NickHaxIt

Security Consultant @trustedsec | Tattoo lover

[NickHaxIt @thelaughing_man]

@HackingLZ

[Lost Lands Festival @lost_lands]

The Lost Lands 2026 Trailer is here! We're so excited to share a 9th magical year with you all ☄️🦕 Watch the full Trailer now on the Lost Lands YouTube channel!

[NickHaxIt @thelaughing_man]

@Bandrel @Cthulhu_Answers

[NickHaxIt @thelaughing_man]

@woolimusic Ok but is it cheaper than songs by crankdat?

[TrustedSec @TrustedSec]

Great Scott! We saw lightning strike at our second annual SmileyCon⚡️Last month, we hosted a 2-day conference at our HQ and welcomed more than 100 attendees through our doors. We had the pleasure of having @edskoudis as our keynote and a surprise appearance from @cavs 🐶

[NickHaxIt @thelaughing_man]

@HackingLZ Just let them know doggo is on a spring bulk before their summer cut

[Lost Lands Festival @lost_lands]

YOUR LOST LANDS 2026 LINEUP! 🦕

[Lost Lands Festival @lost_lands]

Lost Lands fam, the 2026 Early Arrival lineup is here! You won’t want to miss these sets on Wednesday and Thursday, or the surprise B2B2B2B2B2B pre-party at the Prehistoric Stage + The Crater Thursday night ☄️🦖

Early Entry passes (which includes access to the Pre-Party) are available now!

[NickHaxIt @thelaughing_man]

@HackingDave I appreciate you grabbing me five!

[TrustedSec @TrustedSec]

Growing the next gen of cybersecurity talent starts with people like these. Shoutout to @thelaughing_man, @Bandrel, and @Coontzy1 for volunteering at the 2026 @NCAECyberGames Invitational on April 18. Watch the competition live at 1:00PM ET on Twitch! https://t.co/IDg5m6FBJU

[Alex Neff @al3x_n3ff]

Crawling MSSQL databases with NetExec: mssql_dumper💾

The new mssql_dumper module, created by @JAX_Z90, enables you to crawl MSSQL databases for a predefined set of keywords, including classic credential phrases, or to search using your own regular expression/keyword list.

[Lost Lands Festival @lost_lands]

LOST LANDS 2026 IS ON SALE NOW! 🦖

[NickHaxIt @thelaughing_man]

Another year ❤️

[Alex Neff @al3x_n3ff]

NetExec now extracts even more secrets from the NTDS.dit🚀

With the new --history and --kerberos-keys flags, NetExec will also dump the password history and the AES/DES keys for Kerberos auth from the NTDS.dit🔑

Implemented by @kriyosthearcane, azoxlpf and me.

[SpecterOps @SpecterOps]

SCCM’s AdminService uses Entra tokens without confirming the UPN exists in AD. A crafted synced UPN can let an attacker impersonate the site server. Microsoft now requires on-prem SID matching (CVE-2025-59501).

Great deep dive by @unsigned_sh0rt!

https://t.co/FGAHfaXHsY

[NickHaxIt @thelaughing_man]

@woolimusic Please make it to buffalo sometime 🥺

[Alex Neff @al3x_n3ff]

A new module just got merged into NetExec: raisechild🔥
Made by azoxlpf to automatically abuse domain trust to pivot to other domains.

It will:
- Dump the krbtgt hash of the child domain
- Enumerate trusted domains
- Craft a TGT for trusted/parent domain

[NickHaxIt @thelaughing_man]

@svddenkait All the prices were just so over the top. Half the time/lineup of 7S for what feels like double the price to come in from the east coast. Can't justify it here

[DAKKADAKKA @DAKKADAKKA1]

They put a fucking AMMO COUNT SCREEN ON THE NEEDLER