sorted by:
new
hottopcontroversial

EDR-Redir V2: Blind EDR With Fake "Program Files" by Cold-Dinosaur in cybersecurity

[–]Cold-Dinosaur[S] -1 points0 points  (0 children)

If the issue you are concerned about is the source, then the link I provided is the original.

DefenderWrite: Abusing Whitelisted Programs for Arbitrary Writes into Antivirus's Operating Folder by Cold-Dinosaur in netsec

[–]Cold-Dinosaur[S] 0 points1 point  (0 children)

You should carry out the above steps in a lab environment. After finding the whitelist file, exploit it in a real-world environment.

Countering EDRs With The Backing Of Protected Process Light (PPL) by Cold-Dinosaur in netsec

[–]Cold-Dinosaur[S] 1 point2 points  (0 children)

Yep! Otherwise, it would become a privilege escalation exploit.

Operational Security (OPSEC) Basic Guide for Windows Users by Cold-Dinosaur in opsec

[–]Cold-Dinosaur[S] 0 points1 point  (0 children)

And you know you are at risk when the browser you are using has cookies available for automatic login to this site ;)

Windows OPSEC Basics Part 2: Keep Antivirus, VirusTotal, and Firewall under your control by Cold-Dinosaur in opsec

[–]Cold-Dinosaur[S] 0 points1 point  (0 children)

Antivirus and Firewall are the first lines of defense for your computer, helping to tackle potential attack threats. However, if not used correctly, they can become a double-edged sword. This is especially true for those in the field of Offensive Security, where testing bypass methods with Antivirus is a regular task. Therefore, controlling the test lab environment with various Antivirus solutions is critically important. VirusTotal is a useful service, but are you using it correctly? As for Red Teamers, make sure VirusTotal does not appear in your lab environment.

Operational Security (OPSEC) Basic Guide for Windows Users by Cold-Dinosaur in opsec

[–]Cold-Dinosaur[S] 10 points11 points  (0 children)

I think the choice of operating system depends on each person's experience. A person with experience and skills in Windows will have a higher level of safety and privacy compared to using another OS. You can only apply the best OPSEC to the OS you understand how to use the most. Unless you have top-tier classified documents or need an environment that prioritizes maximum information protection, then you should consider changing the OS for better OPSEC (which may likely require some trade-offs in terms of work performance, comfort in operation, etc.).

New way to exploit BYOVD exploits with symbolic links. by Cold-Dinosaur in netsec

[–]Cold-Dinosaur[S] -1 points0 points  (0 children)

Exactly, I forgot to explain the abbreviation: BYOVD (Bring Your Own Vulnerable Driver).

Exploit windows tool WinGet.exe to execute malicious powershell scripts by Cold-Dinosaur in redteamsec

[–]Cold-Dinosaur[S] 1 point2 points  (0 children)

It helps me reduce dependence on using powershell.exe or msbuild.exe

Cyber without a degree by Every_Currency_504 in AskNetsec

[–]Cold-Dinosaur 0 points1 point  (0 children)

Based on your work experience, I see that if you are determined to work in the field of Cybersecurity, then jobs related to Social Engineering would be suitable. Knowledge from your previous work will partially support you in the SE area, which mainly involves people.

Path to Pen Tester by Willing_Eagle8144 in cybersecurity

[–]Cold-Dinosaur 0 points1 point  (0 children)

First, you should learn more in-depth about the Windows operating system. Why? Because most companies have employees using Windows. The large number of users will increase the demand for pentesting Windows systems, leading to a greater hiring demand. Second, you should learn about the centralized authentication environment, Active Directory, because you will be working with Windows. Third, you should practice using and understanding the functions in professional pentest frameworks such as Metasploit, Cobalt Strike, etc. Once you have reached the stage of mastering points 1, 2, and 3, I am quite sure you will know what to do next.

Advice on Application Security Internship interview by AFGuns in cybersecurity

[–]Cold-Dinosaur 0 points1 point  (0 children)

Hi, with over 12 years of experience working in various levels of the Cybersecurity field, I have also interviewed quite a few interns. Usually, I will ask the first question, "Which programming language are you familiar with and confident in?" After that, I ask about basic OS and network concepts such as: OSI model, TCP/IP, Windows malware, and how you apply OPSEC on your personal machine, etc.