Website stats for Outflank - outflank.nl

Home | Outflank

- https://www.outflank.nl/

Clear advice with a hacker mindset. Outflank is a company with deep expertise in IT security. We are both hackers and seasoned professionals. We help our clients achieve...

Publications | Outflank

- https://outflank.nl/blog/2020/02/28/redelk-part-2-getting-you-up-and-running/

RedELK Part 2 – getting you up and running Marc Smeets | February 28, 2020. This is part 2 of a multipart blog series on RedELK: Outflank’s open sourced tooling that acts as a...

@OutflankNL | Twitter

- https://twitter.com/OutflankNL

The latest tweets from @OutflankNL

Outflank B.V. · GitHub

- https://github.com/outflanknl

Clear advice with a hacker mindset. Red Teaming - Digital Attack Simulation - Incident Detection and Response - Outflank B.V.

GitHub - outflanknl/EvilClippy: A cross-platform assistant ...

- https://github.com/outflanknl/EvilClippy

Evilclippy

- https://awesomeopensource.com/project/outflanknl/EvilClippy

Using Covenant and Excel 4.0 Macros to Bypass Windows ...

- https://lowery.tech/using-covenant-and-excel-4-0-macros-to-bypass-windows-defender/

https://outflank.nl/blog. Covenant Installation & Setup. So the first thing which needs to happen is the installation of Covenant. I recommend following the instructions listed...

Evilclippy

- https://awesomeopensource.com/project/outflanknl/EvilClippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and...

Evil Clippy: MS Office maldoc assistant | Outflank Blog ...

- https://www.reddit.com/r/netsec/comments/ble3es/evil_clippy_ms_office_maldoc_assistant_outflank/

outflank.nl/blog/2... comment. share. save hide report. 79% Upvoted. This thread is archived. New comments cannot be posted and votes cannot be cast. Sort by. best. View...

Mark Bergman - Digital security expert & ethical hacker ...

- https://www.linkedin.com/in/markbergman

Mark Bergman Digital security expert & ethical hacker at Outflank Amsterdam en omgeving, Nederland Informatietechnologie en services 4 personen hebben Mark Bergman aanbevolen

Haraka < 2.8.9 - Remote Command Execution - Linux remote ...

- https://www.exploit-db.com/exploits/41162

#!/usr/bin/python # Exploit Title: Harakiri # ShortDescription: Haraka comes with a plugin for processing attachments. Versions before 2.8.9 can be vulnerable to command...

Invoke-Excel4DCOM64.ps1 · GitHub

- https://gist.github.com/Philts/85d0f2f0a1cc901d40bbb5b44eb3b4c9

#Invoke-Excel4DCOM64.ps1 # Inject shellcode into excel.exe via ExecuteExcel4Macro through DCOM, Now with x64 support # Author: Stan Hegt (@StanHacked) / Outflank, x64 support by...

Haraka Remote Command Execution ≈ Packet Storm

- https://packetstormsecurity.com/files/140751/Haraka-Remote-Command-Execution.html

#!/usr/bin/python # Exploit Title: Harakiri # ShortDescription: Haraka comes with a plugin for processing attachments. Versions before 2.8.9 can be vulnerable to command injection

Simple Techniques to Bypass AVs – Threat Blogs

- https://threatblogs.wordpress.com/2020/05/17/simple-techniques-to-bypass-avs/

May 17, 2020 · AVs have been bypassed by adversaries for many years and as long as AVs exist, new techniques will continue to be developed. One of the techniques known as...

outflank - Vertaling Engels-Spaans

- https://www.mijnwoordenboek.nl/vertaal/EN/ES/outflank

Online vertaalwoordenboek. ES:outflank. Mijnwoordenboek.nl is een onafhankelijk privé-initiatief, gestart in 2004.

The forgotten fruits of securing your Windows 10 Endpoint ...

- https://call4cloud.nl/2020/07/the-forgotten-fruits-of-securing-your-windows-10-endpoint/

Jul 01, 2020 · #Harden lsass to help protect against credential dumping (mimikatz) and audit lsass access requests reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v...

Further Evasion in the Forgotten Corners of MS-XLS – Yet ...

- https://malware.pizza/2020/06/19/further-evasion-in-the-forgotten-corners-of-ms-xls/

Jun 19, 2020 · It's been a few weeks since my last discussion1 of Excel 4.0 macro shenanigans and the space continues to change. LastLine published a great report2 which...

Adventures in the Wonderful World of AMSI. | by byte_St0rm ...

- https://medium.com/@byte_St0rm/adventures-in-the-wonderful-world-of-amsi-25d235eb749c

Sep 05, 2019 · So before the reader signs up to this adventure, I’d like to make them aware of a few things. First of all, the blog is quite lengthy and the first sections are...

Imaging RAM with Nigilant32 | th3d1g1t

- https://th3d1g1t.wordpress.com/2011/12/06/imaging-ram-with-nigilant32/

Dec 06, 2011 · Nigilant32 is an incident response tool designed to capture as much information as possible from a running system with the smallest potential impact. Nigilant32...

Weaponizing Mapping Injection with Instrumentation ...

- https://splintercod3.blogspot.com/p/weaponizing-mapping-injection-with.html

What it does is just checking the InstrumentationCallback field and, if it's not NULL, it saves the original RIP address (this is the address to restore userland execution) and...