1. X
  2. Dominic Chell ๐Ÿ‘ป
Log inSign up
Dominic Chell ๐Ÿ‘ป
16.3K posts
Image
user avatar
Dominic Chell ๐Ÿ‘ป
@domchell
Just your friendly neighbourhood red teamer @MDSecLabs @nighthawk_c2 | Creator of /r/redteamsec | mdsec.co.uk | nighthawkc2.io
Manchester, England
mdsec.co.uk
Joined February 2009
554
Following
18K
Followers
RepliesRepliesMediaMedia

New to X?

Sign up now to get your own personalized timeline!

Create account

By signing up, you agree to the Terms of Service and Privacy Policy, including Cookie Use.

TermsยทPrivacyยทCookiesยทAccessibilityยทAds Infoยทยฉ 2026 X Corp.
Don't miss what's happening
People on X are the first to know.
Log inSign up
  • Pinned
    user avatar
    Dominic Chell ๐Ÿ‘ป
    @domchell
    May 15
    @MDSecLabs will be running our Red Team Capability Training out in #BlackHatUSA26 again this year. This year the course features a big refresh, with a bunch of new additions on the latest evolving techniques! Early bird discounts end this month! @BlackHatEvents
    Image
    7.2K
  • user avatar
    Dominic Chell ๐Ÿ‘ป
    @domchell
    Jul 21, 2023
    #CVE-2023-*
    Image
    50K
  • user avatar
    Dominic Chell ๐Ÿ‘ป
    @domchell
    Dec 22, 2023
    OST is out of control.... I was able to purchase the latest hacking tool with no background checks and for minimal cost!
    Image
    50K
  • user avatar
    Dominic Chell ๐Ÿ‘ป
    @domchell
    Mar 30, 2024
    I guess 2024 isn't going to be the year of Linux on the desktop either then
    26K
  • user avatar
    Dominic Chell ๐Ÿ‘ป
    @domchell
    Dec 22, 2021
    I didnโ€™t particularly want to name and shame the infosec person who stole $2k from me so tried to give him one last opp to return the money, instead he took to insulting and threatening me. However, Iโ€™m concerned about other ppl being scammed...
  • user avatar
    Dominic Chell ๐Ÿ‘ป
    @domchell
    Oct 22, 2023
    Everyone freaking out about the Okta pwnage... just wait until your EDR provider gets popped, free c2 to all endpoints ๐Ÿคค๐Ÿคค
    Image
    97K
  • user avatar
    Dominic Chell ๐Ÿ‘ป
    @domchell
    Mar 15, 2023
    As auth coercion is blowing up due to #cve-2023-23397, I've put together a quick thread about how we at @MDSecLabs have been leveraging these techniques in our red team engagements for quite some time. Its timely, but I presented much of this at @FiestaCon_RT last week ๐Ÿงต
    Image
    64K
  • user avatar
    Dominic Chell ๐Ÿ‘ป
    @domchell
    Sep 14, 2020
    I've just uploaded my slides from @x33fcon for anyone who's interested github.com/mdsecresearch/โ€ฆ
    Image
  • user avatar
    Dominic Chell ๐Ÿ‘ป
    @domchell
    Nov 23, 2020
    Just pushed a new blog post to the @MDSecLabs blog on Outlook based persistence - mdsec.co.uk/2020/11/a-fresโ€ฆ
    Image
  • user avatar
    Dominic Chell ๐Ÿ‘ป
    @domchell
    Feb 22, 2021
    Just push a new post and some fresh tooling to the @MDSecLabs github, demonstrating tricks for harvesting hashes over a c2. Weaponising these tricks has been a game changer for me during red teams.... mdsec.co.uk/2021/02/farminโ€ฆ
    Image
  • user avatar
    Dominic Chell ๐Ÿ‘ป
    @domchell
    Dec 31, 2023
    A little tip for defenders going in to 2024.... Image load event telemetry is so important. As a simple example here's how to generically catch Cobalt Strike in your environment based on winhttp loading OnDemandConnRouteHelper.dll and msvcp_win.dll every time a callback occurs...
    Image
    58K
  • user avatar
    Dominic Chell ๐Ÿ‘ป
    @domchell
    Jul 24, 2020
    Want to stop the blue team detecting your events? Just remotely DoS Sysmon ๐Ÿคฃ๐Ÿ˜ณ๐Ÿ˜ฑ #oops post coming to the @MDSecLabs blog soon....
    Image
  • user avatar
    Dominic Chell ๐Ÿ‘ป
    @domchell
    Dec 28, 2019
    Just published some thoughts on red teaming, how to approach it, procure it and get in to it... link.medium.com/eV1myC6NM2
  • user avatar
    Dominic Chell ๐Ÿ‘ป
    @domchell
    Sep 26, 2023
    Spent some time refreshing my memory on ETW TI tonight. As a red teamer it's really important to get a good understanding of what the defenders/EDRs can see. Using the excellent Havoc as an example, let's have a peak...
    Image
    74K
Advertisement
Advertisement