full user control – all with zero configuration. Congrats on the launch, Madhav Singhal and RickSugden!
2:14

AutoComputer’s (YC F24) desktop AI enables workers to automate any workflow on their computer into steps they can accept with a single keystroke, providing full user control – all with zero configuration. Congrats on the launch, Madhav Singhal and RickSugden!

Y Combinator

71,904 Aufrufe • vor 1 Jahr

A woman has said she was "failed" by Travelodge after a sex attacker was given a key to her hotel room - where he assaulted her while she was asleep. 29 year old Kyran Smith lied to staff by telling them he was the victim's boyfriend - and was given her room number and key card. The woman - who can't be named for legal reasons - reported the attack to the hotel, which offered her a £30 refund. Travelodge later admitted this was an inappropriate response.
0:31

Sensitive content

A woman has said she was "failed" by Travelodge after a sex attacker was given a key to her hotel room - where he assaulted her while she was asleep. 29 year old Kyran Smith lied to staff by telling them he was the victim's boyfriend - and was given her room number and key card. The woman - who can't be named for legal reasons - reported the attack to the hotel, which offered her a £30 refund. Travelodge later admitted this was an inappropriate response.

Channel 4 News

60,233 Aufrufe • vor 5 Monaten

Amira Ostalski was in the same carriage as the attacker during the horror knife attack that saw 11 people stabbed on a train from Doncaster to Kings Cross.
2:08

Amira Ostalski was in the same carriage as the attacker during the horror knife attack that saw 11 people stabbed on a train from Doncaster to Kings Cross.

Good Morning Britain

31,857 Aufrufe • vor 9 Monaten

🚨 We're disclosing a macOS security bug that Apple says is not an issue. Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web—no password or warning is required. Here's a demo using Signal to steal its encryption key. 📝 Blog with technical details: link in the replies. Do you think this should be considered a security bug? 🎬👇
2:22

🚨 We're disclosing a macOS security bug that Apple says is not an issue. Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web—no password or warning is required. Here's a demo using Signal to steal its encryption key. 📝 Blog with technical details: link in the replies. Do you think this should be considered a security bug? 🎬👇

Mysk 🇨🇦🇩🇪

86,835 Aufrufe • vor 14 Tagen

The effects of the drug “spice” in Birmingham- this is known as a “mamba attack” and leaves the user often incapacitated.
0:33

The effects of the drug “spice” in Birmingham- this is known as a “mamba attack” and leaves the user often incapacitated.

Scarcity News

175,334 Aufrufe • vor 2 Jahren

A CCTV footage of the woman who used Adenta SSNIT Flats as shopping mall with the help of a master key.
1:47

A CCTV footage of the woman who used Adenta SSNIT Flats as shopping mall with the help of a master key.

𝕏 Ghana 🇬🇭

252,164 Aufrufe • vor 1 Jahr

Working on my successor to the famous Footsies Skeleton, except as a boss fight
0:42

Working on my successor to the famous Footsies Skeleton, except as a boss fight

boghog

36,475 Aufrufe • vor 2 Jahren

Master Key 🗝️ appreciation post because why not 😌 such a genuine, kind, respectful guy and lowkey the coolest person on the internet 😂 🙌🏼 they could never make me hate him
0:20

Master Key 🗝️ appreciation post because why not 😌 such a genuine, kind, respectful guy and lowkey the coolest person on the internet 😂 🙌🏼 they could never make me hate him

ℭ𝔯𝔢𝔞𝔱𝔬𝔯 𝔒𝔣 ℭ𝔥𝔞𝔬𝔰 😈

22,522 Aufrufe • vor 5 Monaten

Happy New Year everyone! A preview of something some friends and I have been working on. The Skeleton Key ENDGAME payload contains PrometheOS, Insignia's Setup Assistant, XCAT, a controller and memory test and Rocky5's softmod, all sized down to fit on an 8MB memory unit! 1/2
2:00

Happy New Year everyone! A preview of something some friends and I have been working on. The Skeleton Key ENDGAME payload contains PrometheOS, Insignia's Setup Assistant, XCAT, a controller and memory test and Rocky5's softmod, all sized down to fit on an 8MB memory unit! 1/2

Harcroft

11,281 Aufrufe • vor 1 Jahr

A German Political Activist and Critic of Islam, Michael Stürzenberger as well as a Member of his Team and a Police Officer were Stabbed, suffering Serious Injuries, in a Terrorist Attack by an Islamic Extremist during a Public Campaign Event in the City of Mannheim, with the Attacker being Shot by Police. The Attack as well as the Shooting was Live-Streamed on German Social Media.
0:48

A German Political Activist and Critic of Islam, Michael Stürzenberger as well as a Member of his Team and a Police Officer were Stabbed, suffering Serious Injuries, in a Terrorist Attack by an Islamic Extremist during a Public Campaign Event in the City of Mannheim, with the Attacker being Shot by Police. The Attack as well as the Shooting was Live-Streamed on German Social Media.

OSINTdefender

171,519 Aufrufe • vor 2 Jahren

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root
0:22

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

Dark Web Informer

18,534 Aufrufe • vor 3 Monaten

Destra Network | $DSYNC Introducing Destra Decentralized DNS This marks a significant milestone for decentralized finance: the launch of the first-ever on-chain platform primarily focused on making domain names accessible to the masses without any centralized intervention, powered by destra net. Destra Labs has engineered gas-efficient hybrid contracts inspired by combining the best of both ERC1185 and ERC137, primarily focusing on providing truly decentralized domain names. Until now, all DeFi dApps have relied on centralized domain names controlled by centralized organizations like ICANN and centralized registrars. A major concern with these centralized domains is the amount of control centralized DNS servers exert over the domain names. For instance, an employee working for a DNS server's organization could alter a zone record for a domain like and redirect it to a phishing dApp, potentially leading to the loss of billions of dollars in user funds. With Destra Decentralized DNS, the power lies in the hands of the domain owner, ensuring complete control over where the domain directs users. Unlike previous attempts, Destra DNS remains focused on the core purpose of a domain name: serving decentralized web applications.
1:03

Destra Network | $DSYNC Introducing Destra Decentralized DNS This marks a significant milestone for decentralized finance: the launch of the first-ever on-chain platform primarily focused on making domain names accessible to the masses without any centralized intervention, powered by destra net. Destra Labs has engineered gas-efficient hybrid contracts inspired by combining the best of both ERC1185 and ERC137, primarily focusing on providing truly decentralized domain names. Until now, all DeFi dApps have relied on centralized domain names controlled by centralized organizations like ICANN and centralized registrars. A major concern with these centralized domains is the amount of control centralized DNS servers exert over the domain names. For instance, an employee working for a DNS server's organization could alter a zone record for a domain like and redirect it to a phishing dApp, potentially leading to the loss of billions of dollars in user funds. With Destra Decentralized DNS, the power lies in the hands of the domain owner, ensuring complete control over where the domain directs users. Unlike previous attempts, Destra DNS remains focused on the core purpose of a domain name: serving decentralized web applications.

Destra Network

238,580 Aufrufe • vor 2 Jahren

National Reporter Charlie Peters reports as Mohammad Bashir, friend of the Manchester Synagogue attacker, is sentenced to life with a minimum term of 17 years after plotting a separate terror attack.
4:12

National Reporter Charlie Peters reports as Mohammad Bashir, friend of the Manchester Synagogue attacker, is sentenced to life with a minimum term of 17 years after plotting a separate terror attack.

GB News

12,843 Aufrufe • vor 14 Tagen