Manish Kishan Tanwar

SQL Injection fan
Develop vulnerable labs and web shells in spare time

[Manish Kishan Tanwar @IndiShell1046]

Everyone was saying RFI is dead in PHP applications (including me).
Today, I got a way to perform RFI even if remote URL inclusion is disabled.
I blogged about it 😄
SMB is loaded with awesomeness \m/
https://t.co/1LDu6ouUTI

[Manish Kishan Tanwar @IndiShell1046]

@kmkz_security @ShitSecure @MCTTP_Con 😍 🙌
Yes, sir, we are still going to have fun 🥳 😄 but will miss @ShitSecure bhai ji 😔 I hope some other time we will have Fabian bhai ji as well 🤩

[S3cur3Th1sSh1t @ShitSecure]

First offensive talk today from Karan Raheja and @IndiShell1046 about weaponising IIS for Active Directory Post Exploitation. 🙌 @MCTTP_Con

[Dr. Ch33r10 @Ch33r10]

🚨 GIVEAWAY TIME 🚨
I’m giving away 5 FREE seats to the @TheDFIRReport Digital Forensics Challenge happening on 9/26/26 🎟️
https://t.co/e49OsW4fCY
To enter:
1️⃣ Like ❤️
2️⃣ Repost 🔁
3️⃣ Comment "I'm in!" 💬
🔥 Bonus: Reply with a cybersecurity meme!

[bohops @bohops]

Don't forget to think about your well-being from time-to-time and go do other things that make you happy or provide fulfillment:

- Disconnect from social media
- Get off the screen and go touch grass and enjoy nature
- Embrace hobbies outside of tech/cyber/etc.
- Workout or go for a walk/run
- Wake up early to catch a sunrise with a coffee

[Soroush Dalili @irsdl]

Just released some UI updates for https://t.co/XQbk9c4kiI - check it out!

GitHub: https://t.co/jHkFSWfPDT

[Abdelhamid Naceri @MSNightmare2000]

FalconFlank : Crowdstrike Falcon 0day LPE is now public
https://t.co/J0oBnyVkH5

[Manish Kishan Tanwar @IndiShell1046]

Special Thanks to:
Dominic sir, Ashwath sir, Vivek sir, Andy sir, Soroush sir and Marcus sir, Dima, Dylan, Daniil, PWS, Juanma, Filip, Jamie and Rio Bhai ji
Manoj, Samarth, Noman, Owais, Sina, Nish, Alessendro, Konsta, Anurag and Vivek bhai ji ❤️Zero cool and Code breaker ICA❤️

[Manish Kishan Tanwar @IndiShell1046]

New blog post 😃
In this blogpost, I have demonstrated how to escalate privileges from IIS Virtual Account to NT Authority/SYSTEM via AD CS
https://t.co/fPwFC2uvNf

[MDSec @MDSecLabs]

When it Snows it Pours – Anatomy of a ServiceNow Red Team - new post by @__invictus_ https://t.co/qq4K3dyjza

[nafiez @zeifan]

Published my technical write-up on a vulnerability I discovered in Windows usbprint.sys. The issue was reported to MSRC, but Microsoft decided not to issue a fix. I’ve documented the technical details and PoC in the blog. Blog writeup: https://t.co/bzPraMVZ1j

[Soroush Dalili @irsdl]

YSoNet v2026.8.1 is live.

50 to 62 gadgets, new .NET Framework 2.0 to 3.5 support, dedicated 4.0 coverage, stronger testing, and 508 archived references for researchers in the markdown format! 🔥

Thanks @cjm00n and @sinsinology!

https://t.co/JgGRh1hbpG

[Soroush Dalili @irsdl]

▶️ https://t.co/89ZaEHDPLE now plays video.

297 archived techniques so far carry the talk behind the research. 236 play inside the record.

Read the paper. Watch the author.
https://t.co/89ZaEHDPLE

[dylan @_batsec_]

I’m excited to announce that OdinEye is now in public beta! Thanks to everyone who has tested it out so far.

I’m building OdinEye with one mission, to provide a definitive answer to the question "Is this computer compromised?"

Launch it from a one-liner and visualise the scan in real-time in your browser. No install, no setup.

Join the beta at https://t.co/mOwoTehvPy

[Soroush Dalili @irsdl]

https://t.co/XQbk9c4kiI has your back for most of the disappeared web hacking techniques! 😎I (my AI agents) still need to grab some such as ha.ckers, gnucitizenm, etc when web archive becomes available again 😌

[Manish Kishan Tanwar @IndiShell1046]

@bohops What an alternate, bhai ji 😂🙌

[cr3ghost @cr3ghost]

Two new logical flaws in Kerberos just dropped at Black Hat. Low-privileged user to full domain takeover, including domain admins.

If you're doing Active Directory pentesting, Kerberos attacks, red teaming, identity security, or detection engineering, read this.

KerberLoss (CVE-2026-25177) and ResetNightmare (CVE-2026-27912). Both are logical bugs, not memory corruption. Described as surprisingly easy to exploit.

https://t.co/dgJC3JHjOf

#Infosec #RedTeam #DetectionEngineering

[Panos Gkatziroulis 🦄 @ipurple]

From Stack Overflows to Modern Pool Grooming
📖 Step-by-step development of kernel primitives, from simple stack corruption to advanced heap grooming on modern Windows 11
https://t.co/zw7m7uxsSs

[tetsuo @tetsuoai]

Built an educational browser lab for buffer overflows with Grok.

• 10 labs
• IDA-style disasm + graph
• gdb (breakpoints, stepi, context)
• live stack
• from pwn import * in the browser

Crash it, step it, pwn it: https://t.co/vbs2KFMs4N

QT article covers bof's + ROP.

[DbgMan ^_^ @0XDbgMan]

New blog
Spent way too much time reverse engineering CrowdStrike Falcon.
Somewhere along the way, I found a bug. It's low and not practically exploitable... but a bug is a bug :)
Publishing soon
https://t.co/VNo4gpNVED