Advanced Persistent Tortellini

Collective of Italian cyber operators. We code, hack, and publish offensive research. Tweets do not represent the views of any pasta manufacturers.

[Advanced Persistent Tortellini @APTortellini]

Yo, take a look at our blog at https://t.co/8bk7ZNGerN for the finest offensive cyber pasta recipes!

With love and affection, your friendly neighborhood tortellini!
@Her0_IT @dottor_morte @mrsaighnal @0blio_ @vincentdthe @knifesec @Void_Sec @CaminatiPaolo @last0x00

[PersistenceSniper @PersistSniper]

Version 1.16.3 of #PersistenceSniper is out. This includes a couple of bug fixes regarding the LSA Notify Package detections and the usage of the tool remotely. Make sure to update! Check it out at https://t.co/WFkCbKfW0e

[PersistenceSniper @PersistSniper]

#PersistenceSniper v1.16.0 is out! This release implements detections for the Boot Verification Program Hijacking and AppInit DLLs Injection techniques. Check the details at https://t.co/WFkCbKfW0e

[PersistenceSniper @PersistSniper]

#PersistenceSniper has been downloaded almost 5500 times since it was released a bit more than a year ago! It looks like the project has been well received by the community so far 🦾

[PersistenceSniper @PersistSniper]

#PersistenceSniper version 1.15.0 is out! This release implements the detection for the GhostTask technique. Check it out!

https://t.co/WFkCbKfW0e

[Petar Jr. Pranic @ipSlav]

My first research and tool are finally out. If you want to deep dive into some CLR internals and understand how we can abuse it to blend-in within its own logic go check it out. Hope you'll enjoy the read.
https://t.co/FegHkegEE9

[Mrsaighnal @mrsaighnal]

My research project 'Google Calendar RAT' was cited by Google in their 'Q3 2023 Threat Horizons Report.'
- Learn more and star on GitHub: https://t.co/cSY5qIEN8d
- Read the Google report (page 12): https://t.co/0tXOeyWLzE

#Google #GCR #Malware

[Her0 @Her0_IT]

It's a bittersweet moment, but our series of "Attacking an EDR" has come to an end! Me and @dottor_morte hope that you had as much fun reading it as we had writing it.
https://t.co/c6nwL97vWC

[Riccardo @dottor_morte]

It's a bittersweet moment, but our series of "Attacking an EDR" has come to an end! Me and @Her0_IT hope that you had as much fun reading it as we had writing it.

https://t.co/2hWelV4oHT

[PersistenceSniper @PersistSniper]

#PersistenceSniper version 1.14.0 is out. This release implements a detection for the Directory Services Restore Mode (DSRM) backdoor that attackers can deploy on Domain Controllers.
https://t.co/WFkCbKfW0e

[PersistenceSniper @PersistSniper]

Finally, #PersistenceSniper gets a clear and complete Wiki for the project! It details how to deploy and use it, as well as some more "complex" usage examples and a detailed list of all the available detections with explanations. Check it here 👇
https://t.co/MxplVA4IaX

[PersistenceSniper @PersistSniper]

#PersistenceSniper version 1.13.0 is out! In this release, along with some minor bugfixes, 2 new detections have been implemented: RID hijacking and the Suborner attack. Check it 👇 https://t.co/PmO50e5tOr

[Petar Jr. Pranic @ipSlav]

RomHack has ended and it has been amazing. Kudos to @cybersaiyanIT for the awesome conference and an incredible training from @_dirkjan. Special thanks to @APTortellini,@KlezVirus, @naksyn, @trickster012 @Th3Zer0, @suidpit, @ila_marco_, @zi0Black, and @frycos for the great time.

[PersistenceSniper @PersistSniper]

Hello there! This is PersistenceSniper’s Twitter (X) account. Here you will get alerts whenever a new version of the tool comes out and also tips on how to use it!

[PersistenceSniper @PersistSniper]

PersistenceSniper v1.12.1 is out! This one releases a fix for a bug which prevented the detection of the hijacking of Utilman.exe as persistence technique.
https://t.co/WFkCbKfW0e