TKYN

The person of all time

[b1ack0wl @b1ack0wl]

just got laid off this morning. so if anyone knows of a position for an experienced researcher please let me know. 🖤

[emma @carrot_c4k3]

@4everrsince every aspect of my life must be in plaintext for as many tech companies as possible!!!

[roddux @roddux]

Anyone hiring for Android VR/xdev? :)

[TKYN @TKYNSEC]

@h0mbre_ theres notifications in the app now. very useful

[h0mbre @h0mbre_]

ive never worked more than i have since the models got good

[Trenchant @TrenchantARC]

Limited edition of our new t-shirt! Come visit our booth. And don't get caught in the wild ...

[TKYN @TKYNSEC]

@vxunderground This but unironically

[TKYN @TKYNSEC]

@_RastaMouse This user was apprehended shortly after this post for not renewing their TV license

[Lloyd Davies @LloydLabs]

https://t.co/GP3Tx2SHqk now works on Windows 11 24H2! 🥳

[TKYN @TKYNSEC]

@Steph3nSims Very interested!

[MalDev Academy @MalDevAcademy]

Maldev Database updated
https://t.co/FEQH43edCX

Some of the newly added snippets include:
- Anti-Analysis Via Self-Deletion (Windows 11)
- Anti-Analysis Via Self-Deletion (2) (Windows 11)
- Running VBScript code in memory
- Screen Capture to BMP (ScreenShot)
- Sleep Obfuscation (Ekko)
- Sleep Obfuscation (Foliage)
- Sleep Obfuscation (Zilean)
- Sleep Obfuscation with Call Stack Spoofing (Ekko)
- Sleep Obfuscation with Heap Encryption (Ekko)
- Proxy Execute LoadLibrary With Timer APIs
- Proxy Execute LoadLibrary With Wait APIs
- Proxy Execute LoadLibrary With Work Item APIs

Thank you @joaoviictorti for assisting and to Maldev Academy members that contributed.

[TKYN @TKYNSEC]

@xvonfers @0x_alibabas

[TKYN @TKYNSEC]

@DirectoryRanger Hey, that's me

[Last Week in Security (LWiS) @lastweekinfosec]

Windows self-delete on 24H2 (@TKYNSEC), DNS rebinding (@yarlob), VSCode backdoor (@d1rkmtr), leak Google users' 📞# (@brutecat), Entra sync dumping (@hotnops), Delegations (@podalirius_), Chrome abuse for screenshots, mic, and more! https://t.co/gQyyKRf4Os

[TKYN @TKYNSEC]

@CT_Hellcat Up now!

[TKYN @TKYNSEC]

Windows 11 24H2 broke a popular malware evasion technique! The Lloyd Labs self-deletion method now fails because of NTFS changes, so I spent time with kernel debugging to figure out why and how to fix it.
Full technical breakdown: https://t.co/chp6RbrlA3

[TKYN @TKYNSEC]

Zoho Quick Assist has a critical flaw! Found that unprivileged users can delete arbitrary system files through the "Send Logs" function due to improper path validation, potentially escalating privileges to SYSTEM level.
Full analysis + demo: https://t.co/qCj0FYNYG2

[TKYN @TKYNSEC]

Arbitrary file delete to SYSTEM in a preinstalled ASUS utility!
https://t.co/qj8hcSbiVz

[TKYN @TKYNSEC]

@_L4ys How so?

[TKYN @TKYNSEC]

Blog post coming soon!
https://t.co/a2wpLifyq1

[TKYN @TKYNSEC]

Anyone work at ASUS? I have a local privilege escalation vulnerability in a widely deployed desktop app to disclose quickly. PoC code and explanation available. Thanks!