Kinopio

Cloud native

[Kirill Firsov @k_firsov]

Original write-up on the fastjson 1.2.83 gadget-free RCE.
Have fun reading, I hope you missed writeups without AI slop.
Comment here your opinion.
https://t.co/cbAKOAeY62

[Kinopio @Monika01109]

@skyworship2 🫡要开始监管了

[Two Seven One Three @TwoSevenOneT]

New #redteam tool for blocking EDRs: EDRChoker
Instead of fully blocking the EDR agents' connections to their server, we can throttle their bandwidth so they consistently time out when sending data, which is effectively the same as blocking but avoids triggering "block" or "drop" packet events
#pentest #cybersecurity
Github: TwoSevenOneT/EDRChoker

[Panos Gkatziroulis 🦄 @ipurple]

A Windows PE manual loader written in Rust for both x86 and x64 PE files https://t.co/3aojhQttc0

[Mayfly @M4yFly]

🔥🐉 New GOAD Lab: DRACARYS

I���ve just released a new free lab environment on GOAD: DRACARYS.
The challenge includes 3 VMs and the objective is simple:
Start with no authentication and work your way up to Domain Admin.

Have fun exploiting it! 🔥🐉

https://t.co/TkbVEIxyyX

[蓝点网 @landiantech]

#开源项目 真正的 iOS 虚拟机！支持 iOS 26.1 等版本、自带越狱环境，可用于测试 / 模拟 / 安全研究等等。该项目源于 @Lakr233 的 vphone-cli，开发者 @Little_34306 将复杂的虚拟机设置浓缩为脚本并预装各种工具，帮助开发者和研究人员快速完成文件合并、解压和启动：https://t.co/2gpM99OZIG

[Snow Wolf @Snow_Wo1f]

红队操作架构图
https://t.co/7eP1RxyFVY
涵盖 C2、规避、注入、持久化、凭证访问、权限提升、AD 攻击、云运维、MOTW 绕过、语音钓鱼、AI 等诸多方面。

[Panos Gkatziroulis 🦄 @ipurple]

Dump LSASS via physical memory read primitives in vulnerable kernel drivers - Sliver Extension https://t.co/I1kRu1QBUo

[Nicolas Krassas @Dinosn]

ghidra-mcp v3.0.0 - 179 MCP tools for AI-powered reverse engineering (full headless, Ghidra Server) https://t.co/tXMkV29uYZ

[DirectoryRanger @DirectoryRanger]

ADCS Attack Techniques Cheatsheet
https://t.co/myZpR3PobY

[Kinopio @Monika01109]

https://t.co/oXr6qZWBoa

[Kinopio @Monika01109]

@bestswngs @newcenturysun @AabyssZG @Y4tacker claude code 被道德限制拦截了，试试你的 evil-opencode🤔

[Aircorridor @_aircorridor]

Sliver C2 Part 2 – Implant Modes: Sessions and Beacons

Learn how Sliver payloads run in two modes and choose the right one to stay stealthy:
https://t.co/gPogURqmf8
@three_cube

[Peter Steinberger 🦞 @steipete]

RepoBar🚦— GitHub at a glance from your menu bar See latest activity, commits, CI, PRs, for all your repos in one place. It syncs with your project folder and keeps repos up to date. Ofc includes a CLI.

brew install --cask steipete/tap/repobar
https://t.co/dMqc96gZcn

[Kinopio @Monika01109]

hello, 2026

[thaddeus e. grugq @thegrugq]

@evilsocket https://t.co/ifFbgDsxuK

[Tw93 @HiTw93]

假如小伙伴使用 Gemini CLI 进行 Coding，可以看看这个 tips，作者列举了 30 个常用的技巧用于提高使用效果的，基于使用过程的场景给到对应的建议。
https://t.co/NzydYhhgMB

[Florian Hansemann @CyberWarship]

''Malware development trick 53: steal data via legit XBOX API. Simple C example.''

#infosec #pentest #redteam #blueteam
https://t.co/eHB5l9cFQe

[Panos Gkatziroulis 🦄 @ipurple]

Possibly useful resources about EDR Evasion https://t.co/PDG3cGXItZ

[The Hacker's Choice (@[email protected]) @hackerschoice]

THC Release: 🎄Smallest SSHD backdoor🎄

- Does not add any new file
- Survives apt-update
- Does not use PAM or authorized_keys

Just SSHD trickery....adds one line only.

More at https://t.co/zVCLwmbXv2 👌