TH∑0SIS

◇Veteran◇ 🇺🇸 | Offensive Security ⚔️ | Reverse Engineering 👨🏿‍💻 | Malware Analysis 🐞

[TH∑0SIS @The0sis_]

@ImposeCost Sir, you made me spit out my coffee 🤣

[0xor0ne @0xor0ne]

Guest-to-host VM escape in VMware Workstation chaining CVE-2023-20870, CVE-2023-34044 and CVE-2023-20869, by Alexander Zaviyalov (@NCCGroupInfosec).

https://t.co/qAKnS15RLn

#infosec

[Nick VanGilder @nickvangilder]

CISA KEV is a solid resource, yes, but it only lists which vulns have been caught being exploited in the wild and stops there. From a red team operator’s point of view that’s a useful starting point, but also a big gap if your end game is actually exploiting one of these during an op.
That’s what this CVE exploitation module I’ve been building is for: https://t.co/jheswG0CyB

CISA KEV stays the authoritative source for confirmed active exploitation. On top of it, the CVEs are enriched with technical writeups, the exploit repos themselves (if they exist), the researcher who found it, and even live chatter from X. It also surfaces vendor CVEs that already have a verified public PoC but haven’t hit KEV yet… the stuff a KEV-only view misses.

So as an operator, you can hopefully spend less time hunting down details and more time operating.

Hack the planet!

[TH∑0SIS @The0sis_]

@Le_kd_10 @Go_Jover He’s in halftime right now

[Andrew Thompson @ImposeCost]

"A computer can never be held accountable, therefore a computer must never make a management decision."

Even if they confess...

[SpecterOps @SpecterOps]

Stop asking LLMs to “find vulns.” Start using them to understand code.

@Sw4mp_f0x walks through using Claude Code as a force multiplier in app assessments - faster analysis, fewer false positives, better outcomes.

Check it out: https://t.co/BpMnOGBMv7

[TH∑0SIS @The0sis_]

@Carbonmedx @notesnook Why does this matter? It meets the standard for privacy preserving note taking, as recommended by privacy guides.

[TH∑0SIS @The0sis_]

@free_ai_guides @godofprompt GPT

[Aircorridor @_aircorridor]

Discover the future of web traffic with HTTP/3 & QUIC!

Learn how this new protocol is revolutionizing internet communication with faster, more secure connections.

Get started with HTTP/3 testing using curl & Wireshark. https://t.co/KBf17Z7aYo
@three_cube

[Andrew Thompson @ImposeCost]

The bar for comparing things to Nazis should be so much higher.

[7h3h4ckv157 @7h3h4ckv157]

HackTheBox AD Machines 📍

Source: https://t.co/5g8TpGAVPD

[TH∑0SIS @The0sis_]

I had no idea we lost this man. That's tragic.

[Sola Requiem @Sola_Requiem]

Will be praying for Voddie Baucham’s family.

[TH∑0SIS @The0sis_]

@Sola_Requiem I'll pray for you bro.

[TH∑0SIS @The0sis_]

@Sola_Requiem

[TH∑0SIS @The0sis_]

@Sola_Requiem It all depends on what the person thinks the definition of salvation is.

[TH∑0SIS @The0sis_]

Security Trybe is out here hallucinating

[solst/ICE of Astarte @IceSolst]

Unbelievable, they’re still sharing that bullshit hallucinated list (I can’t quote it because they blocked me)

We’ve called out all its mistakes multiple times, how dense do you have to be to stubbornly keep reposting it

[spencer @techspence]

A quick and easy way to find services with unquoted service paths is to open up PowerShell and run the following:

Get-WmiObject win32_service | select Name,PathName,StartMode,StartName | where {$_.StartMode -ne "Disabled" -and $_.StartName -eq "LocalSystem" -and $_.PathName -notmatch "`"" -and $_.PathName -notmatch "C:\\Windows"} | Format-List

[Dirk-jan @_dirkjan]

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: https://t.co/jD6EaGtsn3

[vx-underground @vxunderground]

HOLY FUCK.

Department of Justice nabbed one of the Scattered Spider guys. They got him on 120 counts of computer intrusions.

He's facing over 95 years in prison. I've NEVER seen a cyber crime charge this high.