Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

🗝️A skeleton key attack patches LSASS on the victim's domain controller. This enables the attacker to authenticate as any user with a master password. #ThreatHunting #DFIR

ACE Responder

17,765 subscribers

22,043 views • 2 years ago •via X (Twitter)

#ThreatHunting #DFIR

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

How AS-REP Roasting works. 🔐 This animation demonstrates the more secure Kerberos pre-auth and contrasts it with an AS-REP roasting attack which abuses the 'Do not require Kerberos preauthentication' setting. #ThreatHunting #DFIR

How AS-REP Roasting works. 🔐 This animation demonstrates the more secure Kerberos pre-auth and contrasts it with an AS-REP roasting attack which abuses the 'Do not require Kerberos preauthentication' setting. #ThreatHunting #DFIR

ACE Responder

33,121 views • 2 years ago

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

Dark Web Informer

71,433 views • 1 month ago

One example attack: 1. A Comet user sees a Reddit thread where one comment has hidden instructions. 2. The user asks Comet to summarize the thread. 3. Comet follows the malicious instructions to find the user's Perplexity login details and send them to the attacker.

One example attack: 1. A Comet user sees a Reddit thread where one comment has hidden instructions. 2. The user asks Comet to summarize the thread. 3. Comet follows the malicious instructions to find the user's Perplexity login details and send them to the attacker.

Brave

52,919 views • 11 months ago

Google Chrome on macOS installs a background app called GoogleUpdater that starts automatically after a restart. With this macOS bug, its executable can be silently replaced with any code. No password. No warning. The user is completely unaware. Hers's a demo (clipboard spy)

Google Chrome on macOS installs a background app called GoogleUpdater that starts automatically after a restart. With this macOS bug, its executable can be silently replaced with any code. No password. No warning. The user is completely unaware. Hers's a demo (clipboard spy)

Mysk 🇨🇦🇩🇪

123,735 views • 13 days ago

In Northern Ireland, a man and his children assault this woman-s child. The attacker's mother and child attack the victim's mother. The Police Belfast City Centre are more bothered about the safety of the attacker and his family.

In Northern Ireland, a man and his children assault this woman-s child. The attacker's mother and child attack the victim's mother. The Police Belfast City Centre are more bothered about the safety of the attacker and his family.

David Atherton

16,746 views • 5 days ago

AutoComputer’s (YC F24) desktop AI enables workers to automate any workflow on their computer into steps they can accept with a single keystroke, providing full user control – all with zero configuration. Congrats on the launch, Madhav Singhal and RickSugden!

AutoComputer’s (YC F24) desktop AI enables workers to automate any workflow on their computer into steps they can accept with a single keystroke, providing full user control – all with zero configuration. Congrats on the launch, Madhav Singhal and RickSugden!

Y Combinator

71,904 views • 1 year ago

A woman has said she was "failed" by Travelodge after a sex attacker was given a key to her hotel room - where he assaulted her while she was asleep. 29 year old Kyran Smith lied to staff by telling them he was the victim's boyfriend - and was given her room number and key card. The woman - who can't be named for legal reasons - reported the attack to the hotel, which offered her a £30 refund. Travelodge later admitted this was an inappropriate response.

Sensitive content

A woman has said she was "failed" by Travelodge after a sex attacker was given a key to her hotel room - where he assaulted her while she was asleep. 29 year old Kyran Smith lied to staff by telling them he was the victim's boyfriend - and was given her room number and key card. The woman - who can't be named for legal reasons - reported the attack to the hotel, which offered her a £30 refund. Travelodge later admitted this was an inappropriate response.

Channel 4 News

60,233 views • 5 months ago

Amira Ostalski was in the same carriage as the attacker during the horror knife attack that saw 11 people stabbed on a train from Doncaster to Kings Cross.

Amira Ostalski was in the same carriage as the attacker during the horror knife attack that saw 11 people stabbed on a train from Doncaster to Kings Cross.

Good Morning Britain

31,857 views • 9 months ago

🚨 We're disclosing a macOS security bug that Apple says is not an issue. Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web—no password or warning is required. Here's a demo using Signal to steal its encryption key. 📝 Blog with technical details: link in the replies. Do you think this should be considered a security bug? 🎬👇

🚨 We're disclosing a macOS security bug that Apple says is not an issue. Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web—no password or warning is required. Here's a demo using Signal to steal its encryption key. 📝 Blog with technical details: link in the replies. Do you think this should be considered a security bug? 🎬👇

Mysk 🇨🇦🇩🇪

86,835 views • 14 days ago

The effects of the drug “spice” in Birmingham- this is known as a “mamba attack” and leaves the user often incapacitated.

The effects of the drug “spice” in Birmingham- this is known as a “mamba attack” and leaves the user often incapacitated.

Scarcity News

175,334 views • 2 years ago

A CCTV footage of the woman who used Adenta SSNIT Flats as shopping mall with the help of a master key.

A CCTV footage of the woman who used Adenta SSNIT Flats as shopping mall with the help of a master key.

𝕏 Ghana 🇬🇭

252,164 views • 1 year ago

Working on my successor to the famous Footsies Skeleton, except as a boss fight

Working on my successor to the famous Footsies Skeleton, except as a boss fight

boghog

36,475 views • 2 years ago

Master Key 🗝️ appreciation post because why not 😌 such a genuine, kind, respectful guy and lowkey the coolest person on the internet 😂 🙌🏼 they could never make me hate him

Master Key 🗝️ appreciation post because why not 😌 such a genuine, kind, respectful guy and lowkey the coolest person on the internet 😂 🙌🏼 they could never make me hate him

ℭ𝔯𝔢𝔞𝔱𝔬𝔯 𝔒𝔣 ℭ𝔥𝔞𝔬𝔰 😈

22,522 views • 5 months ago

Happy New Year everyone! A preview of something some friends and I have been working on. The Skeleton Key ENDGAME payload contains PrometheOS, Insignia's Setup Assistant, XCAT, a controller and memory test and Rocky5's softmod, all sized down to fit on an 8MB memory unit! 1/2

Happy New Year everyone! A preview of something some friends and I have been working on. The Skeleton Key ENDGAME payload contains PrometheOS, Insignia's Setup Assistant, XCAT, a controller and memory test and Rocky5's softmod, all sized down to fit on an 8MB memory unit! 1/2

Harcroft

11,281 views • 1 year ago

A German Political Activist and Critic of Islam, Michael Stürzenberger as well as a Member of his Team and a Police Officer were Stabbed, suffering Serious Injuries, in a Terrorist Attack by an Islamic Extremist during a Public Campaign Event in the City of Mannheim, with the Attacker being Shot by Police. The Attack as well as the Shooting was Live-Streamed on German Social Media.

A German Political Activist and Critic of Islam, Michael Stürzenberger as well as a Member of his Team and a Police Officer were Stabbed, suffering Serious Injuries, in a Terrorist Attack by an Islamic Extremist during a Public Campaign Event in the City of Mannheim, with the Attacker being Shot by Police. The Attack as well as the Shooting was Live-Streamed on German Social Media.

OSINTdefender

171,519 views • 2 years ago

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

Dark Web Informer

18,534 views • 3 months ago

Destra Network | $DSYNC Introducing Destra Decentralized DNS This marks a significant milestone for decentralized finance: the launch of the first-ever on-chain platform primarily focused on making domain names accessible to the masses without any centralized intervention, powered by destra net. Destra Labs has engineered gas-efficient hybrid contracts inspired by combining the best of both ERC1185 and ERC137, primarily focusing on providing truly decentralized domain names. Until now, all DeFi dApps have relied on centralized domain names controlled by centralized organizations like ICANN and centralized registrars. A major concern with these centralized domains is the amount of control centralized DNS servers exert over the domain names. For instance, an employee working for a DNS server's organization could alter a zone record for a domain like and redirect it to a phishing dApp, potentially leading to the loss of billions of dollars in user funds. With Destra Decentralized DNS, the power lies in the hands of the domain owner, ensuring complete control over where the domain directs users. Unlike previous attempts, Destra DNS remains focused on the core purpose of a domain name: serving decentralized web applications.

Destra Network | $DSYNC Introducing Destra Decentralized DNS This marks a significant milestone for decentralized finance: the launch of the first-ever on-chain platform primarily focused on making domain names accessible to the masses without any centralized intervention, powered by destra net. Destra Labs has engineered gas-efficient hybrid contracts inspired by combining the best of both ERC1185 and ERC137, primarily focusing on providing truly decentralized domain names. Until now, all DeFi dApps have relied on centralized domain names controlled by centralized organizations like ICANN and centralized registrars. A major concern with these centralized domains is the amount of control centralized DNS servers exert over the domain names. For instance, an employee working for a DNS server's organization could alter a zone record for a domain like and redirect it to a phishing dApp, potentially leading to the loss of billions of dollars in user funds. With Destra Decentralized DNS, the power lies in the hands of the domain owner, ensuring complete control over where the domain directs users. Unlike previous attempts, Destra DNS remains focused on the core purpose of a domain name: serving decentralized web applications.

Destra Network

238,580 views • 2 years ago

National Reporter Charlie Peters reports as Mohammad Bashir, friend of the Manchester Synagogue attacker, is sentenced to life with a minimum term of 17 years after plotting a separate terror attack.

National Reporter Charlie Peters reports as Mohammad Bashir, friend of the Manchester Synagogue attacker, is sentenced to life with a minimum term of 17 years after plotting a separate terror attack.

GB News

12,843 views • 14 days ago