ash3lt

blacksmith

[DirectoryRanger @DirectoryRanger]

BitlockMove. Lateral Movement via Bitlocker DCOM & COM Hijacking, by @ShitSecure
https://t.co/e8hoFAqNQw

[Alex Neff @al3x_n3ff]

Crawling MSSQL databases with NetExec: mssql_dumper💾

The new mssql_dumper module, created by @JAX_Z90, enables you to crawl MSSQL databases for a predefined set of keywords, including classic credential phrases, or to search using your own regular expression/keyword list.

[Init1Security @init1security]

We added a C2 interface and it’s looking solid. It can load CNA scripts similar to Cobalt Strike, but since PickleC2 is written in Python, we use a Python wrapper for them. Still a pretty nice setup.
#redteam

[Luke Stephens (hakluke) @hakluke]

One of my less known-about tools is called hakoriginfinder, but it's really impactful. It finds origin servers behind WAFs using a technique that I haven't seen anywhere else (at least, not at scale).

It's a weird one because, unlike my other tools, the messages I get about this tool only come from really top hackers.

Check it: https://t.co/gUfjYpYFmM

[Obsidian Labs @obsidian_labs_]

building custom Shell Code for cobalt strike🔥

https://t.co/iGaeGYojsG

@lu3ky13

#EthicalHacking #Hacking #Winners #Kurdistan #BugBounty #CyberSecurity #Giveaway #HackTheBox #AI #Payload #Coding #OffSec #ObsidianLabs #Tech #FreeCourse #offsec #infosec #cobaltstrike

[DirectoryRanger @DirectoryRanger]

Securing Entra ID Administration: Tier 0, by @PyroTek3
https://t.co/oJF8Po8VMQ

[Aurélien Chalot @Defte_]

Thanks to Azox, it is now possible to use psexecsvc (https://t.co/GcOcNJGraD) through a socks proxy like ntlmrelayx allowing executing system commands via a trusted service, as NT System, and evading EDR's. Also thanks to @HackAndDo for his fixes :D

[Six2dez 🇵🇸 @Six2dez1]

Burp-AI-Agent v0.1.3:
- configurable Ollama timeout (30–3600s, default 120s)
- new bottom settings panel with tabs. Settings UI moves to a bottom split panel with dedicated tabs, wider tool layout, panel can collapse to a smaller minimum height

https://t.co/sOIljwMijn

[ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ @DanielMiessler]

Something I find invigorating:

Langchain and CrewAI were first to agents, and now they're one of many.

OpenAI was the only player for a while there and people though competing was impossible.

Now they're just a player.

You are not behind.

Tomorrow is Day 0 for everyone.

[JS0N Haddix @Jhaddix]

Port scanners ranked after 15+ years:

Nmap → depth
Naabu → simplicity
RustScan → speed

Pro tip: naabu -nmap-cli gives you best of both

🔗 https://t.co/8qHOyCzgAg | https://t.co/LFDCFb3Rgg | https://t.co/d56KN90GG9

[Jason Jordaan 🇿🇦🇺🇦🌻 @DFS_JasonJ]

Check out my latest article: THINKING ABOUT A CAREER IN DIGITAL FORENSICS? READ THIS FIRST https://t.co/zWrcOcB3FM via @LinkedIn

[Black Hills Information Security @BHinfoSecurity]

**NEW** BHIS | Blog
Where in your organization can you see automated AD objects being beneficial?

Deceptive-Auditing: An Active Directory Honeypots Tool
by: Sean Minnick
Published: 1/7/2026
Learn more: https://t.co/RslxoLGsfx

[Black Hills Information Security @BHinfoSecurity]

"Many web application firewalls (WAFs) can be bypassed by simply sending large amounts of extra data in the request body along with your payload."
Read more: https://t.co/sM7APUc3mw

By: @buxdabomb
Collaborator: @su_rabb1t
Published: 10/15/2025

[🕳 @sekurlsa_pw]

Created some 2026 rules for #hashcat with ChatGPT. Manually corrected the prepend rules and removed some cruft. Contains 74 rules.
https://t.co/NraJYpTTiM

[Dr. Nestori Syynimaa @DrAzureAD]

Slides from my @WEareTROOPERS talk are available at https://t.co/nuOW6VpEt7

[/r/netsec @_r_netsec]

EDRStartupHinder: EDR Startup Process Blocker https://t.co/lSwd2AcXZw

[Joe Stocker @ITguySoCal]

NEW: You can now enable the Microsoft Defender for Office (Email Security) AIR feature to automatically remove malicious messages based on multiple similar attributes here:
XDR Portal: https://t.co/PY4LxdlhQz
Docs: https://t.co/zXEIFI2SE6

[CyberWar - 싸워 @cyberwar_15]

#NorthKorea #APT37

The key threat is that the North Korean hacking group APT37 abuses legitimate HWP files and DLL side-loading techniques to evade security detection and stealthily execute malicious DLLs.

https://t.co/iZ7eRcdHQr

[DirectoryRanger @DirectoryRanger]

Orange Cyberdefense Active Directory Mindmap 2025
https://t.co/GLCvmA7s8k

[Florian Hansemann @CyberWarship]

''ClickFix Gets Creative: Malware Buried in Images | Huntress''

#infosec #pentest #redteam #blueteam
https://t.co/UaHB7gcPda