Keanu Nys

Offensive Security Lead @ Spotit.
Creator of GraphSpy

[Keanu Nys @RedByte1337]

🚀I'm finally releasing GraphSpy to the public!🕵️
A powerful offensive security tool focused on making initial access and post-compromise enumeration in Microsoft Entra and M365 much more convenient during penetration tests and red team assessments!

https://t.co/OfI2TanQ61

[Keanu Nys @RedByte1337]

@SchizoDuckie @defcon 😂

[Keanu Nys @RedByte1337]

This is exactly why I did not share my research with MSRC before my talk last @defcon, to make a statement against their classic "does not meet the bar for servicing (unless you publish it)" response.

Next DEF CON will be interesting...

[vx-underground @vxunderground]

Chat, I don't want to be that guy, but I think Microsoft has really pissed off security researchers and we're approaching the tipping point.

This Eclipse guy has really rocked the boat for Microsoft.

[Keanu Nys @RedByte1337]

@defcon I even dedicated the first three minutes of my talk to calling them out for these practices.

They came to me afterward and told me I would have gotten at least a $10k bounty if I had reported it. Sure...

https://t.co/MoPQiKgesd

[Keanu Nys @RedByte1337]

Just shipped GraphSpy v1.7.0 ✨

Mostly under-the-hood work this time with major refactoring to speed up future development ⚙️

Huge shoutout to n3rada for leading the effort!

More exciting features coming soon 🚀

https://t.co/OfI2TanQ61

[Keanu Nys @RedByte1337]

@fabian_bader Interesting research Fabian!

[Altered Security @AlteredSecurity]

Early Bird Offer for Q2 Bootcamps 2026 is ending soon.

Save 15% on our upcoming Red Team live bootcamps across Azure and Active Directory.
Use code EARLYBIRD15. Offer valid till April 10, 2026.

June 5 - CARTP® Bootcamp
June 6 - CRTP® Bootcamp
June 27 - CARTE® Bootcamp

Secure your seat:
https://t.co/i8fC4WqJuI

#CyberSecurity #RedTeaming #CloudSecurity #InfoSec

[Nikhil Mittal @nikhil_mitt]

Join @RedByte1337 and me for the June 2026 bootcamps as we take you through the on-prem and Azure Red team. Very practical and hands-on labs with fantastic learning aids. Bonus - dad jokes and insight (read rant) on state of identity security.

[Kuba Gretzky @mrgretzky]

It was an honour to share what I've been working on on the stream! It was a blast! 🪝🐟

The demo gods were thankfully kind to me. 🙏

P.S. To anyone copying the session cookies character-by-character from the video feed - all the sessions have been invalidated. 🥲

[Keanu Nys @RedByte1337]

@CroodSolutions @_JohnHammond Thanks for sharing Mike!

[Keanu Nys @RedByte1337]

I recently sat down with @_JohnHammond to record a video about GraphSpy! 😁

We went over the most powerful features GraphSpy has to offer, and even showcased some of the new features that were added lately.

This video is now live on his YouTube channel, so go check it out! 😉

[John Hammond @_JohnHammond]

GraphSpy: A Hacker's Tooling Deep Dive, video demos with the creator @RedByte1337! 🤩 Keanu shows me the wild things you can do for post-exploitation in Entra ID -- even adding a physical security key for persistence and a ton of other tricks 🤯 Video: https://t.co/0Dxacrscgr

[Keanu Nys @RedByte1337]

@darthBoom @mrgretzky @ThinkstCanary I am very sorry 🫣

[Keanu Nys @RedByte1337]

Maximum 16-character password "for security reasons". 🤔
And what I find more surprising is the fact that the "<" character is not permitted either...
Is this some poor attempt at preventing XSS? That would mean the password is displayed in cleartext somewhere on a web page...🤨

[Keanu Nys @RedByte1337]

I will be teaching the advanced version of the Attacking & Defending Azure Cloud bootcamp once again in February with @AlteredSecurity!

Live, hands-on Azure red team training with realistic labs to sharpen both your Offensive and Defensive skills! 🔥

🔗 https://t.co/zN2SX3Bl5j

[Keanu Nys @RedByte1337]

@mrgretzky Haha, thanks Kuba. Small stuff compared to what you achieved with Evilginx ofc 😜

[Keanu Nys @RedByte1337]

GraphSpy just hit 1000 ⭐ on GitHub!

What started as a personal side project is now used by pentesters around the world. Never imagined this as my first project, especially not in under 2 years. 🤯

I silently pushed v1.6 right before the holidays with powerful new features 😉

[Keanu Nys @RedByte1337]

@mrd0x Thank you! 🙂

[Keanu Nys @RedByte1337]

@ZephrFish Thanks Andy! 😁

[Keanu Nys @RedByte1337]

Check out the new features under the Release Notes section:
🔗https://t.co/OfI2TanQ61

[Keanu Nys @RedByte1337]

Wow, this almost passed by without me noticing👀
This is not how I envisioned GraphSpy to be covered in a @_JohnHammond video, but then again, it was only a matter of time before malicious actors used it.
You just hope it is used for more good than bad when creating these tools.

[John Hammond @_JohnHammond]

Uncovered screen recordings from threat actors! 👀 Real footage of cybercriminals using anti-detect browsers and infostealer malware logs for session hijacking, and another using GraphSpy to read their Entra ID victim's emails in Outlook! 💀 Video: https://t.co/p94bhFgGgY

[Keanu Nys @RedByte1337]

@_dirkjan @Thomasbyrne__ For now 😉
I hope for a bit longer, but we'll see. In theory, the October deadline has lapsed, so I guess you did indeed win from that perspective 😅