Max Andreacchi

This week zero-lab.ai came out of stealth, and I have the absolute pleasure of sharing my vulnerability disclosure to @anthropic.com via the @hacker0x01.bsky.social platform. Many thanks to them for their quick validation. Check out the vulnerability report here: zero-lab.ai/article?slug...

Spoiler alert: Your AI safety measures might have a blind spot. 👀 When attackers use conversation context to bypass LLM safeguards, single-prompt evals just don't cut it anymore. Dive into @atomicchonk.bsky.social's latest blog on multi-prompt attack detection. ghst.ly/47qJhzn

Potato exploits have been a cornerstone of local priv esc on Windows for years, but how & why do the inner starchy workings of the potatoes function? Join @atomicchonk.bsky.social next week to understand Windows access tokens & their use in the Windows environment. ghst.ly/june-web-bsky

New blog post is up! Stepping out of my comfort zone (be kind), looking at Meta's Prompt Guard 2 model, how to misclassify prompts using the Unigram tokenizer and hopefully demonstrate why we should invest time looking beyond the API at how LLMs function. specterops.io/blog/2025/06...

It's potato harvest season! 🥔 Join our upcoming webinar w/ @atomicchonk.bsky.social as he breaks down the starchy workings of potato exploits — from Windows access tokens to technical walkthroughs of Rotten, Juicy, and Rogue potatoes. Register at ghst.ly/june-web-bsky

Just wrapped up a blog post on understanding BadSuccesor from a DACL abuse aspect and mitigating it from a DACL abuse perspective. Also added some PowerShell on my GitHub to create and remove the mitigations.

BadSuccessor is a new AD attack primitive that abuses dMSAs, allowing an attacker who can modify or create a dMSA to escalate privileges and take over the forest. Check out @jimsycurity.adminsdholder.com's latest blog post to understand how you can mitigate risk. ghst.ly/4kXTLd9

If you haven’t read the BadSuccessor blog post, woo boy: www.akamai.com/blog/securit...

Beyond hyped to be presenting with @anam0x.bsky.social and the rest of my team at Arsenal at BHUSA 2025! app.ingo.me/q/0x9xn

Do you miss "@cobaltstrikebot"? If so, here's a blog post showing how you can pull Cobalt Strike SpawnTo and watermark info with @shodanhq.bsky.social and some PowerShell: forensicitguy.github.io/squeezing-co...

It was an absolute pleasure to speak at @cackalackycon.bsky.social today and share my love of potatoes. Thank you to @specterops.io for fueling me to always go a layer deeper in learning and motivating me to chase my passions 🥔

What do potatoes have to do with privilege escalation on Windows? Come find out at Max Andreacchi’s session, “Tater Tokens: Introduction to Windows Access Tokens and Their Role in PrivEsc” on May 18th!

Why do potato exploits work & how can we stop them? Join @atomicchonk.bsky.social at @cackalackycon.bsky.social this weekend for a walkthrough of Windows access token manipulation and get the answer. ghst.ly/4jzjlnI

Always enjoy the views in Seattle! Spent excellent quality time with teammates and received amazing training. Now for a weekend of running and resting back home before new travels next week ✈️

Don't let threat actors mash your Windows security! @atomicchonk.bsky.social’s @cackalackycon.bsky.social talk breaks down potato exploits from token mechanics to defensive implementations. Learn more ➡️ ghst.ly/4jzjlnI

NC BABYYY 💙

I’ve had to beat stubbornness out of my training. When I ran 10+ yrs ago I’d just hard-head my way forward but wind up injured. This time I’m focused on the goals ahead; nagging aches mean a rest day tomorrow so I can live to run later this week and keep this train moving to Oct (and beyond)

Understanding Windows access tokens could be your best defense. At @cackalackycon.bsky.social, @atomicchonk.bsky.social will be peeling back the layers on potato exploits that threat actors use for privilege escalation. Check out the schedule to learn more ➡️ ghst.ly/4jzjlnI

Just pushed a new versions for #AADInternals and AADInternals-Endpoint modules! Some bug fixes plus support for: 1️⃣ Microsoft Authentication Library (MSAL) 2️⃣ Token Protection 3️⃣ Continuous Access Evaluation (CAE)

The Ketman Project has published a list of names and GitHub profiles they believe may be North Korean rogue IT workers posing as open-source developers and freelancers, and seeking employment at Western software companies www.ketman.org/dprk-it-work...

Initial stab at using Chris Hayuk's mcp-cli tool to pair roadrecon_mcp_server with a locally-hosted model (in this case, mistral-small3.1). Note that running this query took over 300s so YMMV depending on several factors. Will update GH this week with instructions on replicating this.

Think NTLM relay is a solved problem? Think again. Relay attacks are more complicated than many people realize. Check out this deep dive from Elad Shamir on NTLM relay attacks & the new edges we recently added to BloodHound. ghst.ly/4lv3E31

Yesterday I broke 100 miles of running in 2025 on the 97th day of the year 🎉 Using this weekend’s 5K as the long run in my training plan on the road to a 10K in June 🏃🏻‍♂️ #runsky

Everybody’s using AI assistants and tools these days, but do most of us understand how our text-based input is being interpreted and processed? Check out my latest blog post for a basic intro to text interpretation by AI assistants. www.corgi-Corp.com/post/tokeniz...

While I wait on hardware for local model hosting, I modified roadrecon_mcp_server to ingest a "caps.html" file instead of inferring the tenant's CAPs based on GUI data. By default it'll look in C:\Temp for your file, but this can be specified as shown in the video. #ai #llm #mcp #infosec #microsoft

Procrastinated long enough but the GPU upgrade happens next week. R&D goals finally forced it, so we’ll be grinding more MCP dev shortly. Goal is to get roadrecon_mcp_server FULLY local, reducing data privacy concerns on Azure data collection and where it resides. Local LLMs here I come.

You can be anything you want, why not NT AUTHORITY\SYSTEM? Learn how you can be your best system-level self at my talk, "Tater Tokens: Intro to Windows Access Tokens and Their Role in PrivEsc" at @cackalackycon.bsky.social May 16-18. Join us for nerdy chatter, Malort, and general #hacking fun.

TIL that Protected Users Security Group membership does not stop someone from using Kerberos with AES256 encryption type to authenticate as said user (it only prevents DES and RC4 encryption types in pre-auth). learn.microsoft.com/en-us/window...

After multiple failed attempts, the conch was blown at 10:37. The 2025 Barkley Marathons begins in one hour. #BM100.

About a month out from my 4 miler at UNC, any amount y’all could toss at this fundraising campaign for the AKC CHF would be super appreciated 🙏🏼 #running #runsky event.racereach.com/tar-heel-10-...

CackalackyCon has a 101 page to learn all about our conference and what to expect. cackalackycon.org/ck...

See y’all at @cackalackycon.bsky.social in 65 days! Time to tango with taters and tokens! #redteam #hacking #infosec

walk time 🤖

Just watched @secureworks.bsky.social Yuya Chudo’s talk from BH 2024 on bypassing Entra’s CAPs when it comes to device auth/restrictions. Great insight to understanding how MSFT handles device auth and how it’s abusable. Always love to see a demo go right at hacker camp 🎉 youtu.be/JItnI6b9DII?...

BIG NEWS: SpecterOps raises $75M Series B to strengthen identity security! Led by Insight Partners with Ansa Capital, M12, Ballistic Ventures, Decibel, and Cisco Investments. ghst.ly/seriesb #IdentitySecurity #CyberSecurity (1/6)