come2darkside

RedTeamer @PicusSecurity | WebSec & Pentest Enthusiast | Geek | wannabe a Gopher | Father of the Luke

[S3cur3Th1sSh1t @ShitSecure]

After “The Art of Evasion” @x33fcon I’m publishing NimSyscallPacker to the public. This is the most advanced public Packer/Loader I’m aware of:

https://t.co/ftd24bHryj

[Rasta Mouse @_RastaMouse]

Cobalt Strike 4.13 has a new Aggressor hook to support BOF cocktails. Here's a quick walkthrough:

https://t.co/VOigdjblN7

[Kurosh Dabbagh @_Kudaes_]

I've released Puzzle, a research project on deploying malware in monitored environments by abusing Windows minifilters functionality. It includes several utilities and PoCs to interact with minifilters and explore static and runtime analysis evasion 👐

https://t.co/8zWv1g8n79

[Atahan @0xIr0h]

Checkout my latest blog on fixing the mimikatz for windows 11 24H2
https://t.co/PwMzUXAezp

[Furkan Göksel @R0h1rr1m]

I recently developed a Nim implementation of the Silent Harvest technique explained in a blog post by @haider_kabibo

With this tool, you can dump SAM + LSA Secrets without needing SYSTEM-level privilege or dumping registry hives to disk.

#infosec
https://t.co/uOtQRwU3uP

[PwnFuzz @pwnfuzz]

An automated N-day research pipeline at PwnFuzz.

Ghidra + Ollama + n8n →Diffs Patch Tuesday binaries → LLM analyzes the output → Structured vuln reports, monthly AI-generated reports gets you oriented fast!
Blog: https://t.co/O0EzQNdZev
Repo: https://t.co/wCFo8zoyeL

[Nicolas Krassas @Dinosn]

I made a stealthy JITD shellcode loader that I want to share with you https://t.co/Z0KxN2BOJE

[flux @0xfluxsec]

This is awesome to see @Microsoft publish - "RustTraining". The link is in the comment below - check it out!!

Just a small selection of cool things that caught my eye:

- Production Async
- Concurrency & Runtime
- Why C/C++ Developers Need Rust
- no_std — Rust Without the Standard Library
- The Case for Rust for C# Developers
- Systems & Production
- Unsafe Rust - Controlled Danger
- Phantom Types
- Protocol State Machines

And lots lots more.. going to spend some time going through this, looks like they have put a lot of work into it!

[0xor0ne @0xor0ne]

"From Zero to QEMU: A journey into system emulation" (Slide deck covering QEMU system emulation internals by Antonio Nappa)

https://t.co/bYgH3zq83f

#infosec #qemu

[DirectoryRanger @DirectoryRanger]

Windows Inter Process Communication. A Deep Dive Beyond the Surface, by @haider_kabibo
Part 1 https://t.co/WXPXxYwlbm
Part 2 https://t.co/vdZcjzy0J1
Part 3 https://t.co/Xymk9LDsCR
Part 4 https://t.co/zmAGonxDMj
Part 5 https://t.co/rUOLhwY1Sr
Part 6 https://t.co/uKuSglXVUi

[Brian Roemmele @BrianRoemmele]

BOOM!

Apple’s Neural Engine Was Just Cracked Open, The Future of AI Training Just Change And Zero-Human Company Is Already Testing It!

In a jaw-dropping open-source breakthrough, a lone developer has done what Apple said was impossible: full neural network training– including backpropagation – directly on the Apple Neural Engine (ANE). No CoreML, no Metal, no GPU. Pure, blazing ANE silicon.

The project (https://t.co/jrk67hf9p1) delivers a single transformer layer (dim=768, seq=512) in just 9.3 ms per step at 1.78 TFLOPS sustained with only 11.2% ANE utilization on an M4 chip. That’s the same idle chip sitting in millions of Mac minis, MacBooks, and iMacs right now.

Translation? Your desktop just became a hyper-efficient AI supercomputer.

The numbers are insane: M4 ANE hits roughly 6.6 TFLOPS per watt – 80 times more efficient than an NVIDIA A100. Real-world throughput crushes Apple’s own “38 TOPS” marketing claims. And because it sips power like a phone, you can train 24/7 without melting your electricity bill or the planet.

At The Zero-Human Company, we’re not waiting. We are testing this right now on real ZHC workloads. This is the missing piece we’ve been chasing for our Zero Human Company vision: reviving archived data into fully autonomous AI systems with zero human overhead.

This is world-changing.

For the first time, anyone with a Mac can fine-tune, train, or iterate massive models locally, privately, and at a fraction of the cost of cloud GPUs.

No more renting $40,000 A100 clusters. No more waiting in queues. No more massive carbon footprints.

Training costs that used to run into the tens or hundreds of thousands of dollars? Plummeting toward pennies on the dollar – mostly just the electricity your Mac was already using while it sat idle.

The AI revolution just moved from billion-dollar data centers to your desk.

WE WILL HAVE A NEW ZERO-HUMAN COMPANY @ HOME wage for equipped Macs that will be up to 100x more income for the owner!

We’re only at the beginning (single-layer today, full models tomorrow), but the door is wide open. Ultra-cheap, on-device training is here.

The future isn’t coming. It’s already running on your Mac.

Welcome to the Zero-Human Company era.

[Nicolas Krassas @Dinosn]

I reverse-engineered Intel ME so you don't have to: A decade of Ring -3 vulnerabilities that your EDR can't see https://t.co/Mkd3BxD7yB

[MalDev Academy @MalDevAcademy]

Malware Development course update 21 released!

https://t.co/67X8yADBsY

- Introduction To Windows Persistence

- Persistence Via The Windows Registry

- Persistence Via The File System

- Persistence Via Windows Services

- Persistence Via Windows Tasks

- Persistence Via WMI Abuse

- Persistence Via COM Object Hijacking

- Persistence Via Electron Applications

[Muqsit 𝕏 @mqst_]

⏱️ My Methods To Achieve Persistence In Linux Systems

Blog: https://t.co/OrW8wKL7bx

Author: Flaviu Popescu

[Pavel Yosifovich @zodiacon]

The "EDR Internals Research and Development" course is now available on trainsec! https://t.co/mxQPGLBIdH

[Golang News & Libs & Jobs - human 🗣️ , no 🤖 @golangch]

A modern, open-source, self-hosted alternative to #GitHub
#golang

https://t.co/yf1pnzoGtJ

[klez @KlezVirus]

[RELEASE] As promised, I’m releasing the first blog post in a series. It covers the gaps still present in current stack-based telemetry and how Moonwalking can be extended to evade detection logic and reach “on-exec” memory encryption.
Enjoy ;)
https://t.co/4Yf28y7cT4

[The Hacker News @TheHackersNews]

🛑 WARNING: CVE-2025-20393 is rated 10.0, with no patch available.

Cisco confirmed active exploitation of an AsyncOS zero-day by a China-linked APT.

The flaw allows root-level command execution on affected email security appliances and enables attackers to establish persistence.

🔗 Details and mitigations → https://t.co/vHajVFkm5T

[DirectoryRanger @DirectoryRanger]

Introducing Early Cascade Injection: From Windows Process Creation to Stealthy Injection
https://t.co/sLtvt94vUw

[Florian Hansemann @CyberWarship]

''Using EDR-Redir To Break EDR Via Bind Link and Cloud Filter''

#infosec #pentest #redteam #blueteam
https://t.co/tmpA6Z6rRt