Sander Maas (@__Retrospect) / X

Sander Maas
@__Retrospect
Feb 6, 2024
Surprise, surprise... the new Teams client that is based on Edge WebView has the same issue in a similar "Session Storage" folder somewhere in %localappdata%
Sander Maas
@__Retrospect
Jan 4, 2024
If you are looking for an easy way to access O365 refresh tokens when landing on an endpoint, have a look at the log files on the endpoint stored in "%localappdata%\Microsoft\Olk\EBWebView\Default\Session Storage\" [1/2]
Sander Maas
@__Retrospect
Feb 6, 2024
I have been playing around with the Apollo agent of Mythic C2 the past couple of weeks and decided to try and add some new features. I combined the work of RunOF by @Nettitude_group to add a loader to run your favorite BOF's and ... [1/2]
1
Sander Maas
@__Retrospect
Jan 4, 2024
If you are looking for an easy way to access O365 refresh tokens when landing on an endpoint, have a look at the log files on the endpoint stored in "%localappdata%\Microsoft\Olk\EBWebView\Default\Session Storage\" [1/2]
1
Sander Maas
@__Retrospect
Oct 16, 2023
Finding secrets in Office365 resources using the GraphAPI, check out a little something I made to help you with this:
GitHub - Retrospected/GraphSecretsHunter
From github.com
Sander Maas
@__Retrospect
Jul 25, 2023
Time to share something I have been working on as a small hobby project: PurpleKeep provides an Attack Simulation platform to serve as a starting point for your End-to-End Detection Rule Validation in an Azure-based environment. Check it out at:
GitHub - Retrospected/PurpleKeep: Providing Azure pipelines to create an infrastructure and run...
From github.com