Francisco Sáa Muñoz

Hunt your mistakes like you hunt threats - Casey Smith

[Francisco Sáa Muñoz @enonethreezed]

@LazyTitan33 @hackthebox_eu Because of people like you, I have fun on Saturday nights. Thank you!

[Nav Toor @heynavtoor]

🚨Someone just open sourced a computer that works when the entire internet goes down.

It's called Project N.O.M.A.D.

A self-contained offline survival server with AI, Wikipedia, maps, medical references, and full education courses.

No internet. No cloud. No subscription. It just works.

Here's what's packed inside:

→ A local AI assistant powered by Ollama (works fully offline)
→ All of Wikipedia, downloadable and searchable
→ Offline maps of any region you choose
→ Medical references and survival guides
→ Full Khan Academy courses with progress tracking
→ Encryption and data analysis tools via CyberChef
→ Document upload with semantic search (local RAG)

Here's the wildest part:

A solar panel, a battery, a mini PC, and a WiFi access point. That's it. That's your entire off-grid knowledge station. 15 to 65 watts of power. Works from a cabin, an RV, a sailboat, or a bunker.

Companies sell "prepper drives" with static PDFs for $185. This gives you a full AI brain, an entire encyclopedia, and real courses for free.

One command to install.

100% Open Source. Apache 2.0 License.

[Francisco Sáa Muñoz @enonethreezed]

@ThruntingLabs Hello dears, the link I received by email to share the feedback is not working for me. Can you help me with this? ty

[Francisco Sáa Muñoz @enonethreezed]

@M_haggis This is the way for Fridays: a GitHub repo to play with, not a last-minute CVE PoC to stress over. Thanks!

[Two Seven One Three @TwoSevenOneT]

He should continue analyzing EDR-Redir, DefenderWrite, and IAmAntimalware 😅

[Francisco Sáa Muñoz @enonethreezed]

@TwoSevenOneT @TomerYaa57002 'EDR-Freeze_1.0.exe' and his zip

[Francisco Sáa Muñoz @enonethreezed]

@badsectorlabs @bareiss_patrick Yes, it's fantastic to have it right there at hand!
My complaint, which is incomplete because laziness, is more about the 'EDR' part. I'm testing TTPs and I love seeing how Elastic stops the tests. ;)

[Francisco Sáa Muñoz @enonethreezed]

After months of playing with Elastic Security in Ludus from @badsectorlabs, I wish Splunk had a similar option without needing third-party integrations.
PS: This isn’t a complaint - just laziness! :P

[Francisco Sáa Muñoz @enonethreezed]

@enelago did you invent null?

[PagedOut @pagedout_zine]

Issue #4 is out – enjoy!
https://t.co/kVmdLe0l7s

Please RT and tell your friends :)

[Francisco Sáa Muñoz @enonethreezed]

@Longor @juanchocosa No lo necesitas. Desde arriba se ve venir todo a tiempo.

[Francisco Sáa Muñoz @enonethreezed]

@cuerti No se que es peor, que se pierda la superioridad o la falta de respeto al contrario.

[Gabriel Landau @GabrielLandau]

Forget vulnerable drivers - Admin is all you need

Article 👉 https://t.co/dHO0KJ90WH
👇 Demo - enable sound 🔊

[Wietze @Wietze]

A huge shout-out to everyone who has contributed to the #LOLBAS project👏

Individuals and orgs who published research, blog posts, or simply tweeted about weird Windows-native programs: you are legends.

Our community stands on the shoulders of giants.

🔥https://t.co/Pqko7yAhwE

[Grzegorz Tworek @0gtweet]

Is there anything better than Sunday evening PoC for an app breaking its own parent-child process chain? :)

Quite short source code, if you like it: https://t.co/WmD40g1MxZ

[Francisco Sáa Muñoz @enonethreezed]

@juanchocosa Mira, como tú. <3

[Francisco Sáa Muñoz @enonethreezed]

@0gtweet @Hexacorn Awesome.
Wondering about this I found an LPE related to ShellChromeAPI.dl: https://t.co/0PJhvIVCnp
/cc @dennisbabkin

[x86matthew @x86matthew]

Is it possible to start a process as SYSTEM using only CreateFile and WriteFile? Yes

Spoiler: Write a custom RPC client and create a temporary service using \\.\pipe\ntsvcs 🙂

https://t.co/bZGm9rNMDm

[Francisco Sáa Muñoz @enonethreezed]

@joeinfosec @mrd0x It's detected because it's a known hash, right? ;)

[Francisco Sáa Muñoz @enonethreezed]

@mariuszbit Thank you.