正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

🗝️A skeleton key attack patches LSASS on the victim's domain controller. This enables the attacker to authenticate as any user with a master password. #ThreatHunting #DFIR

ACE Responder

17,765 subscribers

22,043 次观看 • 2 年前 •via X (Twitter)

#ThreatHunting #DFIR

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

How AS-REP Roasting works. 🔐 This animation demonstrates the more secure Kerberos pre-auth and contrasts it with an AS-REP roasting attack which abuses the 'Do not require Kerberos preauthentication' setting. #ThreatHunting #DFIR

How AS-REP Roasting works. 🔐 This animation demonstrates the more secure Kerberos pre-auth and contrasts it with an AS-REP roasting attack which abuses the 'Do not require Kerberos preauthentication' setting. #ThreatHunting #DFIR

ACE Responder

33,121 次观看 • 2 年前

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

Dark Web Informer

71,433 次观看 • 1 个月前

One example attack: 1. A Comet user sees a Reddit thread where one comment has hidden instructions. 2. The user asks Comet to summarize the thread. 3. Comet follows the malicious instructions to find the user's Perplexity login details and send them to the attacker.

One example attack: 1. A Comet user sees a Reddit thread where one comment has hidden instructions. 2. The user asks Comet to summarize the thread. 3. Comet follows the malicious instructions to find the user's Perplexity login details and send them to the attacker.

Brave

52,919 次观看 • 11 个月前

Google Chrome on macOS installs a background app called GoogleUpdater that starts automatically after a restart. With this macOS bug, its executable can be silently replaced with any code. No password. No warning. The user is completely unaware. Hers's a demo (clipboard spy)

Google Chrome on macOS installs a background app called GoogleUpdater that starts automatically after a restart. With this macOS bug, its executable can be silently replaced with any code. No password. No warning. The user is completely unaware. Hers's a demo (clipboard spy)

Mysk 🇨🇦🇩🇪

123,735 次观看 • 13 天前

In Northern Ireland, a man and his children assault this woman-s child. The attacker's mother and child attack the victim's mother. The Police Belfast City Centre are more bothered about the safety of the attacker and his family.

In Northern Ireland, a man and his children assault this woman-s child. The attacker's mother and child attack the victim's mother. The Police Belfast City Centre are more bothered about the safety of the attacker and his family.

David Atherton

16,746 次观看 • 5 天前

AutoComputer’s (YC F24) desktop AI enables workers to automate any workflow on their computer into steps they can accept with a single keystroke, providing full user control – all with zero configuration. Congrats on the launch, Madhav Singhal and RickSugden!

AutoComputer’s (YC F24) desktop AI enables workers to automate any workflow on their computer into steps they can accept with a single keystroke, providing full user control – all with zero configuration. Congrats on the launch, Madhav Singhal and RickSugden!

Y Combinator

71,904 次观看 • 1 年前

A woman has said she was "failed" by Travelodge after a sex attacker was given a key to her hotel room - where he assaulted her while she was asleep. 29 year old Kyran Smith lied to staff by telling them he was the victim's boyfriend - and was given her room number and key card. The woman - who can't be named for legal reasons - reported the attack to the hotel, which offered her a £30 refund. Travelodge later admitted this was an inappropriate response.

Sensitive content

A woman has said she was "failed" by Travelodge after a sex attacker was given a key to her hotel room - where he assaulted her while she was asleep. 29 year old Kyran Smith lied to staff by telling them he was the victim's boyfriend - and was given her room number and key card. The woman - who can't be named for legal reasons - reported the attack to the hotel, which offered her a £30 refund. Travelodge later admitted this was an inappropriate response.

Channel 4 News

60,233 次观看 • 5 个月前

Amira Ostalski was in the same carriage as the attacker during the horror knife attack that saw 11 people stabbed on a train from Doncaster to Kings Cross.

Amira Ostalski was in the same carriage as the attacker during the horror knife attack that saw 11 people stabbed on a train from Doncaster to Kings Cross.

Good Morning Britain

31,857 次观看 • 9 个月前

🚨 We're disclosing a macOS security bug that Apple says is not an issue. Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web—no password or warning is required. Here's a demo using Signal to steal its encryption key. 📝 Blog with technical details: link in the replies. Do you think this should be considered a security bug? 🎬👇

🚨 We're disclosing a macOS security bug that Apple says is not an issue. Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web—no password or warning is required. Here's a demo using Signal to steal its encryption key. 📝 Blog with technical details: link in the replies. Do you think this should be considered a security bug? 🎬👇

Mysk 🇨🇦🇩🇪

86,835 次观看 • 14 天前

The effects of the drug “spice” in Birmingham- this is known as a “mamba attack” and leaves the user often incapacitated.

The effects of the drug “spice” in Birmingham- this is known as a “mamba attack” and leaves the user often incapacitated.

Scarcity News

175,334 次观看 • 2 年前

A CCTV footage of the woman who used Adenta SSNIT Flats as shopping mall with the help of a master key.

A CCTV footage of the woman who used Adenta SSNIT Flats as shopping mall with the help of a master key.

𝕏 Ghana 🇬🇭

252,164 次观看 • 1 年前

Working on my successor to the famous Footsies Skeleton, except as a boss fight

Working on my successor to the famous Footsies Skeleton, except as a boss fight

boghog

36,475 次观看 • 2 年前

Master Key 🗝️ appreciation post because why not 😌 such a genuine, kind, respectful guy and lowkey the coolest person on the internet 😂 🙌🏼 they could never make me hate him

Master Key 🗝️ appreciation post because why not 😌 such a genuine, kind, respectful guy and lowkey the coolest person on the internet 😂 🙌🏼 they could never make me hate him

ℭ𝔯𝔢𝔞𝔱𝔬𝔯 𝔒𝔣 ℭ𝔥𝔞𝔬𝔰 😈

22,522 次观看 • 5 个月前

Happy New Year everyone! A preview of something some friends and I have been working on. The Skeleton Key ENDGAME payload contains PrometheOS, Insignia's Setup Assistant, XCAT, a controller and memory test and Rocky5's softmod, all sized down to fit on an 8MB memory unit! 1/2

Happy New Year everyone! A preview of something some friends and I have been working on. The Skeleton Key ENDGAME payload contains PrometheOS, Insignia's Setup Assistant, XCAT, a controller and memory test and Rocky5's softmod, all sized down to fit on an 8MB memory unit! 1/2

Harcroft

11,281 次观看 • 1 年前

A German Political Activist and Critic of Islam, Michael Stürzenberger as well as a Member of his Team and a Police Officer were Stabbed, suffering Serious Injuries, in a Terrorist Attack by an Islamic Extremist during a Public Campaign Event in the City of Mannheim, with the Attacker being Shot by Police. The Attack as well as the Shooting was Live-Streamed on German Social Media.

A German Political Activist and Critic of Islam, Michael Stürzenberger as well as a Member of his Team and a Police Officer were Stabbed, suffering Serious Injuries, in a Terrorist Attack by an Islamic Extremist during a Public Campaign Event in the City of Mannheim, with the Attacker being Shot by Police. The Attack as well as the Shooting was Live-Streamed on German Social Media.

OSINTdefender

171,519 次观看 • 2 年前

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

Dark Web Informer

18,534 次观看 • 3 个月前

Destra Network | $DSYNC Introducing Destra Decentralized DNS This marks a significant milestone for decentralized finance: the launch of the first-ever on-chain platform primarily focused on making domain names accessible to the masses without any centralized intervention, powered by destra net. Destra Labs has engineered gas-efficient hybrid contracts inspired by combining the best of both ERC1185 and ERC137, primarily focusing on providing truly decentralized domain names. Until now, all DeFi dApps have relied on centralized domain names controlled by centralized organizations like ICANN and centralized registrars. A major concern with these centralized domains is the amount of control centralized DNS servers exert over the domain names. For instance, an employee working for a DNS server's organization could alter a zone record for a domain like and redirect it to a phishing dApp, potentially leading to the loss of billions of dollars in user funds. With Destra Decentralized DNS, the power lies in the hands of the domain owner, ensuring complete control over where the domain directs users. Unlike previous attempts, Destra DNS remains focused on the core purpose of a domain name: serving decentralized web applications.

Destra Network | $DSYNC Introducing Destra Decentralized DNS This marks a significant milestone for decentralized finance: the launch of the first-ever on-chain platform primarily focused on making domain names accessible to the masses without any centralized intervention, powered by destra net. Destra Labs has engineered gas-efficient hybrid contracts inspired by combining the best of both ERC1185 and ERC137, primarily focusing on providing truly decentralized domain names. Until now, all DeFi dApps have relied on centralized domain names controlled by centralized organizations like ICANN and centralized registrars. A major concern with these centralized domains is the amount of control centralized DNS servers exert over the domain names. For instance, an employee working for a DNS server's organization could alter a zone record for a domain like and redirect it to a phishing dApp, potentially leading to the loss of billions of dollars in user funds. With Destra Decentralized DNS, the power lies in the hands of the domain owner, ensuring complete control over where the domain directs users. Unlike previous attempts, Destra DNS remains focused on the core purpose of a domain name: serving decentralized web applications.

Destra Network

238,580 次观看 • 2 年前

National Reporter Charlie Peters reports as Mohammad Bashir, friend of the Manchester Synagogue attacker, is sentenced to life with a minimum term of 17 years after plotting a separate terror attack.

National Reporter Charlie Peters reports as Mohammad Bashir, friend of the Manchester Synagogue attacker, is sentenced to life with a minimum term of 17 years after plotting a separate terror attack.

GB News

12,843 次观看 • 14 天前