Adam Crompton

[Adam Crompton @3nc0d3r]

@elwell @hthackers Yeah the code is available at https://t.co/Ra8nwG47vh. @inguardians

[Jay Beale @jaybeale]

Time to level up your K8s security. I won't oversell the class - I'll just let 4 people I respect tell you what they got out of it.

Hack some #Kubernetes with me this August at @BlackHatEvents in Las Vegas!

Agentic AI-Aided Kubernetes Attack and Defense
https://t.co/G9PeJeRs68

[frostb1te @frostb1ten]

Testing CVE-2026-32161 and successfully triggered a remote BSOD against my laptop over WiFi without requiring access to the same local network.

Still surreal seeing a wireless bug crash a machine from proximity alone.

[frostb1te @frostb1ten]

Wildcards Gone Wild, a CLI argument injection trick hiding in plain sight. Made a small write-up about it → https://t.co/HcF3FiwFZU

[Jay Beale @jaybeale]

Excited to teach #Kubernetes Attack & Defense @#BHUSA in Aug (@bhevents)! The class is >50% hands-on, w/ step-by-step labs. Students get computers to keep w/ CTF VMs & K8S cluster to #hack, win flags & break attacks. Come join me & the @InGuardians crew! https://t.co/blnnXrF0wH

[Rob Fuller @mubix]

Red Team collaboration has evolved over time. I remember using SILC for encrypted chats and TRAC wiki and source code tracking. Here are the more modern services I think Red Teams can benefit from and a super easy way to stand them up: https://t.co/airPbOCLRn

What do you use?

[Bobby Cooke @0xBoku]

As promised... this is Loki Command & Control! 🧙‍♂️🔮🪄
Thanks to @d_tranman for his work done on the project and everyone else on the team for making this release happen!
https://t.co/fR44ukK1Y2

[Andrea P @decoder_it]

KrbRelayEx-RPC tool is out! 🎉
Intercepts ISystemActivator requests, extracts Kerberos AP-REQ & dynamic port bindings and relays the AP-REQ to access SMB shares or HTTP ADCS, all fully transparent to the victim ;)
https://t.co/Aebt5iFIjC

[Adam Crompton @3nc0d3r]

@flakpaket @inguardians Thanks @flakpaket !!

[Adam Crompton @3nc0d3r]

@bettersafetynet Thanks @bettersafetynet !!

[Bobby Cooke @0xBoku]

Loki C2 is coming..
Cross-platform Stage 1 C2, battle-tested in ops for 8 months against the world’s leading EDRs and MSSPs, undetectable, bypasses Application Control/WDAC..
Shoutouts to @d_tranman for helping build the project, and @chompie1337 & @knavesec for inspiration!

[Jay Beale @jaybeale]

So excited to be presenting at the last #ShmooCon with @antitree this morning @10am - "A Commencement into Real #Kubernetes Security!"

https://t.co/etb43Dnvqa

[frostb1te @frostb1ten]

Fun little Use After Free found in PHP cli. Might be writing up a blog on my latest findings in the near future.

https://t.co/85mSEHZ2BM

#bugbounty #cybersecurity

[Adam Chester 🏴‍☠️ @_xpn_]

My Okta for Red Teamers post is up! We look at how Kerberos SSO works, how to intercept credentials via a fake AD Agent, decrypting AD Agent tokens, adding skeleton key's, and even how to deploy a janky SAML IdP server to auth as any user for good measure. https://t.co/Hs0wN5397s

[Andrew Chiles @AndrewChiles]

@SpecterOps ready to kick off another Red Team Operations course at #BHUSA with @harmj0y @Praga_Prag @0xdab0 @zyn3rgy

[Jay Beale @jaybeale]

Less than two months until my #Kubernetes Attack & Defense class at Black Hat Las Vegas! Content updates include using Falco! Students get a laptop to keep w/ CTF VMs & K8S cluster to #hack, gathering flags, breaking their attacks. https://t.co/M1nORshqZh… #BHUSA @BlackHatEvents

[NSA/CSS @NSAGov]

@NSACyber, along with our partners @NIST and @CISAGov, will play a major role in ensuring our nation’s most sensitive systems are protected from the #quantum computing threat. https://t.co/X8sTWtFSSE

[Will Schroeder @harmj0y]

The third post in my adversarial ML series "Learning Machine Learning Part 3: Attacking Black Box Models" is now up at https://t.co/7OMjR7cUL8 and the Invoke-Evasion repo has been updated with the associated Jupyter notebooks/samples https://t.co/twaGgLkCcy

[Adam Crompton @3nc0d3r]

@chrissanders88 I’m so sorry. If there is anything I can do to help I’m here for you.

[Adam Chester 🏴‍☠️ @_xpn_]

ASR rule to harden LSASS is being turned on by default, but remember that this isn't a silver bullet, plenty of ways around this... this has to be one of my favourites 😂

[pyn3rd @pyn3rd]

#CVE-2021-2471 MySQL JDBC XXE , write-up in Chinese.

https://t.co/kEgvGcwyJP