Paweł Chramiec

Security Purple Teamer | Main Intrested area: Threat Hunting, Threat Intelligence, Cloud Security, Azure DevOps, Data Science

[Florian Roth ⚡️ @cyb3rops]

Strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities

https://t.co/jKyfMDUAmJ

by @strix_ai

[Toffy @toffyrak]

GPOHound v1.1.0 is out! 🎉

This release adds the "sysvol", "ldap", and "parse" modules, along with several bug fixes and improvements.

For more details: https://t.co/BbLSzdinWG

[0xor0ne @0xor0ne]

VulHunt: Vulnerability detection framework by @binarly_io

https://t.co/7IIlQMAgA5

Blog post series:

https://t.co/UzipgZw8la
https://t.co/F6E4OyqRAy
https://t.co/YG4tPvcDDt
https://t.co/24WivmtGZs
https://t.co/aGYL9HFo4B

#infosec

[v1n @0xv1nx0]

Dropping new LOLBin/LOLBAS inspired project today called LOLGlobs, to document some cool ways of commandline evasion using wildcards and some other obfuscation techniques that go beyond B64 encoding: https://t.co/weesvN45Vd

[0xor0ne @0xor0ne]

Comprehensive 5-part series on Windows Inter-Process Communicatio by @haider_kabibo

Part 1: https://t.co/w5Bi5vNr6j
Part 2: https://t.co/sFc5nBcBZT
Part 3: https://t.co/3PG0NIhbOb
Part 4: https://t.co/Qo4aFLyTS1
Part 5: https://t.co/sJqo6586xN

#Windows #infosec

[Clandestine @akaclandestine]

GitHub - Bert-JanP/Open-Source-Threat-Intel-Feeds: This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash. https://t.co/dpK723i27o

[0xor0ne @0xor0ne]

Short beginners introduction to virtual memory

https://t.co/5iLGWc2NcE

#cybersecurity

[Harshleen @0xharshleen]

📌Active Directory (AD) Penetration Testing Guide
https://t.co/RbU8TH2rFh

[AISecHub @AISecHub]

26 Awesome AI Security Lists

1��⃣ https://t.co/nTByF9uYT2
2️⃣ https://t.co/4J0yroEJzA
3️⃣ https://t.co/bBZLJ4Skzh
4️⃣ https://t.co/7gdjyf21zg
5️⃣ https://t.co/ouL4FxklLR
6️⃣ https://t.co/ufu9yXb54b
7️⃣ https://t.co/geZiPFb0W3
8️⃣ https://t.co/NRMrNCLR1U
9️⃣ https://t.co/Sjed8CzC7K
🔟 https://t.co/DPqFH7ndwL
1️⃣1️⃣ https://t.co/ezyqxfbNkp
1️⃣2️⃣ https://t.co/SzzdzQC2WM
1️⃣3️⃣ https://t.co/sli9mnoNVB
1️⃣4️⃣ https://t.co/HrxCEP0SEK
1️⃣5️⃣ https://t.co/wUFNNWiU7t
1️⃣6️⃣ https://t.co/ZmOoRwWtF6
1️⃣7️⃣ https://t.co/MktynuVx3u
1️⃣8️⃣ https://t.co/u3PUq0hI5w
1️⃣9️⃣ https://t.co/Gy9la1jXVi
2️⃣0️⃣ https://t.co/ECE2ULyNs4
2️⃣1️⃣ https://t.co/IPX40qxhYV
2️⃣2️⃣ https://t.co/BN6faICpxB
2️⃣3️⃣ https://t.co/2fZI6eRkAI
2️⃣4️⃣ https://t.co/HagQchw2Jy
2️⃣5️⃣ https://t.co/eEgSg7gIuc
2️⃣6️⃣ https://t.co/V0oyeQKs8k

#AISecurity #LLMSecurity #MLSecOps #GenAISecurity #PromptInjection #JailbreakDefense #DataPoisoning #BackdoorAttacks #ModelWatermarking #AIProvenance #RAGSecurity #SupplyChainRisk #AgentSecurity #AIGovernance #AICompliance #RedTeamAI #AdversarialML #ModelRisk #PrivacyAttacks #SafeAI

[Basketo @itsBaslel]

might help if you're learning C.
Project Based tutorials.

github link in comment section.

[0xor0ne @0xor0ne]

Achieving arbitrary read/write through Windows kernel pool manipulation

https://t.co/rD57ixtvk3

Credits @r0keb

#infosec #Windows

[Decabyte @decabyte_info]

OSINT-Advanced Searching

Repo link: https://t.co/I0O1RbNWXv

𝘽𝙤𝙤𝙠 𝙮𝙤𝙪𝙧 𝘿𝙚𝙢𝙤: https://t.co/jfUBkJu0mZ
📙 LinkedIn:https://t.co/OCvfqQfkkQ
📱 Join WhatsApp: https://t.co/deP1i8kCrK
▶ YT: https://t.co/Aojnl9B2aU
🌐 Insta: https://t.co/YClPcyIE1F

[Decabyte @decabyte_info]

Some Usefull Ebooks Pack

𝘽𝙤𝙤𝙠 𝙮𝙤𝙪𝙧 𝘿𝙚𝙢𝙤: https://t.co/2WYr2sn6sN

AWS:-
https://t.co/5EdHqPasGG

AZURE
https://t.co/B2ZEjZbLhE

CCDA
https://t.co/7Q1kWfHjdd

CCNA SECURITY
https://t.co/7SlgS7jdmj

CEH
https://t.co/geIKOpo2zn

CISA
https://t.co/uFMetdQcnd

[Steven Lim @0x534c]

🚨 CVE-2025-8088: WinRAR Zero-Day Used to Deploy RomCom Backdoors

ESET has identified spearphishing campaigns leveraging malicious RAR attachments to exploit CVE-2025-8088—a WinRAR zero-day vulnerability. This technique delivers RomCom backdoors, attributed to threat actor Storm-0978 (aka Tropical Scorpius / UNC2596).

https://t.co/daMXLc64nn

To support fellow Defenders, I’ve crafted a KQL detection to surface indicators of this exploitation. It’s designed to help identify Storm-0978 activity until your infrastructure team rolls out the necessary patch.

https://t.co/8Pyya29H0L

#Cybersecurity #WinRaRZeroDay #Storm0978

[Tomer Nahum @TomerNahum1]

Today, together with Jonathan Elkabas, we're releasing EntraGoat - A Deliberately Vulnerable Entra ID Environment.

Your own hands-on Entra lab for identity attack simulation.

Built for red teams, blue teams and identity nerds.

Check it out here👉https://t.co/5qlXQiSYHS

[Speaker 25 @rodtrent]

Determine Onboarding Methods in Defender for Endpoint - Part 1 https://t.co/L7EwMNf8yq

#MicrosoftDefender #DefenderforCloud #Security #MicrosoftSecurity #Cybersecurity #DefenderXDR #MicrosoftThreatIntelligence

[Muqsit 𝕏 @mqst_]

🔬 CI/CD Security: CI/CD Pentesting Cheat Sheet & Practice Guide

Guide: https://t.co/79ROaknx8Q
Cheatsheet: https://t.co/Nd6CiDo3OD
Practice: https://t.co/CPrWXhDRUV

#infosec

[sysxplore @sysxplore]

Public Key Cryptography

[DirectoryRanger @DirectoryRanger]

Active Directory Hardening Series
Part 1 Disabling NTLMv1 https://t.co/9gla1vtQ18
Part 2 Removing SMBv1 https://t.co/KOqpamarcW
Part 3 Enforcing LDAP Signing https://t.co/oW2Ymvu1ZW
Part 4 Enforcing AES for Kerberos https://t.co/iENjEPBOFD

[0xor0ne @0xor0ne]

Linux kernel rootkits: beginners introduction

https://t.co/beNoXn1WHv

#Linux #infosec