ExploitedSite

Security Researcher | Low-Level Ninja | RE & Malware RE Maniac
Tweets are my own.

[ExploitedSite @ExploitedSite]

🛡️ Launched https://t.co/FBI3nvfUqu Security – browser extension blocking ClickFix attacks

✅ Real-time detection
✅ Clipboard protection
✅ Privacy-first & actively developed

📥 https://t.co/5QA2JWYqf0
📧 Feedback: [email protected]
🙏 Thanks to all who share anonymous data

[Tim Blazytko @mr_phrazer]

Recently my RE workflow moved into sandboxed VMs where agents have full control over the environment. I needed an MCP server that runs headless in the same sandbox and exposes way more of the #BinaryNinja API than others.

Here's the release: https://t.co/HU2Vf8Uj6T

[ExploitedSite @ExploitedSite]

@struppigel Damn I might have missed it! All good! :)

[ExploitedSite @ExploitedSite]

@struppigel Any plans of putting the course/bundle on discount for black friday/cyber monday! :)

[ExploitedSite @ExploitedSite]

@EvilSecOfficial @RussianPanda9xx I mean if you compare company track record to employee track record, that’s sort of unfair as well ain’t it?

[The Haag™ @M_haggis]

🛡️ Deep dive into ClickFix attack protection!

Just demoed the ClickFix Security extension - created by https://t.co/NVJRcnXqmB / @ExploitedSite .

🔗 Extension: https://t.co/GiB90Bcbxm

📖 Analysis: https://t.co/4YYLf3DBtE

In this demo, we:
✅ Walk through its multi-layer defense system
✅ Break down dual-world execution (ISOLATED + MAIN)
✅ Show 5 layers of clipboard protection catching attacks live
✅ Analyze live ClickFix sites blocking malicious payloads instantly

🔍 Detects 100+ attack patterns:
• Base64 PowerShell
• curl | bash payloads
• WSH exploitation
• Fake CAPTCHA tricks
• Clipboard hijacking

💡 How ClickGrab fits in: https://t.co/7EGGVCrkl1
ClickGrab hunts campaigns + extracts IOCs
https://t.co/9azgoDKRUm blocks them in-browser
Huge shout-out to @ExploitedSite for the amazing work and the time spent building and sharing this with the community. 👏

Together = full ClickFix defense pipeline 🔄

📺 https://t.co/rHytELXyH1

[ExploitedSite @ExploitedSite]

@M_haggis Thank you for the kind words!

I’m currently working on fixes, updates, and enhancements to address various browser-based threats. The support from everyone so far has been amazing. The plan is to keep it community-driven with a focus on helping everyone stay safer online.

[The Haag™ @M_haggis]

This is awesome - Video inbound on it's use and breakdown of how it works.

[ExploitedSite @ExploitedSite]

@Protoge420 @RussianPanda9xx Red Herring!!!! 😛

[ExploitedSite @ExploitedSite]

@OmniG7 @RussianPanda9xx RE API Key -

[ExploitedSite @ExploitedSite]

@Protoge420 @RussianPanda9xx Yeah, the API key is used to tell the server -
“Hey I’m Chrome, please do the key exchange with me” or “Hey I’m Firefox, please do the key exchange with me”.

Its not a key-key in the grand scheme of things, more like an identifier of browser type 😃

[ExploitedSite @ExploitedSite]

@Protoge420 @RussianPanda9xx Yeah, the API key is used to tell the server -
“Hey I’m Chrome, please do the key exchange with me” or “Hey I’m Firefox, please do the key exchange with me”.

Its not a key-key in the grand scheme of things, more like an identifier of browser type 😃

[ExploitedSite @ExploitedSite]

@IndiGo6E No update so far on this. Case reference number - 26102775. Not even sure if I’ll get one before travel dates.

[ExploitedSite @ExploitedSite]

@JustWantToQ1 @_JohnHammond @HuntressLabs Well I’m glad they weren’t torrenting, else they’d be served a notice. But TA ops - that’s acceptable as per EULA.

[ExploitedSite @ExploitedSite]

@RussianPanda9xx After 2025 years and millions more of evolution, humans finally realized that buzzwords like EDR, XDR, and zero trust actually have real powers. Mind blown.

[ExploitedSite @ExploitedSite]

@GettinsMathew @BSidesDublin @CyberIreland I won’t be able to attend and have 2x spares

[Daax @daaximus]

Unlock forbidden Windows knowledge! 🤫💻
Find the PEB through truly undetected means and pop calculator 💥
The non-golf form will be available below 👇

#redteamtips #windowsinternals #rust

[João Vitor(Keowu) @keowu]

My new article, "Writing a Full Windows ARM64 Debugger for Reverse Engineering," covers the topic in detail, including its internals and the core differences between Windows on Intel and ARM64:

https://t.co/5xASMMNAEk

[ExploitedSite @ExploitedSite]

@RussianPanda9xx Lmfao

[ExploitedSite @ExploitedSite]

@DaveLikesMalwre It was all you @DaveLikesMalwre! I barely just found the blog highlighting the technique 🫡