Khaos

Infosec enthusiast, Locksport wannabe & more. Tweets are just tweets.

[Nick VanGilder @nickvangilder]

https://t.co/NlBlCygpI7

[SANS Offensive Operations @SANSOffensive]

🎯 If you’re in red teaming, tool dev, or AI-powered ops, this one’s for you.

You’ll learn how to build an MCP server, generate LLM-friendly APIs, and run C2 tasks through natural conversation.

📅 Feb 26 | 10:00 AM–12:00 PM ET
🔗 https://t.co/VTqa9KfvXD

[SpecterOps @SpecterOps]

WSL2 is a powerful attacker hideout because it runs as a separate Hyper-V VM, and defenders rarely monitor it.

Daniel Mayer explains how attackers pivot into WSL2 and what it took to build tooling that works across WSL2 versions.

Read more ⤵️ https://t.co/TaPsDDW4Cq

[Alex Neff @al3x_n3ff]

NetExec v1.5.0 has been released!🔥
Merry Christmas everyone!🎉 It's been a very long time since the last release, so there are a TON of new features!

Some of the highlights:
- Built-in LDAP signing and channel binding checks
- RDP command execution
- certipy find integration

[BSides London @BSidesLondon]

Please keep this to yourself!

The final release of tickets for the #BSidesLDN2025 conference (13th December at the Novotel London West) will be on 1st November at 1337hrs.
They are only available on our Eventbrite page: https://t.co/lRbIvBCtK7

#Security #BSides #London #Tickets

[Khaos @KhaosShield]

https://t.co/bCIUC1iXMf

[Khaos @KhaosShield]

8 minutes too late !! 😭

[BSides London @BSidesLondon]

And they’ve gone!

The next ticket release for #BSidesLDN2025 is the 1st Oct at 1337hrs.

You can also get a ticket by designing this year conference logo, details on the website https://t.co/cw5L5KjdcA

#Security #BSides #London

[Khaos @KhaosShield]

🤯

[Yuval Gordon @YuG0rd]

🚀 We just released my research on BadSuccessor - a new unpatched Active Directory privilege escalation vulnerability
It allows compromising any user in AD, it works with the default config, and.. Microsoft currently won't fix it 🤷‍♂️
Read Here - https://t.co/c969sNjQH0

[Khaos @KhaosShield]

🤨

[Hack The Box @hackthebox_eu]

The #HTB ecosystem just got a lot stronger 💡
We’re thrilled to welcome @vulnlab_eu to our HTB multiverse, further addressing the growing skill shortage in cyber. VulnLab’s standalone machines, Active Directory chains, and advanced red team labs will soon be fully integrated into the Hack The Box platform. Plus, the amazing Martin Mailke, Founder of Vulnlab, will be joining the HTB Content team!

Learn more: https://t.co/tJAMyk7wl6

#HackTheBox #HTB #Cybersecurity #InformationSecurity #Hacking #VulnLabs

[I am Jakoby @I_Am_Jakoby]

The new blog is live 😈
outside of nightcrawler teleporting in and out with a USB drive this exfil cant be beat

Blog will teach you how it works, github will teach you how to use it

➡️ https://t.co/tNrB1iH6MZ

➡️https://t.co/OHemS2i96y

again shoutout to @DeathsPirate and @TheContractorio for involving me in this project

[Khaos @KhaosShield]

@I_Am_Jakoby @DeathsPirate @TheContractorio Oh yea! Got introduced to this a while back and was amazed by it all. Especially the response from MSRC. Can’t wait for the blog post mate 🤙🏻

[Khaos @KhaosShield]

Data bouncing exfiltration!?

It’s about time more people got into this (If indeed that’s even what this is going to be).

Go and check out @DeathsPirate & @TheContractorio write up on this goodness regardless, it’s the secret sauce!

[I am Jakoby @I_Am_Jakoby]

New blog dropping tomorrow
this is the best data exfiltration method you will ever see
forget a proxy, make other websites do it for you
will be posted here ⬇️
https://t.co/xDtFLblaUZ

shoutout @DeathsPirate and @TheContractorio for bringing me on the project

[Dark Web Informer @DarkWebInformer]

When cybersecurity burnout hits, off-grid life starts calling. 😂

[Khaos @KhaosShield]

🤣🤣🤣 Love to see it.

[Rasta Mouse @_RastaMouse]

Never ceases to amaze...

[Rasta Mouse @_RastaMouse]

Assembly for n00bs with hand-on labs. Anyone interested in seeing this? 😛

[Khaos @KhaosShield]

@0xTib3rius Brought a full set back from Defcon to the UK. Got stopped and they asked what they were. Told them straight up they are lockpicks. Let me right through no problems.

[Dark Web Informer @DarkWebInformer]

😂

[BC Security @bcsecurity]

We are doing a giveaway for our Empire Ops: Tactics (Lazarus) course next week on Sep 11! Simply retweet this to enter, and we will announce the winner tomorrow at 1 PM EST. Come learn about ransomware simulation and threat emulation.

[K̵i̵r̵k̵ ̵T̵r̵y̵c̵h̵e̵l̵ @Teach2Breach]

Thanks to everyone who came to my talks at defcon on the Tempest c2. Below are some links to the slides, 1st blog post, and repo. More on the way:

slides: https://t.co/9gbnsAGodH
Tempest c2 intro blog: https://t.co/p3e99Qy2Ab
repo: https://t.co/475LfdVy85