TrustedSec

@TrustedSec79k followers

End-to-end Cybersecurity consulting team leading the industry, supporting organizations, and giving back. #Hacktheplanet Blogs, news, webinars, and tools!

Open on X

Top outlier

17.4×

Best organic post

Peak views

181k

Single post

Bookmarks

3.6k

Across 101 organic posts

Last scan

Oct 17

Community cache

Posts 101 posts

#	Date	Post	↓ Outlier	Views	Likes	Reposts	Bookmarks
1	Nov 8, '23	The new Cybersecurity Education Program @BedfordHS has officially taken off🚀 Take a peek inside our launch event last week and learn more about how this program will impact studen	17.4×	181k	193	29	10
2	Nov 18, '19	We have open sourced our legal documentation used for physical penetration tests. The purpose is to help the community and organizations protect their employees when conducting tes	15.9×	0	1.7k	719	223
3	Sep 25, '23	Since day one, TrustedSec has been passionate about our purpose to make the world a safer place. We take our work seriously (without taking ourselves too seriously) and strived to	10.5×	109k	169	28	11
4	Nov 15, '23	Today we are excited to finally launch our new Impede Detection Platform. Unleash the power of Impede and revolutionize the way your business handles detection engineering.	10.0×	104k	142	35	23
5	Apr 29, '24	For almost a year, invisible password spraying could be performed against any #Azure tenant due to a vulnerability in #MicrosoftGraph. In our latest blog, @nyxgeek walks us through	8.8×	92k	314	143	122
6	Nov 7, '23	With initial access to a M365 account, Red Teamers can potentially find a treasure trove of sensitive information. @Flangvik goes over three tools (and one script) that he believes	8.2×	85k	364	138	146
7	Jan 11, '20	We have just released a new tool for exploiting CVE-2019-19781. Our goal was to keep private as long as possible to have a longer window to fix. Other researchers have published th	8.2×	0	786	435	73
8	Jul 29, '24	Today, TrustedSec is releasing #Specula (our previously internal framework) into the world, which will transform the Outlook email client into a beaconing C2 agent. @oddvarmoe and	7.7×	80k	321	126	128
9	Mar 19, '24	Principal Security Consultant @Oddvarmoe made an exciting discovery while using password-spraying tools in Microsoft Office 365 during a recent engagement. Read our latest #blog to	7.7×	80k	230	63	87
10	Jan 11, '20	We've just released a scanner that checks to see if a server is vulnerable for CVE-2019-19781. It does not actually exploit the target and is erfectly safe with no impact on the sy	5.8×	0	633	287	48
11	Oct 16, '25	Service triggers can be a pentester’s secret weapon, letting low-priv users quietly fire up powerful services. In our new blog, @freefirex2 breaks down the types of service trigger	5.5×	57k	155	59	99
12	Oct 10, '23	Our new #blog post by @mega_spl0it and @4ndr3W6S takes a deep dive into how Active Directory (AD) attribute-based detections can be built and how to identify where an adversary may	5.1×	53k	236	92	75
13	Feb 9, '23	Azure cloud can be compromised even with Domain Admin status. Learn about the dangers of #Azure SSO machine account compromise in our new #blog by Security Consultant Edwin David.	4.9×	51k	188	83	61
14	Jun 3, '19	PenTesters Framework (PTF) v2.3 “All the Tools” released. Adds 7 new tools including rdp scanner, support for internal gitlab, support for customized installs of only certain tools	4.6×	0	481	223	59
15	Feb 6, '20	Secret's out! @Carlos_Perez announces the release of the TrustedSec #Sysmon Community Guide. Discover the vision for making the guide and how you can contribute to making the best	4.2×	0	427	197	61
16	Feb 1, '18	New Public Tool Release: Hate_Crack Automated Hash Cracking Techniques with Hashcat Written by: @Spoonman1091 #TrustedSec	3.9×	0	379	248	2
17	Jun 1, '23	🚨Critical vulnerability has been discovered in MOVEit Transfer, a widely used secure file transfer system. 🚨 The TrustedSec IR team has this technical analysis and post-exploitat	3.8×	40k	129	63	16
18	Feb 3, '22	Senior Security Consultant @Jean_Maes_1994 gives us the first comprehensive resource about all things #relaying. This guide covers a range of techniques from most common to the les	3.5×	0	326	163	66
19	Oct 8, '24	During a recent engagement, @Bandrel discovered how an attacker can craft a CSR by using default system certificates. After finding out this method was novel, the team kept digging	3.5×	36k	258	125	94
20	Jan 23, '25	Who says #Python Malware is out of style? In our new #blog,@GuhnooPlusLinux revisits an old technique he believes is a prime candidate to host #malware payloads—Python for Windows.	3.4×	35k	200	77	101
21	Feb 9, '19	The PenTesters Framework (PTF) version 2.2 “Tool Haven” released. Adds support for docker containers, number of new tools and fixes. Total of 252 tools now! #TrustedSec	3.4×	0	355	161	45
22	Jan 24, '23	In this guide from @GuhnooPlusLinux, you'll learn how the new #BOFLoader extension allows BOFs to be used from a #Meterpreter session. Discover new attacks made possible in Meterpr	3.1×	32k	137	72	21
23	Jul 23, '17	New tool release from #TrustedSec @Ben0xA + @Spoonman1091: “NPS_Payload” Automated msbuild code exec with NPS.	3.1×	0	277	205	0
24	Oct 30, '19	A message from CEO @HackingDave regarding the recent incident at the Dallas County Courthouse Judicial Branch Building in Iowa.	3.1×	0	325	163	3
25	Dec 5, '23	In our new #blog post, Senior Security Consultant @n00py1 shows us why you don't need a drawer full of fancy tools to pivot through networks—just some Windows #OpenSSH magic. Read	3.1×	32k	206	69	65
26	Sep 3, '24	Browsers can be a high-value target for stored credentials, cookies, or access tokens. In our new #blog, TAC Practice Lead @mega_spl0it walks us through building Splunk queries to	2.9×	30k	144	55	67
27	Dec 17, '20	🚨URGENT🚨 Our #IncidentResponse team has put together a playbook of recommended actions to provide some level of assurance that your organization is no longer affected by the Sola	2.9×	0	273	142	43
28	Jul 1, '25	Chrome Remote Desktop can offer red teamers a subtle way to bypass restrictions—if they know how to use it. In this blog, @Oddvarmoe reveals a practical guide to repurposing Chrome	2.8×	29k	229	81	144
29	May 2, '24	Founder and CEO @HackingDave talks about what it means for TrustedSec to be named a Leader in the The Forrester Wave™ Cybersecurity Consulting Services, Q2 2024. Watch the full vid	2.7×	29k	135	25	10
30	Oct 27, '17	New Tool: Introducing TrevorC2 - a legitimate user browser and site emulation for command and control. #TrustedSec	2.7×	0	257	170	1
31	Feb 27, '24	In the first of this #blog series, @rootsecdev examines the weaponization of token theft. Follow along as he analyzes the behavior of attackers compromising Microsoft 365 users and	2.6×	27k	160	48	52
32	Jun 10, '19	New version of the PenTesters Framework v2.3.1 “All the Tools” released. Adds pexpect checks for gitlab support and requirements installation. #TrustedSec	2.6×	0	290	124	26
33	May 3, '21	New to security? We have a job for you! Our Associate Security Consultant role will provide training on cutting-edge research, technical-oriented skills, communication skills, and	2.5×	0	223	103	38
34	Feb 16, '21	.@Flangvik shows how to fully abuse #Azure’s infrastructure services using a new #tool he’s calling AzureC2Relay. Find out how to start using it now to secure your command and cont	2.5×	0	266	103	45
35	Apr 25, '19	Senior Security Consultant @Oddvarmoe gives us a look through the eyes of a #hacker using phishing by leveraging Azure Information Protection (AIP) in his latest #blog Next Gen Phi	2.5×	0	250	122	18
36	Mar 23, '18	New release: Magic Unicorn v3.0 - largest code release in years for Unicorn. Adds custom shellcode and Cobalt Strike support for PowerShell, HTA, and Macro attacks and much much mo	2.5×	0	235	150	10
37	Oct 28, '25	Forget common backdoors — a DLL hijack in Windows Narrator can grant SYSTEM-level persistence at login. In our new blog, @Oddvarmoe shows how attackers abuse accessibility features	2.4×	25k	192	70	105
38	Sep 7, '21	Our Targeted Operations team recently looked to improve their knowledge management strategy. @L1NKD34D provides a behind-the-scenes look at how Obsidian has been customized and eva	2.3×	0	252	79	45
39	Jan 11, '20	In response to the recent #Citrix ADC (NetScaler) CVE-2019-19781 Remote Code Execution vulnerability, the TrustedSec IR, offensive, and research teams provide files and locations t	2.3×	0	204	135	17
40	Jan 19, '21	🚨NEW TOOL🚨 We’re excited to publicly release SpooNMAP today! Combining the strengths of a port scanner with IDS evasion techniques, this tool can greatly reduce the time needed t	2.3×	0	220	109	35
41	May 28, '20	Do you wish you had a step by step guide and #GitHub resources to deploy infrastructure automation across a #RedTeam infrastructure? @curi0usJack thought you might. His latest #blo	2.3×	0	241	110	31
42	May 20, '25	Microsoft Deployment Toolkit (MDT) is often overlooked but shares are a goldmine of valuable info for red teamers. In our latest blog, @Oddvarmoe walks through how to set up MDT an	2.3×	24k	165	54	78
43	May 14, '19	Senior Security Consultant @nyxgeek helps you hone your brute-force attacks against O365, and shows you how to extract valuable user lists and group memberships once you have crede	2.2×	0	226	107	24
44	Feb 19, '18	We are proud to announce the addition of @Carlos_Perez as lead of the Research and Development team at #TrustedSec. Excited to have you on board Carlos! Great addition to our team,	2.1×	0	330	50	1
45	Mar 6, '25	A Red Team engagement is a serious commitment for any org who wants to improve their security posture. In our new blog, @curi0usJack breaks down some goals of a Red Team engagement	2.1×	22k	206	58	87
46	Apr 7, '20	#TrustedSec is expanding its training with online, public offerings! @HackingDave shares how these instructor-led courses will help further educate our #InformationSecurity communi	2.1×	0	217	87	37
47	Jun 9, '20	Consultant Christopher Paschen debuts what may be a new method of #persistence that takes advantage of the telemetry found in #Windows versions for the last decade	2.0×	0	199	103	25
48	Apr 5, '19	Magic Unicorn 3.7 released. Evades second stage detection on meterpreter and stability improvements on powershell obfuscation. #TrustedSec	2.0×	0	220	111	12
49	Sep 17, '20	Ever wanted to exploit that Group Policy modify access you have? Get a crash course on practical #redteam GPO client-side extension abuse in this #security #blog from @curi0usJack	2.0×	0	185	95	34
50	Aug 7, '19	PenTesters Framework (PTF) v2.3.2 released. Adds 9 new tools and multiple bug fixes. #TrustedSec	2.0×	0	223	83	26
51	Oct 15, '19	PenTesters Framework (PTF) v2.3.4 released. Defaults to python3 for PTF and TrevorC2. #TrustedSec	1.9×	0	216	86	27
52	Oct 24, '19	Senior Security Consultant @oddvarmoe does a deep-dive on how to find the specific Anti-Virus signature using manual testing and then shows techniques that can be used to bypass th	1.9×	0	200	94	21
53	Feb 20, '23	Our new "Learning Sysmon" YouTube series has officially launched! 🎉 Research Team Lead @Carlos_Perez will serve as your guide through these weekly training videos. Enjoy the first	1.9×	20k	150	50	58
54	Jul 28, '18	Magic Unicorn 3.2.1 released. Adds better evasion techniques and updates to README. #TrustedSec	1.9×	0	213	90	13
55	Mar 3, '22	Is #Mimikatz giving you away when changing users' passwords? @n00py1 is familiar with this scenario! Read "Manipulating User Passwords Without Mimikatz" where Rodriguez focuses on	1.8×	0	190	76	34
56	Jul 3, '23	Happy Birthday, TrustedSec! 🎉 This month we celebrate our 11th anniversary! Thank you to our awesome team and amazing clients for helping us make the world a safer place.	1.8×	19k	144	12	1
57	Aug 27, '20	Until @Oddvarmoe joined the #RedTeam he never worked with Cobalt Strike. Read how he (sometimes humorously) did things but learned to be a better Cobalt Strike operator in his jour	1.8×	0	198	77	24
58	Jan 28, '21	As #phishing becomes more and more difficult, @_xpn_ looks at one technique to ensure that a first payload execution attempt has as much of a chance to succeed as possible	1.8×	0	199	76	24
59	Mar 21, '19	The Social-Engineer Toolkit v8.0 codename “Maverick” beta released. New features, enhancements, fixes, and more. Work in progress. #TrustedSec	1.8×	0	199	89	11
60	Nov 20, '19	PenTesters Framework (PTF) v2.3.5 released. Adds new tool “unlock” for app locker bypasses and a number of enhancements and fixes. #TrustedSec	1.7×	0	205	67	27
61	Sep 12, '25	Even with HTTPS, Windows Server Update Services can be abused if attackers obtain a trusted certificate, allowing authentication relay. In our blog, @Coontzy1 explains how WSUS tra	1.7×	18k	241	91	137
62	Feb 2, '21	Every network is different but @jarsnah12 has noticed a common setting through many #RedTeam engagements that allow him to easily inject Rogue DNS records for malicious intent. Rea	1.7×	0	152	83	31
63	Jul 5, '18	New major release of Unicorn v3.2 - adds three new attack types with the new SettingContent-ms extensions. Supports MSF, Cobalt Strike, and custom shell code with MSHTA downloader.	1.7×	0	165	102	4
64	Aug 5, '18	PenTesters Framework (PTF) v2.1.3 released. Adds mitm6 and bug fixes on tool dependancies. #TrustedSec	1.7×	0	181	93	8
65	May 2, '22	Find out how VBS works alongside driver signature enforcement to protect the Windows kernel, and how @_xpn_ went about bypassing this to load unsigned drivers.	1.6×	0	150	76	33
66	Aug 11, '17	BLOG: Attacking Self-Hosted Skype for Business/Microsoft Lync Installations From TS: @nyxgeek. #TrustedSec	1.6×	0	140	114	0
67	Oct 27, '20	Even for dedicated disciples of #Mimikatz, NetSync may be a feature most aren’t familiar with. Senior Security Consultant Andrew Schwartz delves into what it is, how it’s executed,	1.6×	0	153	79	20
68	Jan 23, '20	Don’t get lost in an unknown network! @Carlos_Perez is breaking down the problem with Enumeration of Active Domain (AD) in his latest #blog From tester to defender, this is importa	1.6×	0	148	85	20
69	Feb 25, '19	.@ItsRamiMalek's #Oscars2019 reminds us of another great performance #MrRobot @HackingDave	1.6×	0	259	32	7
70	Dec 13, '21	The #Log4J vulnerability is as serious as it gets. To help organizations prevent, detect, and mitigate this vulnerability, we’ve put together actionable guidelines and recommendati	1.6×	0	150	60	37
71	Sep 1, '18	Magic Unicorn 3.2.6 released. Adds obfuscation and evasion techniques for macro and HTA injection methods. Also adds better evasion in PowerShell attack vector. #TrustedSec	1.5×	0	174	73	13
72	Jun 13, '25	Drag a file, leak a hash—Chrome’s quiet secret exposed. In this blog, @hoodoer reveals how Chrome’s drag-and-drop API lets web apps initiate complex actions; with some social engin	1.5×	16k	186	73	98
73	Feb 13, '24	From building payloads, testing evasions, and practicing offensive techniques, a must-have for every seasoned tester is a lab environment. @W9HAX walks us through how to deploy a d	1.5×	16k	149	40	47
74	Nov 6, '18	New Release: Magic Unicorn 3.5.1 - adds AMSI_BYPASS mode which uses the technique described here: to disable AMSI as part of the payload in Unicorn. Also added new features (print_	1.5×	0	156	84	9
75	Sep 21, '18	Magic Unicorn v3.4 released! Incorporates better evasion techniques, multiple bug fixes for macro and HTA methods, better handling on randomized variables, improved CS and shellcod	1.5×	0	146	82	10
76	Mar 16, '20	Magic Unicorn v3.8.3 released. Payload size reduction, signature bypasses, code cleanup and more. #TrustedSec	1.5×	0	147	77	15
77	Sep 29, '17	Magic Unicorn v2.8.1 released. Rewritten for A/V avoidance. #TrustedSec	1.4×	0	141	90	0
78	Feb 28, '20	Was your system exposed to the #CVE-20200688 exploit? #TrustedSec shows you how to detect it!	1.4×	0	137	72	10
79	Jun 18, '18	Check out our latest post by @HackingDave, titled "Weaponizing .SettingContent-ms Extensions for Code Execution" based on awesome research from @enigma0x3 and @SpecterOps. You'll f	1.3×	0	138	78	5
80	Jun 27, '19	Magic Unicorn 3.8.1 released. Adds new method for platform detection, obfuscation, and a fix for python2 raw_input when using AMSI bypass. #TrustedSec	1.3×	0	136	72	10
81	May 7, '20	Unicorn v3.9 released. * Incorporates an obfuscated @_RastaMouse bypass for AMSI. * New evasion techniques for getting around detections. * Splits payloads into different stages fo	1.3×	0	143	68	10
82	Apr 27, '18	'Malware: Linux, Mac, Windows, Oh My!' Our latest post on how to hunt for adversaries on Linux by finding binaries that shouldn't be present along with other ways to maintain acces	1.3×	0	136	68	9
83	Jan 2, '19	New version of Magic Unicorn released v3.6.1. Slims payload size down substantially, adds better encoding and obfuscation. Adds ability to use HTA and Macro generation with custom	1.3×	0	154	62	9
84	Jun 9, '22	Think you know WMI? Do you know how to write your own WMI provider? Senior Research Analyst Adam Todd is back to demonstrate how to create your own WMI provider for fun and profit.	1.3×	0	141	48	29
85	Oct 10, '18	It's Wednesday at the office... What should we do? Flamethrower? Sure. #TrustedSec	1.3×	0	196	24	0
86	May 11, '22	An inside look at our truly 𝕘𝕣𝕒𝕟𝕕 opening #welcomehome	1.3×	0	221	18	9
87	May 7, '20	The PenTesters Framework v2.4.3 released. * Adds Donut and Evil-WinRM * New Ascii Art * Fix for output log file * Adds a --no-banner option when starting * Adds ability to specify	1.2×	0	143	51	17
88	May 25, '18	PenTesters Framework (PTF) 2.1 released. Fixes for NMAP and Aircrack-NG. #TrustedSec	1.2×	0	133	65	10
89	Jul 6, '20	Research Practice Lead @Carlos_Perez has created #SysmonGuide video tutorials for our #Sysmon Community Guide! You can now go to our page or YouTube channel to enjoy these short vi	1.2×	0	129	56	22
90	Oct 31, '18	.@HackingDave has been busy traveling ✈️so @SecShoggoth has stepped up as the "New Office Dave" #HappyHalloween	1.2×	0	208	28	1
91	Jan 28, '19	IR Lead @SecShoggoth starts a 3part #series “Adventures of an RDP Honeypot” with an introduction to remote desktop #security He’ll detail ways to protect RDP installations and pitf	1.2×	0	138	47	16
92	Jul 30, '20	Happy birthday @HackingDave 🥳 Leave your favorite #DaveMoments here to make his day a little more special 🥰	1.2×	0	180	14	2
93	Aug 17, '20	We're excited to announce the addition of @_xpn_ as a Senior Security Consultant on our #RedTeam‼️another world-class 🌎 talent for our elite team	1.2×	0	189	25	1
94	Feb 20, '25	In our new #blog, Senior Research Analyst @codewhisperer84 unveils his new tool DIT Explorer which he created after researching NTDS.dit files on Active Directory. Read part one of	1.1×	11k	139	55	49
95	Mar 23, '20	Exciting news! We just created a #TrustedSec public Slack for anyone to use and interact with the folks here. Come join our group! We will have frequent updates, code, discussions	1.1×	0	143	40	7
96	Jul 1, '19	Happy birthday #TrustedSec here's to year lucky #7 🎉	1.1×	0	189	18	0
97	Jul 11, '25	One day 13 years ago, @HackingDave said, "I think I want to start my own business in the basement of my house." We are glad he did! TrustedSec wouldn't be what we are today without	1.0×	10k	207	28	17
98	May 9, '22	ᴡᴇʟᴄᴏᴍᴇ ʜᴏᴍᴇ This past Friday we celebrated the opening of our new state-of-the-art global headquarters. This building belongs to the community and we can't wait to start hosting a	1.0×	0	189	10	1
99	Mar 22, '21	IT’S OFFICIAL! #HQ	0.8×	0	145	9	0
100	Mar 22, '21	This is a groundbreaking #tweet	0.7×	0	134	13	0
101	Oct 13	You may have heard, we're now a part of #OpenAI’s Daybreak Defense Network—what does that mean for our customers? Go deeper, get to the evidence faster, and make real security impr	0.2×	2k	15	6	5

Scan another creator

Run this on any account.

XOutlier builds this table for every public profile you open on x.com, with live data and every post, not just the top 50.

Add to Chrome Download .zip