mr.d0x

C:\Users\mr.d0x> whoami_

Twitter Recap - Part 1

January 8, 2022

This is the start of a Twitter recap series which highlights interesting or useful posts that never made it to the blog

December 31, 2021

Abuse the way O365 Outlook renders cloud attachments to make malicious executable cloud attachments look like harmless files

December 10, 2021

UPDATED: With the announcment that MS Teams allows users outside of an organization to message users, I revisited Teams and added new techniques

November 17, 2021

Google Drive’s email file functionality can be used to send phishing emails via the google.com domain

November 2, 2021

A new technique showing how an attacker can create calendar invites with spoofed attendees

October 22, 2021

Simple changes in process relationship could bypass certain security solutions

October 20, 2021

A quick and easy way to bypass link analyzers by hiding behind Google’s domain.

October 20, 2021

Google Drive and OneDrive contain spoofing vulnerabilities that can aid attackers with phishing

August 4, 2021

If you run into VirtualBox on a machine during an engagement try some of these methods

July 26, 2021

A simple guide on finding exposed AWS S3 buckets and Azure Blobs