Flameee

Offsec 🏴‍☠️

I've got a computer

[padi @pad1ryoshi]

Passando pra avisar que a @tramoia_sh ta aceitando artigos até o dia 13/11 !!!

Eu e o @dk4trin vamos enviar o nosso! envie o seu também! 😼

[Vitor Falcão "busfactor" @busf4ctor]

🫡🫡

[Flameee @Flameeesec]

post novo, sobre tls fingerprinting, assunto que me interessou recentemente, talvez tenha mais incidência do assunto, ainda to tentando aprofundar mais sobre.

Espero que curtam.

https://t.co/8EY0nGsEja

[dk4trin @dk4trin]

se o alvo roda Azure AD B2C, aqui vai uma tip de um gadget de Open Redirect pra vc validar:

- O parametro `post_logout_redirect_uri` é "vulneravel"

<target>.b2clogin.com/<target>.onmicrosoft.com/b2c_1_XXXX/oauth2/v2.0/logout?post_logout_redirect_uri=<payload>

login.<target>.com.br/<target>.onmicrosoft.com/b2c_1a_XXXXX/oauth2/v2.0/logout?post_logout_redirect_uri=<payload>

- Nao vou focar aqui nas paths padroes e custom, mas em resumo é isso

#happyhacking #bugbountytips

[Flameee @Flameeesec]

@dk4trin 😮

[Flameee @Flameeesec]

@dk4trin opaaa vlw demais, manno!!

[Flameee @Flameeesec]

post 01 do novo blog que criei, configurando o omp pra ficar chique.

logo mais terá mais assuntos sobre pentest/bug bounty/aprendizados e etc

https://t.co/JG2EH1TE4L

[Hakai Security @HakaiOffsec]

New Laravel one-day exploit by Yokai Research! 🔥

Full analysis, PoC, and exploit available here: https://t.co/MsaF6e2H3L

We analyzed GHSA-f9x3-7vq9-cph6, a critical authentication bypass in Laravel affecting TokenGuard, the native mechanism used to protect auth:api routes.

The issue was originally discovered by KIKOmanasijev(https://t.co/F0XhWDaiLr) and disclosed through GitHub Security Advisory.

After the advisory went public, our team reproduced the vulnerable behavior, analyzed the authentication flow, identified the conditions required for exploitation, and developed a working PoC and exploit.

We break down how the bypass happens, why TokenGuard can fail to enforce authentication as expected, and what that means for applications relying on affected configurations.
No CVE has been assigned at the time of publication.

Authors: @biscoitomesmo and @Gabriel52489026

Blog post:
https://t.co/gdo3Z2ZvHb

#HakaiSecurity #YokaiResearch #Laravel #SecurityResearch #authbypass #tokenguard

[Hakai Security @HakaiOffsec]

We showed up big at #BSidesJP2026!

Our team hit the stage with two tech talks by Thiago Bispo & Rafael Felix

Thiago covered how databases serve as the primary line of defense and why strict access policies are crucial to prevent data exposure.

Rafael introduced and went deep on Lyra, an open-source, cargo-native LLVM IR obfuscator for Rust. Using RUSTC_WRAPPER, it intercepts crates during a standard build to run configurable transformations (string encryption, basic block shuffling, indirect branch obfuscation) before hitting the linker. Zero changes to code or the compiler—just a single CLI flag.

Were you at the event? Drop your questions below!

Biscoito @biscoitomesmo

@BSidesJP
Agenda: https://t.co/4chySz5PfG

[Hakai Security @HakaiOffsec]

About a year ago, Hakai Security introduced the Beerus Framework, an initiative created to centralize security tools and streamline the penetration testing process directly on Android devices.

Now, Beerus expands its capabilities to iOS. Following the same approach as the Android version, the framework aims to gather essential tools into a single environment and simplify device preparation for security testing, reducing complex configurations and operational friction during assessments.

Authors:

Daniel França Lima
Daniel, known as Daniboy, is 19 years old, Brazilian, and works as a Pentester and Researcher at Hakai Security. Passionate about understanding how things work, building tools, and manipulating systems. In his free time, he enjoys gaming, especially titles like Hollow Knight, and he also loves foxes.

Gabriel Rodrigues @Gabriel52489026
Gabriel Rodrigues, researcher and Pentester at Hakai Security. He has one year of experience in offensive security and holds the CPTS certification. As he says himself: “My friends call me Texugo (Badger) because one of them once said that I look like one."

Check out the article on our newly redesigned blog: https://t.co/3Mk3tOFcJT

Github: https://t.co/xqmZbgltlC

[QuimeraX Intelligence @quimerax_intel]

Meet Shadow Ledger: The Group Hijacking Official Authority to Target Brazil’s Financial Sector

A group that does not hesitate to compromise government organizations and turn their trusted infrastructure against the financial sector, exploiting the credibility that only an official government sender can carry.

Shadow Ledger is a cybercrime group whose activity has been observed in Brazil since September 2025. Its operations primarily target the financial sector, including payment institutions and fintech companies. At the same time, government organizations play a dual role in its campaigns: they are both targets of compromise and trusted infrastructure leveraged to deliver attacks against financial institutions.

We estimate that Shadow Ledger is responsible for more than 100 million in stolen funds since the group first emerged.

https://t.co/K5ZmJcI3Yn

[Hakai Security @HakaiOffsec]

Hakai Security research recognized by Apple!

Our analyst Gabriel Rodrigues, from Yokai Research team, was acknowledged by Apple in the security content for macOS Golden Gate 27, following security research related to iCloud that was reported to the company.

The technical details of the vulnerability cannot be disclosed yet, so for now, the finding itself will have to remain under wraps.

But as soon as we are able to disclose, we'll bring you some technical breakdown for sure! 👀

Congratulations, @Gabriel52489026, on the research and the recognition! 🔥

Apple Security Content:
https://t.co/uZ4qWOiVCY 

#HakaiSecurity #SecurityResearch #AppleSecurity #CyberSecurity

[Hakai Security @HakaiOffsec]

Rust is rapidly becoming the language of choice for red team tooling, implants, and security-critical software. Yet the offensive security ecosystem has almost no obfuscation tooling for it. Nearly every production obfuscator targets C/C++ binaries or operates on final PE/ELF images; Rust’s unique compile pipeline, name mangling, and LLVM IR patterns require a fundamentally different approach.

This talk presents Lyra, an open-source, cargo-native LLVM IR obfuscator for Rust. Lyra intercepts each crate during a normal “cargo build” via RUSTC_WRAPPER, transforms the LLVM IR with a configurable pass pipeline - string encryption, basic-block shuffling, indirect-branch obfuscation - recompiles the result with llc + clang, and substitutes the object before the real MSVC linker runs. Zero changes to the Rust compiler, zero changes to the target project’s source code, one flag on the command line.

We walk through the architecture, the engineering challenges unique to Windows/MSVC (UTF-16 response files, allocator-shim object preservation, inkwell’s undocumented panic guards), and live before-and-after demonstrations in IDA Pro, Ghidra, and Binary Ninja. We also show a YARA rule that confidently matches a plain demo build returning zero results on the obfuscated binary, and two consecutive unseeded builds producing different hex patterns, defeating a rule written on the first build. Lyra is released open-source at the time of the talk. All demos are reproducible from the release. Attendees leave with a working tool they can run against their own Rust projects the same day.

Rafael Felix @biscoitomesmo and João Pedro Tricta @_tricta
Breaking Ground, Tuesday 18:00-19:00 (4 of august)
BSides La Vegas https://t.co/0uWJhukvbQ / @BSidesLV

[Hakai Security @HakaiOffsec]

A few months after the initial release of the Beerus Framework, we are publishing version v1.1, a minor update that brings support for new root environments, a relevant architectural change in data transport, integrated auto-update, and a set of accumulated fixes since the first release.

In this post, we detail each change included in this version, the technical context behind each decision, and what it means in practice for those who use Beerus in their day-to-day Android testing.

Authors @_tricta and @d3vchac

Check it out https://t.co/AhgFvnRbnK

[pira;) @0xPira]

BORA FAZER A BOA PELA COMUNIDADE?

Tem um little goat de 15 anos que tem DCPT, top 4 BR no HTB e foi convidado pra representar o Brasil na International Cybersecurity Olympiad 2026 na TUNÍSIA

o problema é que a família não tem condições de arcar tudo sozinha.

link pra quem puder e quiser ajudar esse talento 👇👇👇

https://t.co/kzH1ZhyaOb

[Charly Wargnier ♨️ @DataChaz]

true af

[Copas @Copas_Sec]

Eu: Bom dia
Claude: Você atingiu 7% de consumo do seu limite semanal

[pira;) @0xPira]

Em maio 60 dos melhores jogadores de CTF do Brasil vão se reunir em São Paulo pra participar do qualificatório da DEFCON como um SUPER TIME!

É filmmaker? Tem uma produtora? Ou quer patrocinar esse conteúdo e cravar sua marca nesse projeto ABSURDO?

me manda mensagem!!

[c4ng4c3ir0 @c4ng4c3ir0]

Tmjjj patrão
quem quiser cotar, manda DM 🔥🤜🤛

[Flameee @Flameeesec]

@c4ng4c3ir0 🥶🥶