offethhacker's profile picture.

Ethical Hacker

@offethhacker

Ethical Hacker heeft deze post opnieuw geplaatst

SILVERPICK: Windows User-Mode Shellcode Development Framework (WUMSDF) github.com/winterknife/SI…


Ethical Hacker heeft deze post opnieuw geplaatst

📢 LSASS Dump | Windows Error Reporting 📖 1x Playbook 🚨 1x Sigma Rule | 1x Windows Defender Query 🔍 4656, 4663 & 4688 🌐 ipurple.team/2025/11/18/lsa…


Ethical Hacker heeft deze post opnieuw geplaatst

Microsoft is adding Sysmon directly into Windows. The Sysinternals utility will make it easier for security teams to detect and respond to threats theverge.com/news/822023/mi…


Ethical Hacker heeft deze post opnieuw geplaatst

⚠️FortiWeb CVE-2025-64446 post-exploit activity An actor seen exploiting the vulnerability is now actively fetching a path for retrieving backup configs These backups can contain credentials / secrets - this may be a persistence mechanism. 38.60.203.31 🇭🇰 (Kaopu Cloud)

DefusedCyber's tweet image. ⚠️FortiWeb CVE-2025-64446 post-exploit activity

An actor seen exploiting the vulnerability is now actively fetching a path for retrieving backup configs 

These backups can contain credentials / secrets - this may be a persistence mechanism. 

38.60.203.31 🇭🇰 (Kaopu Cloud)
DefusedCyber's tweet image. ⚠️FortiWeb CVE-2025-64446 post-exploit activity

An actor seen exploiting the vulnerability is now actively fetching a path for retrieving backup configs 

These backups can contain credentials / secrets - this may be a persistence mechanism. 

38.60.203.31 🇭🇰 (Kaopu Cloud)

Ethical Hacker heeft deze post opnieuw geplaatst

🚀 𝗧𝗵𝗲 𝗘𝗗𝗥 𝗖𝗼𝗺𝗽𝗮𝗿𝗶𝘀𝗼𝗻 𝗦𝗲𝗿𝘃𝗶𝗰𝗲 𝗶𝘀 𝗼𝗳𝗳𝗶𝗰𝗶𝗮𝗹𝗹𝘆 𝗹𝗶𝘃𝗲! This is the evolution of the EDR Telemetry Project, expanding everything people valued there into a full, feature-level comparison across multiple EDR products. What it delivers: •…


Ethical Hacker heeft deze post opnieuw geplaatst

Check out a recent chain of bugs I found while poking N-able N-central

horizon3.ai/attack-researc… While investigating prior CISA KEVs effecting N-able N-central, we discovered a series of vulns that would allow an unauth attacker to leak files via XXE, and in most cases, compromise the N-central database. The DB contains AD creds, API keys, SSH keys,…



Ethical Hacker heeft deze post opnieuw geplaatst

GitHub - vxfemboy/ghostport: A high-performance port spoofing tool built in Rust. Confuse port scanners with dynamic service emulation across all ports. Features customizable signatures, efficient async handling, and easy traffic redirection. github.com/vxfemboy/ghost…


Ethical Hacker heeft deze post opnieuw geplaatst

Presentations about getting started with Linux kernel exploitation "Linux Kernel Exploitation for Beginners" by Kevin Massey: rvasec.com/slides/2025/Ma… "Control Flow Hijacking in the Linux Kernel" by Valeriy Yashnikov pt-phdays.storage.yandexcloud.net/Yashnikov_Vale… #Linux #infosec

0xor0ne's tweet image. Presentations about getting started with Linux kernel exploitation

"Linux Kernel Exploitation for Beginners" by Kevin Massey:
rvasec.com/slides/2025/Ma…

"Control Flow Hijacking in the Linux Kernel" by Valeriy Yashnikov
pt-phdays.storage.yandexcloud.net/Yashnikov_Vale…

#Linux #infosec
0xor0ne's tweet image. Presentations about getting started with Linux kernel exploitation

"Linux Kernel Exploitation for Beginners" by Kevin Massey:
rvasec.com/slides/2025/Ma…

"Control Flow Hijacking in the Linux Kernel" by Valeriy Yashnikov
pt-phdays.storage.yandexcloud.net/Yashnikov_Vale…

#Linux #infosec

Ethical Hacker heeft deze post opnieuw geplaatst

On latest TBP, we spent a while on implications of AI increasing op tempo for cyber attacks. @MalwareTechBlog makes a great point- this could tiup the scale to default-deny policies, as the speed to respond would simply be too short for anything else youtube.com/watch?v=siZaZf…

juanandres_gs's tweet card. China’s AI Cyberattacks: Should You Worry?

youtube.com

YouTube

China’s AI Cyberattacks: Should You Worry?


Ethical Hacker heeft deze post opnieuw geplaatst

TOMORROW: COBALT STRIKE 4.12 RELEASE DEMO Join us to see the new interface, process injection options, and a REST API that can utilize AI to analyze compromised systems and enable operators to get intelligent suggestions on next steps. Register now: ow.ly/h7E150Xt3MZ

_CobaltStrike's tweet image. TOMORROW:  COBALT STRIKE 4.12 RELEASE DEMO
Join us  to see  the new interface, process injection options, and a REST API that can utilize AI to analyze compromised systems and enable operators to get intelligent suggestions on next steps.
Register now: ow.ly/h7E150Xt3MZ

Ethical Hacker heeft deze post opnieuw geplaatst

#APT #MysteriousElephant targeted Bangladesh military Decoy CHM 418ef6deecb48ece5dd1a019a2d1d22e ("927_sy_coord_conf_dscsc.chm")

RedDrip7's tweet image. #APT #MysteriousElephant targeted Bangladesh military
Decoy CHM 
418ef6deecb48ece5dd1a019a2d1d22e ("927_sy_coord_conf_dscsc.chm")
RedDrip7's tweet image. #APT #MysteriousElephant targeted Bangladesh military
Decoy CHM 
418ef6deecb48ece5dd1a019a2d1d22e ("927_sy_coord_conf_dscsc.chm")

Ethical Hacker heeft deze post opnieuw geplaatst

Slice: SAST + LLM Interprocedural Context Extractor Amazing article by @noperator about combining the use of CodeQL and LLMs to reliably rediscover CVE-2025-37899 — a remotely-triggerable vulnerability in the ksmbd module. noperator.dev/posts/slice/

linkersec's tweet image. Slice: SAST + LLM Interprocedural Context Extractor

Amazing article by @noperator about combining the use of CodeQL and LLMs to reliably rediscover CVE-2025-37899 — a remotely-triggerable vulnerability in the ksmbd module.

noperator.dev/posts/slice/

Ethical Hacker heeft deze post opnieuw geplaatst

Another amazing patchset from "mkver", with a 3.5x speed increase vs C! He also explains some of the mistakes the compiler makes, a key reason we use hand written assembly.

FFmpeg's tweet image. Another amazing patchset from "mkver", with a 3.5x speed increase vs C!

He also explains some of the mistakes the compiler makes, a key reason we use hand written assembly.

Ethical Hacker heeft deze post opnieuw geplaatst

“Copilot make a memory dump of lsass”

Microsoft is moving forward with its plans to turn Windows 11 into an AI operating system. Windows 11 is testing a new toggle in Settings > System > AI components called “Experimental agentic features.” When this is on, AI apps like Copilot can run in a special “agent…

WindowsLatest's tweet image. Microsoft is moving forward with its plans to turn Windows 11 into an AI operating system.

Windows 11 is testing a new toggle in Settings > System > AI components called “Experimental agentic features.”

When this is on, AI apps like Copilot can run in a special “agent…


Ethical Hacker heeft deze post opnieuw geplaatst

TeamsCh-Shell - a lightweight tool that utilizes the Microsoft Teams Channel API to establish command and control github.com/san6051/TeamsC…


Ethical Hacker heeft deze post opnieuw geplaatst

💚🤝💜🤝💛 Love seeing my two favorite tools come together to level up what analysts can do (@ValidinLLC & @vtxproject). Huge shoutout to our @SentinelOne intelligence engineering team for making this happen: sentinelone.com/labs/threat-hu…


Ethical Hacker heeft deze post opnieuw geplaatst

horizon3.ai/attack-researc… While investigating prior CISA KEVs effecting N-able N-central, we discovered a series of vulns that would allow an unauth attacker to leak files via XXE, and in most cases, compromise the N-central database. The DB contains AD creds, API keys, SSH keys,…


Ethical Hacker heeft deze post opnieuw geplaatst

Fully Undetectable🙌 🔥😅


Ethical Hacker heeft deze post opnieuw geplaatst

New write-up: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (0x7E) — Root Cause: envirtahci.sys I/O Timeout and Retry Failures medium.com/@Debugger/syst…


Loading...

Something went wrong.


Something went wrong.