DTM

security engineer / hacker / red teamer / researcher

[DTM @dtmsecurity]

Since everyone’s seeing what fruit flys can do - here’s a fly powered fish inspired by MOPy fish from the 90s - https://t.co/rTTfagx2Tk

[Insomnia @insomnia_vip]

https://t.co/nKBMyVOUpY

[tmp.0ut @tmpout]

We are pleased to release tmp.0ut 5 Volume!

Get your viruses, rootkits, strange ELFs, weird machines, tiny files, cool art, and phresh beats here!!

https://t.co/tZLM50HOc0

[Panos Gkatziroulis 🦄 @ipurple]

📁 .ppkg files are Microsoft deployment containers used to configure Windows devices. @dtmsecurity wrote about these and how to abuse them for code execution.

🧐 So I went back and reproduced the technique to identify detection indicators.
🖊️ https://t.co/FM3cLaxsov

[DTM @dtmsecurity]

Next week I’m Vegas-bound. On Thursday I’ll be speaking at the AI Security Forum. Looking forward to sharing some AI research, presenting on something other than traditional red teaming for a change, and of course catching up with lots of humans.

[AI Security Forum @AISecurityForum]

Once weights are in the wild, the control surface moves from API governance to local modification. @dtmsecurity maps the "abliteration" scene and what breaks once safeguards can be stripped offline.

For session times & detail, check our conference app.

#AISecurity

[DTM @dtmsecurity]

@joshua_saxe @rez0__ This is a very relevant discussion for my talk at AI Security Forum next week in Vegas. 🙂

[AI Security Forum @AISecurityForum]

Once weights are in the wild, the control surface moves from API governance to local modification. @dtmsecurity maps the "abliteration" scene and what breaks once safeguards can be stripped offline.

For session times & detail, check our conference app.

#AISecurity

[shubs @infosec_au]

Note on WordPress pre-auth RCE (CVE-2026-63030). There are SQLi poc's out there, but RCE PoC has not yet been exploited in the wild. Will only release our technical post if we have proof of exploitation. Our RCE payload does NOT require poorly configured MySQL.

[Nathan McNulty @NathanMcNulty]

Why yes, yes we can use ESTSAUTH captured from evilginx to automatically register a passkey

[mitsu 𓃦 @mitsufoppie]

you can use gmod to verify your age by the way

[Askar @mhaskar01]

I came across a simple technique that abuses Fondue.exe, a native Windows binary, to execute a custom malicious APPWIZ.cpl file placed in the same directory.

PoC and More details on how it was discovered later!

#redteam #offsec

[Battle Programmer Yuu @netspooky]

Wow this post really blew up! If you want to know more about the smallest possible files that do things, check out the 6th annual Binary Golf Grand Prix, happening now til January 18th!

https://t.co/Lb4J5rNJGN

[_leon_jacobs(💥) @leonjza]

Two blog posts just dropped - one with the details on the bloatware pwning shenanigans I was up to earlier in the year, and another on pipetap, a new Windows named pipe proxy/tool.

https://t.co/bmqZ9x3obQ

https://t.co/QD59sHpTEP

[Max Grim @max__grim]

Would you like to be my colleague, and get to wear an awesome red hoodie? We are looking for a full-stack / offensive developer. Drop me a message or apply directly: https://t.co/GKI48eVUPC

[Ben Canning @benhackshealth]

We are giving away 1 free spot for level ZERO.

If you are a cyber pro or tech bro and want a full system reset - now is your chance.

To enter: 🔄 retweet
Bonus entry: 💬 comment below - 1 thing you want to fix in the new year.

Winner announced Friday.

#wehackhealth

[Battle Programmer Yuu @netspooky]

Part 1 of my #BGGP6 writeup about nasm's most mysterious object file format, RDOFF.

https://t.co/SYsCYJNeqc

[Stuart @MagisterQuis]

Slides and Such for my @BSidesVienna talk about Linux H4x as just a bunch of syscalls, Living Under the Land on Linux

Slides: https://t.co/06QPZ6gR5G

and Such: https://t.co/6oA1XbpoAO

[DTM @dtmsecurity]

Released a write up for three python pip package entries for #BGGP6 - https://t.co/zErxuu8WBg

[Binary Golf Association @binarygolf]

Binary Golf Grand Prix 6 begins now!

#BGGP6 theme: "Recycle"

[Battle Programmer Yuu @netspooky]

New writeup for #BGGP6 !!

What's the smallest Wireshark dissector? What's the most annoying Wireshark dissector?

Find out here: https://t.co/VMlMXuGXsz

[bohops @bohops]

Last month, @d_tranman and I gave a talk @MCTTP_Con called "COM to the Darkside" focusing on COM/DCOM cross-session and fileless lateral movement tradecraft.

Check out the slides here: https://t.co/1KNln1ldzF

Recording should be released soon.

[SpecterOps @SpecterOps]

Credential Guard was supposed to end credential dumping. It didn't.

@bytewreck just dropped a new blog post detailing techniques for extracting credentials on fully patched Windows 11 & Server 2025 with modern protections enabled.

Read for more ⤵️ https://t.co/mYPHg1mTKj