TeamFiltration is back: forgotten M365 service accounts with no MFA are the easiest way in. https://intel.threadlinqs.com/threat/TL-2026-2616 #ThreatIntel #TeamFiltration #FireProx #Spraying
September 22, 2026 at 4:40 PM
TeamFiltration is back: forgotten M365 service accounts with no MFA are the easiest way in. https://intel.threadlinqs.com/threat/TL-2026-2616 #ThreatIntel #TeamFiltration #FireProx #Spraying
Safari ride-style showcase of password spraying tools & techniques with an extra flair for Entra ID-- featuring OpenBullet, MSOLSpray, entraspray, TeamFiltration & hints of FireProx, OmniProx, etc to finally simply rotate IPs low and slow with Tor. Video: youtu.be/oWv50EF0juc
October 20, 2025 at 1:01 PM
Safari ride-style showcase of password spraying tools & techniques with an extra flair for Entra ID-- featuring OpenBullet, MSOLSpray, entraspray, TeamFiltration & hints of FireProx, OmniProx, etc to finally simply rotate IPs low and slow with Tor. Video: youtu.be/oWv50EF0juc
Don't worry... I'm behind 7 NAT GWs and rotating each request via fireprox.
January 1, 2025 at 6:10 PM
Don't worry... I'm behind 7 NAT GWs and rotating each request via fireprox.
Oh, definitely, its just most companies arent great at creating specific firewall rules for that without doing something like breaking a dependency that legitimately uses something on AWS. Especially when its so easy to rotate IPs on aws (tools like fireprox), they would need to block them all
October 18, 2024 at 10:02 PM
Oh, definitely, its just most companies arent great at creating specific firewall rules for that without doing something like breaking a dependency that legitimately uses something on AWS. Especially when its so easy to rotate IPs on aws (tools like fireprox), they would need to block them all
Anyone know of a Credmaster-like solution that doesn’t use FireProx?
October 2, 2025 at 4:02 PM
Anyone know of a Credmaster-like solution that doesn’t use FireProx?
OmniProx: IP Rotation from different providers - Like FireProx but for GCP, Azure, Alibaba and CloudFlare
OmniProx: IP Rotation from different providers - Like FireProx but for GCP, Azure, Alibaba and CloudFlare
github.com
September 28, 2025 at 6:24 PM
OmniProx: IP Rotation from different providers - Like FireProx but for GCP, Azure, Alibaba and CloudFlare
The TeamFiltration Fork: Bypassing AWS’s API Gateway Crackdown for Red Team Operations
Introduction: The recent AWS policy update explicitly prohibiting pentesting activities through its API Gateway has sent shockwaves through the offensive security community, rendering tools like the popular…
Introduction: The recent AWS policy update explicitly prohibiting pentesting activities through its API Gateway has sent shockwaves through the offensive security community, rendering tools like the popular…
The TeamFiltration Fork: Bypassing AWS’s API Gateway Crackdown for Red Team Operations
Introduction: The recent AWS policy update explicitly prohibiting pentesting activities through its API Gateway has sent shockwaves through the offensive security community, rendering tools like the popular TeamFiltration utility temporarily obsolete. In response, security researchers have swiftly forked the project, creating a modified version that bypasses the defunct FireProx method, ensuring red teams can continue to assess the resilience of M365 and Azure AD environments against password spray and credential stuffing attacks.
undercodetesting.com
October 22, 2025 at 10:13 AM
The TeamFiltration Fork: Bypassing AWS’s API Gateway Crackdown for Red Team Operations
Introduction: The recent AWS policy update explicitly prohibiting pentesting activities through its API Gateway has sent shockwaves through the offensive security community, rendering tools like the popular…
Introduction: The recent AWS policy update explicitly prohibiting pentesting activities through its API Gateway has sent shockwaves through the offensive security community, rendering tools like the popular…
Feed: "ZephrSec - Adventures In Information Security"
By: Andy Gill on Sunday, September 28, 2025
By: Andy Gill on Sunday, September 28, 2025
OmniProx: Multi-Cloud IP Rotation Made Simple
Introducing OmniProx, a multi-cloud FireProx alternative for IP rotation, using Azure, GCP, Cloudflare & Alibaba after AWS policy changes.
blog.zsec.uk
September 28, 2025 at 9:23 PM
Feed: "ZephrSec - Adventures In Information Security"
By: Andy Gill on Sunday, September 28, 2025
By: Andy Gill on Sunday, September 28, 2025
BACKDOORS & BREACHES - CARD OF THE DAY
Deck: Core Deck 2.2
Attack/Procedure Type: Initial Compromise
Attack/Procedure: Password Spray
Tools:
SprayingToolkit - github.com/byt3bl33d3r/...
FireProx - github.com/ustayready/f...
Hydra - github.com/vanhauser-th...
Deck: Core Deck 2.2
Attack/Procedure Type: Initial Compromise
Attack/Procedure: Password Spray
Tools:
SprayingToolkit - github.com/byt3bl33d3r/...
FireProx - github.com/ustayready/f...
Hydra - github.com/vanhauser-th...
July 25, 2025 at 6:05 PM
BACKDOORS & BREACHES - CARD OF THE DAY
Deck: Core Deck 2.2
Attack/Procedure Type: Initial Compromise
Attack/Procedure: Password Spray
Tools:
SprayingToolkit - github.com/byt3bl33d3r/...
FireProx - github.com/ustayready/f...
Hydra - github.com/vanhauser-th...
Deck: Core Deck 2.2
Attack/Procedure Type: Initial Compromise
Attack/Procedure: Password Spray
Tools:
SprayingToolkit - github.com/byt3bl33d3r/...
FireProx - github.com/ustayready/f...
Hydra - github.com/vanhauser-th...