SkelSec

CEO and Co-Founder of Octopwn

[Gergely Eberhardt @ebux25]

I recently tore apart SuperBox streaming devices and found that "free TV" has a serious catch. Our new report breaks down how these boxes are weaponized into residential proxies via exposed ADB ports, root access & rogue apps bundling Popanet. https://t.co/hYol0WefLq

[SkelSec @SkelSec]

Recent LLM driven CVEs:
"I have a concept of an LPE"

[S3cur3Th1sSh1t @ShitSecure]

Anyone interested in what you need for proper loader development in 2026? My talk for @x33fcon was accepted, so I'll take about Malware again. 🔥 It's a unique talk and will only be held there this year! Hope to see some of you in Poland. 😎

[Petr Beneš @PetrBenes]

I often need to explore Windows kernel crashdumps when I'm on Linux/macOS.

WinDbg unfortunatelly doesn't work in Wine.

So... I did a thing. It's multiplatform - doesn't depend on dbgeng.dll nor DIA. WinDbg-flavored.

And it's fast. Really fast.
https://t.co/sd44mJo9ax

[SkelSec @SkelSec]

Highly recommend reading this if you're into windows kernel vuln research!
Juian found some cool vulns using this technique -which we can't publish :/ -
Something new is also coming out for pypykatz bc of this in the upcoming months

[Julian Horoszkiewicz @ewilded]

Finally, it is published 😁 Making Vulnerable Drivers Exploitable Without Hardware - my latest research on driver vulnerability hardware-gating, explaining the concept of hardware-dependent code and diving deep into creative deployment techniques - software-emulated phantom devices, driver restacking, and forced driver replacement — all explored through the lens of Bring Your Own Vulnerable Driver (BYOVD) attacks:
https://t.co/COJ0BKpZQe

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

Just pushed a minor update to #mimikatz 2 🥝(no - it's *NOT* the version 3) to support specific GMSA DPAPI passwords in LSA secrets to be able to to decrypt Masterkeys

> https://t.co/UNUIxSOhtS

Only for @topotam77 convenience ;)

[SkelSec @SkelSec]

@notdan As usual ppl "forget" to give kudos to me :/ that's all

[SkelSec @SkelSec]

Shit like this makes my blood boil, and ppl wondering why I'm pushing out less and less public code...

[Co11ateral @co11ateral]

New Mimikatz

Researchers took an old version of Mimikatz and taught it how to dump credentials from the latest operating systems!

The research: https://t.co/JxZwg135Mr

The repo:
https://t.co/Lpsu09AMng

#redteam #pentesting

[SkelSec @SkelSec]

@UK_Daniel_Card pypykatz had this logic implemented since last year, most of this article is just porting that logic to mimikatz... without mentioning me. Again.
At this point this is a running joke that I'm getting 0 fucking kudos either deliberately or by "forgetting"

[SkelSec @SkelSec]

@UK_Daniel_Card Dunno how to react to your comment as it's completely missing the point, and is a bit hurtful :/

[SkelSec @SkelSec]

@abdo_mhanni @lowercase_drm @0x64616e Nah man, don't try to make my projects mainstream. After the fifth time I'm sure they'll get it right and they won't have to credit me again...

[Simone Margaritelli @evilsocket]

Duuuude VulDB is the worst, they made public all 3 of my original disclosures that include the fully working root shell exploits ....

[SkelSec @SkelSec]

@foosecn00b A van? IN THIS ECONOMY???

[SkelSec @SkelSec]

Pssst! Hey, kid! Wanna buy SOC2?

[SkelSec @SkelSec]

@byt3bl33d3r You mistyped falsify

[SkelSec @SkelSec]

@IceSolst @daveaitel My point exactly

[SkelSec @SkelSec]

Ohh... you have reached the API limits, so we replaced your coder with a mental patient who will use half a crayon to randomly change values in your code. (he already ate the other helf)

[SkelSec @SkelSec]

Research workflow:
1. Idea
2. discussions with peers
3. chatting with LLMs
4. feasibility check
5. Airbus guys already did that 5 years ago

I'm.... eeehhhh....
(Airbus people doing some really underrated research btw, props to them!)

[SkelSec @SkelSec]

@HackingLZ We have something interesting in this topic but stuck with explaining it to investors in EU so... :(

[Melvin langvik @Flangvik]

@MDSecLabs https://t.co/xkmDjh15Km