shyam ganesh

Cybersecurity Analyst | Offsec

[offensivecon @offensive_con]

Offensivecon's talks are now available on our YouTube channel!

🔗 https://t.co/cBmHPsj7qV

[Oliver Prompts @oliviscusAI]

Someone open-sourced an Android emulator that runs in Docker.

It's called docker-android. One docker command spins up a complete Android device with ADB port-forwarding, KVM, and GPU acceleration.. fully headless and CI-ready.

100% Open Source.

[chiefofautism @chiefofautism]

someone at ANTHROPIC just showed CLAUDE finding ZERO DAY vulnerabilities in a live conference demo

claude has found zero day in Ghost, 50,000 stars on github, never had a critical security vulnerability in its entire, history...

it found the blind SQL injection in 90 minutes, stole the admin api key, then did the exact, same thing to the linux kernel

[Panos Gkatziroulis 🦄 @ipurple]

redStack: Boot-to-Breach red team lab on AWS. Mythic, Sliver, and Havoc C2 behind a production-style Apache redirector. Deployed via Terraform https://t.co/d8G5J8wwAf #redteam

[Nicolas Krassas @Dinosn]

Agentic Reverse Engineering + Binary Analysis with Kong https://t.co/LnNchExtHA

[SEKTOR7 Institute @SEKTOR7net]

Turning EDR against it.

A journey through EDR features that could be used in bypassing its security. Good lessons for both offense and defense.

A post by Shmuel Cohen (@_BinWalker_)

Source: https://t.co/2ixdasmVCV

#redteam #blueteam #maldev #malwaredevelopment

[Synacktiv @Synacktiv]

At #Pwn2Own Berlin 2025, a full exploit chain against VMware Workstation was demonstrated via a heap overflow in the PVSCSI controller.
Despite Windows 11 LFH mitigations, advanced heap shaping and side-channel techniques enabled a reliable exploit.

🔍 Full technical write-up 👇
https://t.co/R0E5Uqql1E

[Florian Hansemann @CyberWarship]

''GitHub - mertdas/PrivKit: PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.''

#infosec #pentest #redteam #blueteam
https://t.co/QbAawZyRaG

[GitHub Projects Community @GithubProjects]

Tower defense game that teaches cloud architecture. Build infrastructure, survive traffic, learn scaling.

[Zero-Point Security @_ZeroPointSec]

Not a drill, I repeat, this is not a drill.
https://t.co/6TPpGcmLTi

[Smukx.E @5mukx]

Whose grinding at 3 AM ?

[🕳 @sekurlsa_pw]

Why doesn’t pretender from @RedTeamPT get more love? It’s excellent for relaying.

[Tom Dörr @tom_doerr]

tunnel any traffic over websockets to bypass firewalls and proxies

[Tim MalcomVetter @malcomvetter]

Hmmm... @Crowdstrike built a C2. 😈

[Rad @rad9800]

https://t.co/ce7f8sTNQj

[🪷 @Danthidurga]

@IndianTechGuide Means Working hours like China
Taxes like UK
Services like Nigeria

[Smukx.E @5mukx]

I definitely suggest you guys to read these 2 books for malware development !!

If you want to understand more about EDR's their approaches and how they works. The first book is an golden one.

#malware #EDRs #Agents #redteam

[Sergey Bobrov @Black2Fan]

I have published a tool based on jadx that helps analyze Java applications.

https://t.co/jVTKEM9fIc

BFScan generates HTTP requests and OpenAPI specs based on config files and class/method annotations.
It also searches strings that look like URIs, paths, or secrets.

[mpgn @mpgn_x64]

imo way to complicated to extract the ntds, once you got a user with backup privilege group just do:

1⃣ nxc smb dc -u user -p pass -M backup_operator

🏆

[PyQuant News 🐍 @pyquantnews]

I'm 43.

If you're still in your 20s or 30s, read this: