Rahul Vashisht

Team Red
Security Researcher
CRTO

[Di @DI0256]

Speed up your Active Directory pentesting with ADScan and ADPulse

https://t.co/LlXFuc6ZId
@three_cube @_aircorridor @co11ateral

[DirectoryRanger @DirectoryRanger]

BitlockMove. Lateral Movement via Bitlocker DCOM & COM Hijacking, by @ShitSecure
https://t.co/e8hoFAqNQw

[Sai Phaneendra @phanii09]

I trained a 3.5M param LLM from scratch that only knows how to be a cat 😹.
Check it here: https://t.co/yqBsZDg1FD

[Ohm-I (Oh My) @mcohmi]

Cirro, a new attack path tool, is open source now. Go look at it. 😁

Cirro: https://t.co/5kEvgxp25p
CirroDash: https://t.co/Dxbghl4bCz
Cirro Azure CLI extension: https://t.co/UUe3grZhEC

[tetsuo @tetsuoai]

https://t.co/dvDcR5aa8R

[Co11ateral @co11ateral]

GodPotatoBOF

Cobalt Strike BOF used to perform privilege escalation by exploiting the SeImpersonate privilege. OPSEC safe alternative to the .NET version. Based on the original GodPotato

https://t.co/0yQ3hUKj8V

#pentesting #redteam

[DirectoryRanger @DirectoryRanger]

ADeleginator. tool to find insecure trustee and resource delegations in Active Directory, by @techspence
https://t.co/TD4w3nsP3f

[Anıl @ccelikanil]

🚀 New project drop — DFMI: Fileless Execution via MSI Installers

https://t.co/gHw9mmMlFm

[Shruti Codes @Shruti_0810]

🚨This just killed the voice AI business model.

ElevenLabs charges up to $1,320/month.

An open-source model just beat it.

Meet VoxCPM2:

Clone any voice
From seconds of audio
In 30 languages
At studio quality

For $0.

No API.
No subscription.
Runs locally.

Even crazier:

It can invent voices from text
“Soft, calm female voice” → generated instantly

And benchmarks?

VoxCPM2: 85% similarity
ElevenLabs: 61%

Let that sink in.

A free model
just outperformed
a $1,300/month product.

Voice actors.
Studios.
SaaS platforms.

Everything just changed.

Repo https://t.co/syeAxOea8C

[Tom Dörr @tom_doerr]

Adaptive web scraping framework with anti-bot bypass

https://t.co/8TwtJeRuue

[Anastasis Vasileiadis @Anastasis_King]

🟥𝗟𝗟𝗠 𝗥𝗲𝗱 𝗧𝗲𝗮𝗺𝗶𝗻𝗴 𝗥𝗲𝘀𝗼𝘂𝗿𝗰𝗲𝘀

🔗 Red Teaming LLM Applications by DeepLearning :-
https://t.co/vxFaGaQUnJ

🔗Planning red teaming for LLMs by Microsoft :-
https://t.co/pMKTpSVrUZ

🔗Red teaming LLMs by HuggingFace :-
https://t.co/liz7MQBWic

🔗LLM Red Teaming by KLU :-
https://t.co/kje9hPRXph

🔗Red Teaming LLMs Nihad Hassan :-
https://t.co/r9EfNsalfJ

🔗Red-Teaming to make LLMs robust and safer :-
https://t.co/0mBq716Cfm

🔖#infosec #cybersecurity #hacking #pentesting #security

[Sai Phaneendra @phanii09]

I built tidbit: a CLI that turns any URL, PDF, EPUB, screenshot, or clipboard content into a structured Markdown note (and a JSONL training dataset) using your LLM of choice.
Schema-driven. MCP-enabled. MIT. Python.
https://t.co/US6w5DUqON

[Adam Chester 🏴‍☠️ @_xpn_]

Fuck me, no point going into work on Monday then!

[DirectoryRanger @DirectoryRanger]

MSSqlPwner. advanced and versatile pentesting tool designed to seamlessly interact with MSSQL servers
https://t.co/2ejB2Yv2XN

[drm @lowercase_drm]

Based on prior research by @Jonas_B_K, @harmj0y, @PyroTek3, @_dirkjan, @gentilkiwi and prior work from @SAERXCIT and many impacket contributors!

[eversinc33 🤍🔪⋆｡˚ ⋆ @eversinc33]

@s4dbrd @hasherezade Very cool work! Regarding 2., I used https://t.co/2zEaigtl7n in the past to quickly trace virtualized drivers

[Nicolas Krassas @Dinosn]

[Tool Release] DLLHijackHunter - Automated DLL hijacking detection with canary confirmation https://t.co/uxbNoPpmiZ

[N7WEra @N7WEra]

Neglected my BofAllTheThings repo (https://t.co/L5DDGyqjAD), just added Adrenaline (@atomiczsec) , Extension-Kit (@hacker_ralf) and Awesome-BOF site (@chryzsh ) https://t.co/HS4ZOraCso

[Stan Hegt @StanHacked]

I will be at @GISECGlobal in Dubai on April 23rd+24th to represent @OutflankNL and our parent company @fortraofficial.

If you want a private demo of our toolkit for red teams Outflank Security Tooling (OST) and Cobalt Strike then drop me a line or visit our booth at Hall 6/C75.

[Clandestine @akaclandestine]

GitHub - PurpleAILAB/Decepticon: Autonomous Multi-Agent Based Red Team Testing Service / AI hacker https://t.co/61M5bCjGcm