Tamil Mathi

Security @ BD | Speaker @ Bsides | DEF CON | OffensiveX | OSCP

[Tamil Mathi @Hash_Byte]

OffensiveX 2025 was a blast 💥

[Offensive X @TheOffensiveX]

Tamil Mathi T (@Hash_Byte) is on stage at OffensiveX 2025!

Talks about "Life on the Line: Breaking into a Medical Device by Exploiting TEE/HSM"

#OffensiveX2025 #CyberSecurity #RedTeam #MedicalDeviceSecurity #Hacking #InfoSec #TEE #HSM

[Amitai Cohen @AmitaiCo]

Sketch of the recent Okta incident involving a compromise of their support system:

[Tamil Mathi @Hash_Byte]

@0xTib3rius You can still bypass SOP via JSONP

[Wiz @wiz_io]

🚨 BREAKING: History written with just 9 lines of code!

We've discovered #PyLoose, the FIRST documented Python-based fileless attack targeting cloud workloads.

See the power of 9 lines of Python code below 👇🏽

[Florian Roth ⚡️ @cyb3rops]

Elevate your cmd.exe to LOCAL_SYSTEM?

\\https://t.co/nfsz2BNI7z\tools\PsExec.exe -s -c cmd.exe

Have you ever seen this being used by an adversary? I haven't but I like it.

[pancak3 @pancak3lullz]

@uuallan @serghei

[Cyber_OSINT @Cyber_O51NT]

Hunting the #LockBit Gang's Exfiltration Infrastructures https://t.co/SQ29Jlfis3

[Microsoft Threat Intelligence @MsftSecIntel]

A phishing campaign tries to evade detection by dividing its attachment into code segments and encoding them using various mechanisms. It’s like a jigsaw puzzle that only reveals its malicious intent once all pieces are combined and decoded. Details: https://t.co/2vasaZFCEM

[Jean @Jean_Maes_1994]

ever wanted to fake sign a binary, but didn't want to install additional dependencies?

well now you can using my super 1337 automation
https://t.co/hKN6YXT8Eo

this tool was very hard to create, I swear!
I may or may not have been inspired by Conti.

[marc ochsenmeier @ochsenmeier]

#Malware Reverse Engineering Handbook - by @ccdcoe
https://t.co/jNihrzYB0W

[Today In Infosec @todayininfosec]

2009: The Metasploit Project announced that it had been acquired by Rapid7.

[Jake Williams @MalwareJake]

SOC watching the attacker in the SIEM, notifies IR team, and then watches the attacker steal NTDS.DIT in real time...

[nixCraft 🐧 @nixcraft]

When you finally find out randomness isn't random https://t.co/VdbcAXd898

[spotheplanet @spotheplanet]

Reminder to self: if you cannot elevate WindowsTerminal from an account with admin rights, run it from within SYSTEM context

[Today In Infosec @todayininfosec]

1995: Mudge published "How to Write Buffer Overflows", one of the first papers about buffer overflow exploitation. Then @dotMudge sent a copy to @aleph_one, who wrote "Smashing the Stack For Fun and Profit" in 1996. Seminal paper to seminal paper. Mudge's: https://t.co/hNL6ThYVgo

[mRr3b00t @UK_Daniel_Card]

ROFL old but gold

[Florian Hansemann @CyberWarship]

A Red Teamer's guide to pivoting

#infosec #pentest #redteam
https://t.co/qYlj4tyEgv

[Vincent Le Toux (Paris, France) @mysmartlogon]

Magic #2:
How the hacker can shutdown your 🪄🪄 next gen/IA Active Directory monitoring when your AD has been compromised in one command ?
Just by putting the IP of the platform in lDAPIPDenyList for an immediate shutdown.
Fun part: it replicates 🤣

[STÖK ✌️ @stokfredrik]

No problem BurpSuitePro 😂