kinako

Redteam Operator@🇯🇵 / OSEE, OSCE3

[kinako @kinako_software]

I've worked on countless engagements with @TEMP43487580 .

In this talk, I’m excited to share some techniques we uncovered through those tests😆

[%TEMP% @TEMP43487580]

very excited to speak at @x33fcon this year with @kinako_software !

We will talk about some of our EDR bypass techniques for both red teams and blue teams.

Hope to see you there!

[kinako @kinako_software]

@wetw0rk7 Thank you wetw0rk!!
I learned a lot from reading your article on kernel exploits😂

[kinako @kinako_software]

OSEE合格しました〜!!

4年前にWindowsを本格的に触り始めた頃は、まさかkernel exploitまで手を出すことになるとは思っていませんでした笑

資格は一区切りとして、今後も色々なことに挑戦して実績を積んでいきます😎

[Sprocket Security @SprocketSec]

Tenant enumeration is dead.

Microsoft has now patched both techniques that allowed full tenant domain discovery from a single unauthenticated request.

That changes recon against M365 environments significantly.

The signals still exist, tenant IDs, MOERA prefixes, brand metadata, but no single query gives you the full picture anymore. Effective enumeration now means chaining techniques together, validating against large datasets, and in some cases requiring authentication.

Juan Pablo Gomes Postigo breaks down:
• what the original technique was
• what still works today
• how we updated https://t.co/odd5t8dr5G going forward

https://t.co/NjDIibtx4V

#CyberSecurity #Pentesting #IdentitySecurity #SecurityResearch

[Abdul Mhanni @abdo_mhanni]

Wrote a blogpost about how you can use the Windows server 2003 source code as a red teamer to make your tools look less like tools.

I also go over and map out the main/important files and practical examples of using it to augment MS-*/RFC specs: https://t.co/HfUYBAdCJJ

[kinako @kinako_software]

大きいイベン��乗り越えたけど、1ヶ月後にまたでかいのがあるので暫くは働き詰めかな…
それも終わったら流石に高い寿司か焼肉に行きたい👼

[Tinydile @Tinydile]

[Slides/資料公開] 本日のBSides Tokyo 2026での講演資料です。

TLPT2.0の提案 －「敵を知る」と「自分を知る」の分離
(A Proposal for TLPT 2.0: Decoupling "Knowing the Enemy" from "Knowing Yourself")

https://t.co/KddOdQOrcd

#BSidesTokyo #TLPT #レッドチーム #RedTeam

[kinako @kinako_software]

落ちてもまた受ければいいの精神でいざ参る。

[kinako @kinako_software]

yo adversaries, plz don't use techniques I'm planning to publish in the next conference…😂

[kinako @kinako_software]

交渉人真下正義、Netflixで見れるんだ
この映画に出てくる弾丸ライナーってハッカー好き
小学生の自分がPCに目覚めたのは間違いなくこの映画のおかげ

[kinako @kinako_software]

マジかー
今日試験の日だったけどOffSecの都合で���期になってもうた
GW以外で受けられる日程なんてない...

[kinako @kinako_software]

this stuff is really awesome👍

[Abdul Mhanni @abdo_mhanni]

@Octoberfest73 I remember you once posted a quirk of impacket that could be used as an ioc so I thought you’d like this list of 50+ impacket IOCs😄 https://t.co/Xvro8ggumy

[kinako @kinako_software]

試験やらカンファレンスの準備やらで忙しすぎて職場が今日休みなの知らなかった…

[kinako @kinako_software]

試験の息抜きとしてBOFの基礎を学び直した
何もかも忘れまくっている...笑笑🤮

[Co11ateral @co11ateral]

UnderlayCopy_bof

BOF for Havoc that copies locked Windows files (SAM, SYSTEM, NTDS.dit) via raw MFT parsing. No VSS, no Registry APIs, no PowerShell

https://t.co/n5Dx0RZAik

#blueteam #redteam #dfir

[kinako @kinako_software]

I’ve been seeing the technique I discovered a while ago getting used in the wild a lot more lately… definitely a weird feeling😅

[堀田_保田 @so__hotter]

ガソリン値上げの件、嫁に話しました。
嫁なんていない。
途端に泣き崩れる俺。

[Insomni'hack @1ns0mn1h4ck]

At #Insomnihack, Yuya's talk dives into how attackers pivot from a compromised endpoint to extract credential material even with Credential Guard enabled.

Register now and don't miss it: https://t.co/f2QnvfAhec

#INSO26 #Cybersecurity #InfoSec

[kinako @kinako_software]

Today was my last day at my current job~😃
I’ll be starting at a new workplace next week, and honestly I’m a bit nervous…🤢

[kinako @kinako_software]

😂

[Wise @trikcode]

99% of vibe coded websites look like this