Netsec

I choose to live in shadows 🥷🏻

[Netsec @netsec_bandit]

@interesting_aIl I have updated Whatsapp but I can't see the feature

[Netsec @netsec_bandit]

Just pwned DACL Attacks II. Active Directory misconfigurations don't stand a chance anymore. 🔥

#PenetrationTesting #ActiveDirectory #DACL #RedTeam #Cybersecurity #OffensiveSecurity

[Netsec @netsec_bandit]

Nimbus is down. Pwned the seasonal machine on HackTheBox today, cloud box with a humbling recon phase, but root felt satisfying once it clicked. 1105 XP and a few new tricks heading into the next one.

#HackTheBox #PenTesting #CTF #InfoSec #EthicalHacking

[Netsec @netsec_bandit]

@TanmayLP7 @hackthebox_eu The module is worth it.

[Netsec @netsec_bandit]

Just wrapped the OSINT: Corporate Recon module on @hackthebox_eu and honestly, recon is one of those skills that never gets old to sharpen. The deeper you go on passive intel gathering, the more you realize how much is sitting out there in plain sight.
#OSINT #HackTheBox

[Netsec @netsec_bandit]

Wrapped up the Advanced XSS and CSRF Exploitation module on HTB

XSS chaining into CSRF bypasses is the kind of stuff that makes you rethink how much you trust "secure" web apps. Really solid hands-on content from vautia.

#PenetrationTesting #WebSecurity #XSS #CSRF #HackTheBox

[Netsec @netsec_bandit]

AI Attack Series came to end for now from understanding membership inference to querying a live black-box API and measuring what leaked.

Access here ⬇️

https://t.co/fQ3CUhPUIF

#MachineLearning #AIRedTeaming #MembershipInference #ShadowModelAttack #MLSecurity #PrivacyAttack

[Netsec @netsec_bandit]

Built a single-file SQLi practice lab covering INSERT, UPDATE, and DELETE injection — 9 labs, no server, opens in a browser. Enjoy them
https://t.co/HpHPSnyXCL

[Netsec @netsec_bandit]

Finished the AI Evasion - Foundations module on HTB Academy today. Solid introduction to how AI-based defenses can be bypassed — genuinely useful for anyone doing red team work where ML detection is in the mix.

[Netsec @netsec_bandit]

Wrapped up the Attacking AI — Application and System module on HTB Academy. 9/9 exercises, Medium difficulty — solid coverage of how AI systems actually break under attack.

The blogs are already live if you want to go deeper. ⬇️
https://t.co/BOwCG3CiXj

#HTBAcademy #AIRedTeam

[Netsec @netsec_bandit]

Continuing the AI attack series — this one breaks down how AI systems actually get compromised at both the application and system layer. Less theory, more attack surface.

https://t.co/BOwCG3CiXj

#AIRedTeam #OffensiveSecurity #PenetrationTesting #AISecurity #MachineLearning

[Netsec @netsec_bandit]

Finished the AI Data Attacks module on HTB Academy, 6/6 exercises. Clean label attacks, trojans, feature poisoning. The kind of material that changes how you think about trusting a model, not just breaking one.

#HackTheBox #HTBAcademy #AdversarialML #AIRedTeaming #ML

[Netsec @netsec_bandit]

Finished the HTB Academy LLM Output Attacks module — 15/15, and every exercise a solid reminder that what the model generates is just as dangerous as what you put in. Output is untrusted data. Treat it that way.
#LLMSecurity #AIRedTeaming #HackTheBox #OutputAttacks #COAE

[Netsec @netsec_bandit]

Started documenting my AI attack research — the first series covers Prompt Injection Attacks, breaking down both direct and indirect injection with real techniques, payloads, and the reasoning behind why they work.
https://t.co/fQ3CUhPUIF
#AIRedTeaming #PromptInjection

[Netsec @netsec_bandit]

Wrapped up the HTB Academy Prompt Injection Attacks module 15/15 exercises, and every one of them a good reminder that the most dangerous input field in an AI app is the chat box itself.
#PromptInjection #AIRedTeaming #HackTheBox #OffensiveAI #PenetrationTesting #AIHacking #COAE

[Netsec @netsec_bandit]

Just completed Introduction to Red Teaming AI on HTB Academy learned how to identify and exploit vulnerabilities in ML systems, including model backdoors and adversarial attacks. Excited to apply these red teaming skills to strengthen AI security!
#HTBAcademy #RedTeaming #AISec

[Netsec @netsec_bandit]

Finished HTB Academy's Applications of AI in InfoSec module today — 5/5 exercises, all done. AI in security is moving fast and knowing how it's being used on both sides of the wire feels less optional every day.
#CyberSecurity #AIinSecurity #HackTheBox #HTBacademy #InfoSec #ML

[Netsec @netsec_bandit]

Just finished HTB's Klendathu Pro Lab — 10 hours of Active Directory chaos, Kerberos abuse, and privilege escalation. If you want to actually understand AD attacks, this is the one.

[Netsec @netsec_bandit]

Rooted SteamCloud on HTB — kubelet API was open, grabbed a service account token from inside a pod, and used it to own the cluster. Kubernetes misconfigs hit different when you're actually inside one.
https://t.co/LITWJLrvWQ
#HackTheBox #HTB #CyberSecurity #InfoSec #PenTesting

[Veloria 🌊 @veloriahq]

“𝘛𝘩𝘦 𝘮𝘰𝘴𝘵 𝘥𝘢𝘯𝘨𝘦𝘳𝘰𝘶𝘴 𝘧𝘰𝘳𝘮 𝘰𝘧 𝘣𝘭𝘪𝘯𝘥𝘯𝘦𝘴𝘴 𝘪𝘴 𝘣𝘦𝘭𝘪𝘦𝘷𝘪𝘯𝘨 𝘺𝘰𝘶𝘳 𝘱𝘦𝘳𝘴𝘱𝘦𝘤𝘵𝘪𝘷𝘦 𝘪𝘴 𝘵𝘩𝘦 𝘰𝘯𝘭𝘺 𝘳𝘦𝘢𝘭𝘪𝘵𝘺.”

— 𝘍𝘳𝘪𝘦𝘥𝘳𝘪𝘤𝘩 𝘕𝘪𝘦𝘵𝘻𝘴𝘤𝘩𝘦