Cube0x0

@cube0x0

0xC2.io -founder 🇸🇪

Sverige

Cube0x0
@cube0x0
Apr 8, 2025
If you wanna do it in c#, merge this with the og krbrelay https://github[.]com/CICADA8-Research/RemoteKrbRelay
Andrew Oliveau
@AndrewOliveau
Apr 8, 2025
RemoteMonologue - A Windows credential harvesting attack that leverages the Interactive User RunAs key and coerces NTLM authentications via DCOM. Remotely compromise users without moving laterally or touching LSASS. Hope you enjoy the blog & tool drop 🤟 ibm.com/think/x-force/…
2
Cube0x0
@cube0x0
Mar 25, 2025
I asked myself, how difficult would it be to run a 0xC2 agent in a non-rooted Samsung phone, via an APK installation, and use it for lateral movement Turns out, not very difficult at all
6
Cube0x0
@cube0x0
Nov 4, 2024
I have received a few questions about reusing existing open-source and in-house BOFs in 0xC2 so I am leaving it here for visibility. Yes the 0xC2 Windows agent has a backward-compatible layer so you can reuse your existing object file tools after converting the Sleep script to
1
Cube0x0
@cube0x0
Oct 30, 2024
Don't we all get to the point where all you want to do is capture and relay NTLM and Kerberos authentications in a BOF? It's just faster to write a capture & relaying framework in C for ntlm, kerberos, dcom, smb, http, mssql with native Windows support than fixing impacket.
5
Cube0x0
@cube0x0
Sep 30, 2024
0xC2 is now available and the site has been updated with a brief introduction
0xc2.io
Introduction to 0xC2 | 0xC2
10