Aurélien Chalot

@Defte_

Hacker, sysadmin and security researcher @OrangeCyberdef 💻
Calisthenic enthousiast 💪 and wannabe philosopher t.ly/9NPk0 📖
🔥 Hide&Sec 🔥

The grid blog.whiteflag.io Joined November 2017

490 Following 4.5K Followers 1.7K Posts

Latest posts 5

Pinned post

Aurélien Chalot @Defte_ Sep 23, 2025

Dumping LSASS is old school. If an admin is connected on a server you are local admin on, just create a scheduled task asking for a certificate on his behalf, get the cert, get its privs. All automatized in the schtask_as module for NetExec 🥳🥳🥳

Aurélien Chalot @Defte_ 5d

Finally another HTTP coerce!!

Abdul Mhanni Verified account @abdo_mhanni 5d

You can now coerce HTTP authentication from Windows targets that are running MS-RPRN, using impacket with PR #2361!

The PR added a new opnum from the MS-RPRN spec, OPNUM 88 and an example script to make the process straight forward. Letting you now coerce and relay HTTP authentication from remote machine targets

Shoutout to sudonoodle for the BOF that inspired this and for the technique(at least I think it was them who found it) :3

View quoted post on X

Aurélien Chalot @Defte_ Oct 6

I see a lot of activiy going around browser cache smuggling which I presented back in 2023 there sensepost.com/blog/2023/brow…. Remember, the detection part is trivial: monitor any process that is not a browser, that is reading cache files. Also, disable Win+R shortcut! :)

The Hacker News @TheHackersNews Oct 6

🚨 ClickFix has a new trick... the malicious payload is already sitting in your browser cache before you paste the command.

Compromised sites preload scripts disguised as PNGs, letting pasted commands bypass Windows Run's ~260-character limit and launch a multi-stage malware chain.

Read: thehackernews.com/2026/10/clickf…

View quoted post on X

Aurélien Chalot @Defte_ Sep 23

Yesterday we merged two new functionnalities on NXC for MSSQL. The ability to dump local database users' hashes. The new function lists both the login name, the algorithme used to hash the password and the hash allowing cracking them via hashcat/john:

Aurélien Chalot @Defte_ Sep 3

Please just give that person a reverser job or something this is just insane the level 🤣🤣🤣🤣🤣

Dead Retard @MSNightmare2000 Sep 3

FalconFlank : Crowdstrike Falcon 0day LPE is now public
github.com/MSNightmare/Fa…
View quoted post on X