Elger

Aut viam inveniam aut faciam.

[Elger @elgerx]

Tips to Master Something
1. Expose yourself to basics over and over again.
2. Stick to what you can understand, prove and explain.
3. Always think in new ways to do the same thing better.

[vxdb @vxdb]

Federal agents in Atlanta stopped a guy at the airport, forced him to unlock his phone, and it self-wiped using GrapheneOS's built-in duress feature

The DOJ is now charging him with destroying evidence

[Elger @elgerx]

Every year someone declares PowerShell dead for offense. Meanwhile APTs keep living off AMSI bypass and in-memory execution. This screetsec guide walks the whole chain, from download cradle to lateral movement.
https://t.co/vlWwpJcD77

[Elger @elgerx]

Twenty years of exploit dev research, open to everyone. Corelan is proof that the best memory corruption reference never sat behind a paywall.

https://t.co/OCZeWjhzqG

[Nicolas Krassas @Dinosn]

A fast, terminal-based static analyzer for quick malware triage (Rust) https://t.co/rG0EDlQimu

[Alex Neff @al3x_n3ff]

Onelogon: Taking over Active Directory Accounts via Netlogon🔑

We analyzed Netlogon, bypassed the Zerologon patch, resulting in a full auth bypass. An attacker can leverage this to compromise computer accounts, or even the entire AD. Non-standard config must be present tho 🧵

[Florian Roth ⚡️ @cyb3rops]

I have a funny idea.

Add fake internal DNS entries like:

- honeypot01
- canarydc
- edr-test-node
- malwarelab

to your AD environment.

Not for humans, but for future LLM-driven recon agents.

Basically:
We're entering an era where naming things might become a defensive control 🙂

[Elger @elgerx]

Para quem se interessar, convites do Claude Cowork por um período grátis!

https://t.co/tlBnQVpKky

[Anthropic @AnthropicAI]

Introducing Project Glasswing: an urgent initiative to help secure the world’s most critical software.

It’s powered by our newest frontier model, Claude Mythos Preview, which can find software vulnerabilities better than all but the most skilled humans.
https://t.co/NQ7IfEtYk7

[vx-underground @vxunderground]

National Hazard Agency, a sub-clique of Lockbit ransomware group, has ransomed TSMC (Taiwan Semiconductor Manufacturing Company).

The company has an estimated annual revenue of $57,220,000,000.

National Hazard Agency is ransoming them for $70,000,000.

[Elger @elgerx]

GitHub - t3l3machus/hoaxshell: A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell. https://t.co/FPjrCefjaY

[Elger @elgerx]

Quando o OSINT vai longe demais…

[Elger @elgerx]

Jamais contemplado com honrarias de heróis. Pesa sobre mim, em essência, o guardião do silêncio. Minha derrota é a frustração pessoal pelo conhecimento inatingível e minha vitória repousa na trincheira do anonimato.