Загрузка видео...

Не удалось загрузить видео

На главную

🗝️A skeleton key attack patches LSASS on the victim's domain controller. This enables the attacker to authenticate as any user with a master password. #ThreatHunting #DFIR

ACEResponder's profile picture

ACE Responder

17,765 subscribers

22,043 просмотров • 2 лет назад •via X (Twitter)

#ThreatHunting#DFIR
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 0

Нет доступных комментариев

Здесь появятся комментарии из оригинального поста

Похожие видео

How AS-REP Roasting works. 🔐 This animation demonstrates the more secure Kerberos pre-auth and contrasts it with an AS-REP roasting attack which abuses the 'Do not require Kerberos preauthentication' setting. #ThreatHunting #DFIR
1:07

How AS-REP Roasting works. 🔐 This animation demonstrates the more secure Kerberos pre-auth and contrasts it with an AS-REP roasting attack which abuses the 'Do not require Kerberos preauthentication' setting. #ThreatHunting #DFIR

ACE Responder

33,121 просмотров • 2 лет назад

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.
1:28

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

Dark Web Informer

71,433 просмотров • 1 месяц назад

One example attack: 1. A Comet user sees a Reddit thread where one comment has hidden instructions. 2. The user asks Comet to summarize the thread. 3. Comet follows the malicious instructions to find the user's Perplexity login details and send them to the attacker.
2:30

One example attack: 1. A Comet user sees a Reddit thread where one comment has hidden instructions. 2. The user asks Comet to summarize the thread. 3. Comet follows the malicious instructions to find the user's Perplexity login details and send them to the attacker.

Brave

52,919 просмотров • 11 месяцев назад

Google Chrome on macOS installs a background app called GoogleUpdater that starts automatically after a restart. With this macOS bug, its executable can be silently replaced with any code. No password. No warning. The user is completely unaware. Hers's a demo (clipboard spy)
1:34

Google Chrome on macOS installs a background app called GoogleUpdater that starts automatically after a restart. With this macOS bug, its executable can be silently replaced with any code. No password. No warning. The user is completely unaware. Hers's a demo (clipboard spy)

Mysk 🇨🇦🇩🇪

123,735 просмотров • 13 дней назад

In Northern Ireland, a man and his children assault this woman-s child. The attacker's mother and child attack the victim's mother. The Police Belfast City Centre are more bothered about the safety of the attacker and his family.
2:01

In Northern Ireland, a man and his children assault this woman-s child. The attacker's mother and child attack the victim's mother. The Police Belfast City Centre are more bothered about the safety of the attacker and his family.

David Atherton

16,746 просмотров • 5 дней назад

AutoComputer’s (YC F24) desktop AI enables workers to automate any workflow on their computer into steps they can accept with a single keystroke, providing full user control – all with zero configuration. Congrats on the launch, Madhav Singhal and RickSugden!
2:14

AutoComputer’s (YC F24) desktop AI enables workers to automate any workflow on their computer into steps they can accept with a single keystroke, providing full user control – all with zero configuration. Congrats on the launch, Madhav Singhal and RickSugden!

Y Combinator

71,904 просмотров • 1 год назад

A woman has said she was "failed" by Travelodge after a sex attacker was given a key to her hotel room - where he assaulted her while she was asleep. 29 year old Kyran Smith lied to staff by telling them he was the victim's boyfriend - and was given her room number and key card. The woman - who can't be named for legal reasons - reported the attack to the hotel, which offered her a £30 refund. Travelodge later admitted this was an inappropriate response.
0:31

Sensitive content

A woman has said she was "failed" by Travelodge after a sex attacker was given a key to her hotel room - where he assaulted her while she was asleep. 29 year old Kyran Smith lied to staff by telling them he was the victim's boyfriend - and was given her room number and key card. The woman - who can't be named for legal reasons - reported the attack to the hotel, which offered her a £30 refund. Travelodge later admitted this was an inappropriate response.

Channel 4 News

60,233 просмотров • 5 месяцев назад

Amira Ostalski was in the same carriage as the attacker during the horror knife attack that saw 11 people stabbed on a train from Doncaster to Kings Cross.
2:08

Amira Ostalski was in the same carriage as the attacker during the horror knife attack that saw 11 people stabbed on a train from Doncaster to Kings Cross.

Good Morning Britain

31,857 просмотров • 9 месяцев назад

🚨 We're disclosing a macOS security bug that Apple says is not an issue. Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web—no password or warning is required. Here's a demo using Signal to steal its encryption key. 📝 Blog with technical details: link in the replies. Do you think this should be considered a security bug? 🎬👇
2:22

🚨 We're disclosing a macOS security bug that Apple says is not an issue. Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web—no password or warning is required. Here's a demo using Signal to steal its encryption key. 📝 Blog with technical details: link in the replies. Do you think this should be considered a security bug? 🎬👇

Mysk 🇨🇦🇩🇪

86,835 просмотров • 14 дней назад

The effects of the drug “spice” in Birmingham- this is known as a “mamba attack” and leaves the user often incapacitated.
0:33

The effects of the drug “spice” in Birmingham- this is known as a “mamba attack” and leaves the user often incapacitated.

Scarcity News

175,334 просмотров • 2 лет назад

A CCTV footage of the woman who used Adenta SSNIT Flats as shopping mall with the help of a master key.
1:47

A CCTV footage of the woman who used Adenta SSNIT Flats as shopping mall with the help of a master key.

𝕏 Ghana 🇬🇭

252,164 просмотров • 1 год назад

Working on my successor to the famous Footsies Skeleton, except as a boss fight
0:42

Working on my successor to the famous Footsies Skeleton, except as a boss fight

boghog

36,475 просмотров • 2 лет назад

Master Key 🗝️ appreciation post because why not 😌 such a genuine, kind, respectful guy and lowkey the coolest person on the internet 😂 🙌🏼 they could never make me hate him
0:20

Master Key 🗝️ appreciation post because why not 😌 such a genuine, kind, respectful guy and lowkey the coolest person on the internet 😂 🙌🏼 they could never make me hate him

ℭ𝔯𝔢𝔞𝔱𝔬𝔯 𝔒𝔣 ℭ𝔥𝔞𝔬𝔰 😈

22,522 просмотров • 5 месяцев назад

Happy New Year everyone! A preview of something some friends and I have been working on. The Skeleton Key ENDGAME payload contains PrometheOS, Insignia's Setup Assistant, XCAT, a controller and memory test and Rocky5's softmod, all sized down to fit on an 8MB memory unit! 1/2
2:00

Happy New Year everyone! A preview of something some friends and I have been working on. The Skeleton Key ENDGAME payload contains PrometheOS, Insignia's Setup Assistant, XCAT, a controller and memory test and Rocky5's softmod, all sized down to fit on an 8MB memory unit! 1/2

Harcroft

11,281 просмотров • 1 год назад

A German Political Activist and Critic of Islam, Michael Stürzenberger as well as a Member of his Team and a Police Officer were Stabbed, suffering Serious Injuries, in a Terrorist Attack by an Islamic Extremist during a Public Campaign Event in the City of Mannheim, with the Attacker being Shot by Police. The Attack as well as the Shooting was Live-Streamed on German Social Media.
0:48

A German Political Activist and Critic of Islam, Michael Stürzenberger as well as a Member of his Team and a Police Officer were Stabbed, suffering Serious Injuries, in a Terrorist Attack by an Islamic Extremist during a Public Campaign Event in the City of Mannheim, with the Attacker being Shot by Police. The Attack as well as the Shooting was Live-Streamed on German Social Media.

OSINTdefender

171,519 просмотров • 2 лет назад

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root
0:22

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

Dark Web Informer

18,534 просмотров • 3 месяцев назад

Destra Network | $DSYNC Introducing Destra Decentralized DNS This marks a significant milestone for decentralized finance: the launch of the first-ever on-chain platform primarily focused on making domain names accessible to the masses without any centralized intervention, powered by destra net. Destra Labs has engineered gas-efficient hybrid contracts inspired by combining the best of both ERC1185 and ERC137, primarily focusing on providing truly decentralized domain names. Until now, all DeFi dApps have relied on centralized domain names controlled by centralized organizations like ICANN and centralized registrars. A major concern with these centralized domains is the amount of control centralized DNS servers exert over the domain names. For instance, an employee working for a DNS server's organization could alter a zone record for a domain like and redirect it to a phishing dApp, potentially leading to the loss of billions of dollars in user funds. With Destra Decentralized DNS, the power lies in the hands of the domain owner, ensuring complete control over where the domain directs users. Unlike previous attempts, Destra DNS remains focused on the core purpose of a domain name: serving decentralized web applications.
1:03

Destra Network | $DSYNC Introducing Destra Decentralized DNS This marks a significant milestone for decentralized finance: the launch of the first-ever on-chain platform primarily focused on making domain names accessible to the masses without any centralized intervention, powered by destra net. Destra Labs has engineered gas-efficient hybrid contracts inspired by combining the best of both ERC1185 and ERC137, primarily focusing on providing truly decentralized domain names. Until now, all DeFi dApps have relied on centralized domain names controlled by centralized organizations like ICANN and centralized registrars. A major concern with these centralized domains is the amount of control centralized DNS servers exert over the domain names. For instance, an employee working for a DNS server's organization could alter a zone record for a domain like and redirect it to a phishing dApp, potentially leading to the loss of billions of dollars in user funds. With Destra Decentralized DNS, the power lies in the hands of the domain owner, ensuring complete control over where the domain directs users. Unlike previous attempts, Destra DNS remains focused on the core purpose of a domain name: serving decentralized web applications.

Destra Network

238,580 просмотров • 2 лет назад

National Reporter Charlie Peters reports as Mohammad Bashir, friend of the Manchester Synagogue attacker, is sentenced to life with a minimum term of 17 years after plotting a separate terror attack.
4:12

National Reporter Charlie Peters reports as Mohammad Bashir, friend of the Manchester Synagogue attacker, is sentenced to life with a minimum term of 17 years after plotting a separate terror attack.

GB News

12,843 просмотров • 14 дней назад