Prashant Mahajan

InfoSec Professional | Trainer | Developer | ADRecon | AzureADRecon | Payatu Australia | OzHack

[Panos Gkatziroulis 🦄 @ipurple]

PositiveIntent - Evasive loader for .NET Framework assemblies https://t.co/kdzAjEpBVF #redteam

[c0c0n2026 @_c0c0n_]

c0c0n Training Announcement

Applied Infrastructure Security Assessment – 3 Day Intensive Workshop

Step into the world of real-world enterprise attacks with this hands-on, deep-dive training designed for security professionals who want to go beyond theory and into action.

What to Expect:
▪️ End-to-end attack lifecycle: from reconnaissance to full compromise
▪️ Internal pivoting & Active Directory exploitation
▪️ Bypassing layered defenses in hardened environments
▪️ Developing and adapting real-world exploits
▪️ Leveraging AI in modern penetration testing
▪️ Immersive, realistic lab environment

Outcome:
▪️ Walk away with practical skills, real attack experience, and the confidence to assess complex enterprise infrastructures.

Trainers:
▪️ @gehaxelt – Technical University of Berlin, Germany
▪️ @prashant3535 – Payatu Australia Pty Ltd, Australia

Limited seats. High impact. Real skills.

For more information, visit - https://t.co/ZsojyVAKdQ

[abhisek @abh1sek]

Dependency cool-down enforcement is coming in PMG. npm first. Then pypi. Coupled with sandbox, it should reasonably protect developers (including us) against current day supply chain attacks.

[Sébastien Dubois @dSebastien]

"Why take notes?"

Not to collect. To think.

Note-taking frees your mind in the moment and gives you building blocks for the future. Capture ideas like LEGO bricks: small, atomic, reusable, composable.

[mdowd @mdowd]

Brief announcement: Launching https://t.co/rdOFloFalz later this year in Sydney — a new conference focused on offensive and defensive security research using AI, and on how AI is reshaping the field. Sister conference to Unprompted. Follow @UnpromptedAU for updates.

[Silky @S1lky_1337]

Releasing KslKatz. Combining KslDump and GhostKatz to dump LSASS using no-fix KslD.sys memory read to bypass PPL. Extracts MSV1_0 NT hashes and WDigest cleartext passwords (if enabled) from LSASS using a Microsoft-signed driver.
https://t.co/MT9bJofzYk

[Prashant Mahajan @prashant3535]

Thanks @ANZ_AU for reporting a fraudulent transaction and completely freezing all my accounts. The message is clear that you can’t rely on anyone

[NULLCON @nullcon]

🔮 What does the future of cybersecurity look like? That's the question at the heart of #NullconGoa2026 CFP.

If your work pushes boundaries, challenges the present, and dares to predict what's next, we want your voice on our stage.

👉https://t.co/ovC2vyqTZZ

#CFP #cybersecurity

[Aurélien Chalot @Defte_]

Dumping LSASS is old school. If an admin is connected on a server you are local admin on, just create a scheduled task asking for a certificate on his behalf, get the cert, get its privs. All automatized in the schtask_as module for NetExec 🥳🥳🥳

[Panos Gkatziroulis 🦄 @ipurple]

AWSDoor: Persistence on AWS https://t.co/1a3YghoglN

[CrikeyCon @CrikeyCon]

For those of you who couldn't make it in person today, join us online at https://t.co/MX9ENdKBp4

[OzHack @oz_hack]

Cybersecurity enthusiasts in AU & NZ, prepare to be electrified! OzHack is now an official reseller of @electronicats

New Arrivals - Faulty Cat & CatSniffer

Best-selling gear is back in stock - Flipper Zero Add-Ons - Modbus, Magspoof & CANBus

https://t.co/inTkdBI7Md

[Pavel Yosifovich @zodiacon]

My initial take on eBPF for Windows:
https://t.co/tBeHxBHi0C

[Gynvael Coldwind @gynvael]

I've written a short (well, not really short) article about validation vs sanitization vs escaping vs encoding vs filtering when it comes to handling untrusted input.
https://t.co/8XshIks6xZ
There's some confusion around it and it's important to get this right in application sec

[NULLCON @nullcon]

Advanced Infrastructure Security Assessment might seem challenging, but don’t worry—we have @prashant3535 at #NullconGoa2025 making it all easier to grasp! 😎

Know More: https://t.co/VNGBcQvgkT

#infrastructure #security

[OzHack @oz_hack]

We're thrilled to announce that we now have https://t.co/4RqubmVnHM stock available! 🚀

https://t.co/4RqubmVnHM Adapter, Cable, Malicious Cable Detector, Plug,  Programmer & UnBlocker.

https://t.co/gQp07ZKVip

#OzHack #GetYourHackOn #OMGTools

[Prashant Mahajan @prashant3535]

Humble Bundle: Hacking 2024 by no starch press

https://t.co/8z2po8yOFi

[Neelu Tripathy @NeeluTripathy]

We just released a fun, rapid-fire with @prashant3535 , Director of Payatu Australia & OzHack, where we explored everything from Community friendships to his #wardriving days..
and
not to miss, the story behind - 'Corrupt'
Catch this lighthearted side of Prashant.
Check it out Now!
https://t.co/SfILEQR4A6

[Neelu Tripathy @NeeluTripathy]

So, what does it take to get Domain Admin? 🕹️
I sat down with @prashant3535 , Director at Payatu Australia & OzHack, in the latest episode of #BreakpointSecurity to dive into this.
📺 Watch Full Episode Now!
YouTube: https://t.co/qeuHicgUbV
Apple: https://t.co/1Zg546XK3H
Spotify: https://t.co/TVev9CpK88
Buzzsprout: https://t.co/IIrVniOadS

From initial entry points to advanced #evasion and stealth, he shares what it’s like to Get Domain Admin in a real network.

🔒 How "Castle" infrastructure designs can be breached
🔒 Advanced #EDR & #XDR evasion
🔒 The Defender’s Dilemma—top controls
🔒 Cloud infra testing & zero-day risks
If you're in #cybersecurity, don’t miss it!
If you like the episode, please subscribe and share :)

[Neelu Tripathy @NeeluTripathy]

Our next episode, is an exciting chat with @prashant3535 on IT infrastructure #Hacking . #Exploit techniques and Getting Domain Admin. In short- whatever can go wrong in your network.. #cybersecurity

Checkout the teaser Now!
https://t.co/b9qMcGi4nU