Sushil Singh

The quieter you become, the more you are able to hear.

[Sushil Singh @SushilSin]

https://t.co/p7Ou5VLjs4

[vx-underground @vxunderground]

This is very good malware.

This is solid-solid-SOLID B+ malware, very close to A- malware.

APT37 is using a old-school playbook. They're doing EPO (Entry Point Obfuscation) on a self-delivered binary for evasion. They also unironically are using something akin to cavity infection ... but on themselves. This is something you saw more in the Windows 95 - Windows XP era, not something you see in 2026.

Very cool. I respect it.

The multi-staged fragmentation of shellcode phases is also really, really, really cool. This is (once again) a more old-school technique usually reserved for infected binaries, not self-delivered binaries.

Despite all of these super cool features, APT37 shoots themselves in the foot immediately.

- EAT walking for Kernel32 functionality (???)
- XOR decryption is a huge red flag
- Allocating with PAGE_EXECUTE_READWRITE (???)
- Hardcoded OAuth token (???)
- Used external dependency for AES (???)

Why not use NT functionality to hook evasion? XOR is easily identified in static analysis, why XOR? Allocating memory with VirtualAlloc with RWX is a MASSIVE RED FLAG. They also hardcode a OAuth token ... they can multi-staged shellcode payload with old-school malware techniques but hardcore AN OAUTH TOKEN?

It unironically makes me wonder if they had one old-head malware guy working on it, then they had some newer dude do the non-hardcore stuff. There is a huge gap in skill sets here.

Or the old-head hasn't kept up to date on malware stuff since 2005... or they got lazy... I don't know, really weird.

[Tom Dörr @tom_doerr]

Scans S3 buckets for misconfigurations across cloud providers

https://t.co/iwyMr3xPtP

[Tom Dörr @tom_doerr]

Multi-AI vulnerability scanner and pentester

https://t.co/lUtlPxATeV

[Tom Dörr @tom_doerr]

Aggregates CVEs from multiple sources

https://t.co/CRP5UP66Og

[Tom Dörr @tom_doerr]

AI-driven cybersecurity tools via MCP

https://t.co/JSDJysLLtv

[Tom Dörr @tom_doerr]

open-source face recognition REST API with docker support

[Dark Web Informer @DarkWebInformer]

Telegram Maltego: A free set of Transforms for Maltego that enables OSINT investigations in the Telegram messenger

GitHub: https://t.co/tGMf1H7Idq

[Sushil Singh @SushilSin]

@riyazmd774 @grok is it fake

[Rahul Gehlaut @rahul_gehlaut]

🎉🎉 Celebrating Success! Airtel's Live Bug Bounty Triumph at nullcon Goa 🛡️

Huge shoutout to the talented ethical hackers and security experts who made this event a tremendous success. Your dedication to cybersecurity is truly commendable. 🙌👏 #nullconGoa #BugBounty #Airtel

[Rahul Gehlaut @rahul_gehlaut]

Get Set, Go! Pre-event activities are in full swing. 🚀 #PreEventFun #EventReady
@SushilSin @1337_mj

[NULLCON @nullcon]

😎For the past 3 editions, Airtel has been a strong supporter!

👊Super thrilled to welcome @airtelindia as our 🥈Silver Sponsor with a new identity

Keep an eye out on Live bug bounty 💰https://t.co/kqTyO6slg4

#NullconGoa2023 #Infosec #Conference

[NULLCON @nullcon]

Hey #bughunters! 🟢Application for Private Live Bug Hunting is now open

Rewards upto ₹10,00,000 | 🎯Target to hunt #vulnerabilities provided by @airtelindia & @fractalai

Apply before 7th Sep➡️https://t.co/iFhKIjFnxV

#NullconGoa2023 #bughunting #Infosec #Conference

[NULLCON @nullcon]

👨‍💻Unleash your #hacking skills! Rewards up to 💰₹10,00,000 at stake with Targets to hunt provided by @airtelindia & @fractalai

👊Application for Private Live Bug Hunting ends on 7th Sep➡️https://t.co/iFhKIjFnxV

#NullconGoa2023 #bughunting #Infosec #Conference

[NULLCON @nullcon]

🕰️You have just few hours left to submit your application for 👩‍💻Live Bug hunting!

⚠️Select 50 participants will get a chance | Apply soon ➡️ https://t.co/iFhKIjFnxV

#NullconGoa2023 #Infosec #Conference #bugbounty | @airtelindia | @fractalai

[Sushil Singh @SushilSin]

Calling all security enthusiasts, bug bounty seekers, and researchers.
A live bug bounty competition is being held by Bharti Airtel at @nullcon Goa-2023 @antriksh_s @rahul_gehlaut @airtelindia
register here: https://t.co/Xf9Ua2myJP

[Antriksh (Yoda) #hardwear_ioNL2025 @antriksh_s]

#NullconGoa 2023 is getting so exciting …

[Sushil Singh @SushilSin]

https://t.co/OiNlNlrrG7

[7h3h4ckv157 @7h3h4ckv157]

Defcon Conference Slides Presentations 22-30

Credit: @C0d3Cr4zy

↓↓

Defcon 22 All Slides
https://t.co/B2MFSoRlsS

Defcon 23 All Slides
https://t.co/fTKO3piysm

Defcon 24 All Slides
https://t.co/o3IgAH3fnu

Defcon 25 All Slides
https://t.co/npqmtEMAQ6

Defcon 26 All Slides
https://t.co/5OKufGcLIK

Defcon 27 All Slides
https://t.co/isay5Rtj2H

Defcon 28 All Slides
https://t.co/Y8tj0Oa3MC

Defcon 29 All Slides
https://t.co/6UDZ6a6gKf

Defcon 30 All Slides
https://t.co/kGlOGGzQW0

#cybersecurity #Pentesting #Hacking #bugbountytips #infosec #cybersecuritytips #redteam #coding #vulnerabilities #BugBounty #CyberSecurityAwareness

[NULLCON @nullcon]

😎For the past 3 editions, Airtel has been a strong supporter! 👊Super thrilled to welcome back Airtel @airtelindia as our 🥈Silver Sponsor

Keep an eye out on Live bug bounty 💰https://t.co/kqTyO6rNqw

#NullconGoa2023 #Infosec #Conference