Andreas 💻

Information Security Ninja at @SpiderLabs / Breaking things 4 Fun & Profit / I know that I know nothing about InfoSec 💻 🦔 📚 / $ sudo follow_me

[Andreas 💻 @superhedgy]

AttackSurfaceMapper - Automate and Simplify the OSINT Process #attacksurfacemapper #BlackHat https://t.co/sVyJAUNmSn

[Andreas 💻 @superhedgy]

@DemPapadakis @OMichaelides 😎

[CloudBreach @Cloud_Breach]

If you're tired of endless slide decks and want to execute actual Azure and AWS attack paths, come break some things in our labs.

To celebrate the launch, we're running a 25% discount on all #CloudBreach courses and certs (OASP, OASE, and OAWSP) until May 23, 2026.

🎟️Just use the code CB25OFF at checkout.

Take a look around the new platform and let me know what you think ! 👇
🔗 https://t.co/9o0T8nhjyF

#CloudSecurity #AWSSecurity #AzureSecurity #OffensiveSecurity #RedTeam

[CloudBreach @Cloud_Breach]

🐣 EASTER GIVEAWAY 🎁
Forget the chocolate, we’re hunting vulnerabilities! 🐰

We’re giving 3 winners free access to their choice of:
☁️ Breaching Azure (OASP)
🌩️ Breaching Azure Advanced (OASE)
☁️ Breaching AWS (OAWSP)

To Enter:
1️⃣ Like
2️⃣ Retweet
3️⃣ Comment

📅 Ends: 13 April 2026

Train like an attacker. Stop the breach. 👉 https://t.co/BgRrolAJMI

#CloudSecurity #EasterGiveaway #InfoSec #Azure #AWS #RedTeam #CyberSecurity #Hacking #Giveaway #BlueTeam #RedTeam

[CloudBreach @Cloud_Breach]

🛠️🚨 Bypassing Browser Security!
DumpBrowserSecrets extracts session cookies & MFA tokens 🍪

Features:
💥 Bypasses App-Bound crypto
🥷 Evades EDR via process spoofing
📦 Encrypted offline exfilration

> DumpBrowserSecrets.exe /b:all /spoof

🔗 Git: https://t.co/O1SyLUfiYK

#CloudBreach #RedTeam #InfoSec #SOC #EDR #AppSec #DFIR #CyberSecurity #CloudBreach #ThreatIntel #MalwareDevelopment #CredentialHarvesting #SessionHijacking #PenetrationTesting #BlueTeam #OffensiveSecurity #CyberAttack #CyberSec #CloudSec

[Andreas 💻 @superhedgy]

@letymbiotis The text messages are awfully long. They should be short and sweet. Simple and effective instructions.

[Andreas 💻 @superhedgy]

@cyprusmail These text messages are awfully long

[CloudBreach @Cloud_Breach]

🌩️Azure Tenant Enumeration 👇
Unauthenticated Cheatsheet 2026

Microsoft patched the classics, but recon isn't dead. Here are 4 methods to map tenants without creds:

1️⃣ Sprocket API: https://t.co/ZxRqEZi1sE ("the new way")
2️⃣ OpenID Config: Grep token_endpoint for the GUID 3️⃣ User Realm: Check NameSpaceType status
4️⃣ Passive DNS: Check enterpriseregistration CNAME

Save the image 👇

#CloudBreach #CloudSecurity #RedTeam #Azure #EntraID #OSINT #BugBounty #Infosec #Pentesting #Hacking #breachingazureadvanced

[CloudBreach @Cloud_Breach]

🎉 1 month since the launch of Breaching Azure Advanced 🌩️To celebrate, get 10% OFF

🎟️ Code: BAA10off
⏳ Offer expires 23rd December

🔍 What’s inside:
🪪 Entra ID attacks
🔑 SP/MSI lateral movement
⚙️ ARM exploitation
🐳 AKS & container attacks
📦 Key Vault/Storage abuse
🤖 DevOps Agent & ADFS
🌐 Hybrid & multi-cloud pivots
🔥 Full real-world attack chains

🎯 For: Cloud Sec Engineers, Red/Purple Teams, Pentesters, Threat Hunters, SOC, Architects.

Train like an attacker. Stop tomorrow’s cloud breach.
👉 https://t.co/KvKPjjr3PQ

#CloudBreach #BreachingAzureAdvanced #AzureSecurity #Azure #EntraID #IAM #CloudSecurity #CloudSec #OffSec #RedTeam #BlueTeam #PurpleTeam #Pentesting #ThreatHunting #Microsoft365 #M365Security #DevSecOps #CyberSecurity #InfoSec #SecurityTraining

[CloudBreach @Cloud_Breach]

⏳ 24 HOURS LEFT!
CloudBreach’s Black Friday offer is ending - 20% OFF all courses & certifications is about to disappear 🔥

🚀 Breaching Azure Advanced:
⚔️ Execute full attack chains
🧪 Train in hands-on labs
🎖️ Earn & display badges
🛡️ Level up your cloud security career

➡️ Promo Code: BlackFriday25
⏳ Expires in 24 hours
👉 https://t.co/1r7IEyTo73

Tag someone who shouldn’t miss this! 🔥👇
#CloudBreach #BlackFriday #BreachingAzure #BreachingAzureAdvanced #BreachingAWS #CloudSecurity #AzureSecurity #CyberSecurity #OffSec #RedTeam #BlueTeam #PurpleTeam #CyberTraining #SOC #ThreatHunting #DevSecOps #Pentesting #Microsoft365 #IAMSecurity #HandsOnLabs #SkillsMatter #HackerMindset #CloudCareers #InfoSec #SecurityTraining #HackTheCloud

[CloudBreach @Cloud_Breach]

🔥 #BlackFriday has LANDED at #CloudBreach 🔥
⚔️ 20% OFF all #Azure and #AWS #cloudsec courses & certifications
🧠 What you get:
✔️ Hands-on labs
✔️ Full attack chains
✔️ Real-world TTPs
✔️ Earn & display badges

🚨 New Course - Breaching Azure Advanced: Dive into advanced Azure attack paths & practical offensive simulations.

🎟️ Promo Code: BlackFriday25
⏳ Offer ends 8 December
👉 https://t.co/1r7IEySQhv

#BreachingAzure #BreachingAzureAdvanced #BreachingAWS #CyberSecurity #AzureSecurity #CloudSecurity #RedTeam #BlueTeam #PurpleTeam #InfoSec #ThreatHunting #Pentesting #OffSec #DevSecOps #Microsoft365 #CloudSecuriy #CyberSecurity #M365Security #SOC #CyberTraining #Hacking #SecurityTraining #BlackFridaySale #BlackFriday2025

[CloudBreach @Cloud_Breach]

🚀 Breaching Azure Advanced drops 21 Nov — built for defenders, red-teamers & cloud-security pros who want to operate at an adversarial level inside enterprise #Azure. ⚔️🌩️

🔍 What’s inside:
🪪 Entra ID attacks
🔑 SP/MSI lateral movement
⚙️ ARM exploitation
🐳 AKS & container attacks
📦 Key Vault/Storage abuse
🤖 DevOps Agent & ADFS
🌐 Hybrid & multi-cloud pivots
🔥 Full real-world attack chains

🎯 For: Cloud Sec Engineers, Red/Purple Teams, Pentesters, Threat Hunters, SOC, Architects.

📆 21 Nov — Real tenants. Real attacks. No shortcuts.

Check it out: 👉 https://t.co/eMbXlwLraY

#CloudBreach #BreachingAzureAdvanced #CloudSecurity #AzureSecurity #RedTeam #BlueTeam #AzurePentesting #OffensiveSecurity #cloud #hacking #pentesting #pentest #cloudsecurity #infosec #blackfriday #cloudsec #hackingchallenge

[CloudBreach @Cloud_Breach]

🔥 Breaching Azure – Advanced
Hands-on offensive security labs for pros who want to breach like real adversaries.

🛠️ Advanced Attack Paths
⚡ Advanced TTPs
☁️ Abuse More Azure Misconfigurations
🎯 New Attack Paths
⚙️ More Azure Services Leveraged

⏳ Not released yet… Coming soon!

#CloudBreach #BreachingAzure #AzureSecurity #RedTeam #OffensiveSecurity #CloudSecurity #Pentesting #CyberSecurity

[CloudBreach @Cloud_Breach]

🚨 Cookie theft is the new #MFA bypass! 🍪🕵️‍♂️
Threat actors are using infostealers (Malicious browser extensions) to grab browser session cookies, letting them hijack accounts & access cloud platforms like #Microsoft365—no passwords, no MFA prompt, no alerts. 😱
Stay vigilant: monitor session anomalies, tighten access controls, and educate users. 🔐
#CloudBreach #ThreatIntel #CloudSec #CyberSecurity #MFABypass #CloudSecurity #InfoSec #Infostealer #ZeroTrust

[Octavian @0xtavian]

The BEST open-source & paid ASM tools for hackers:

Free and open source:
🆓 Ax Framework (obviously) 🥇
🆓 @owaspamass
🆓 @archerysec
🆓 @superhedgy's AttackSurfaceMapper
🆓 @RiskProfilerIO's CloudFrontier
🆓 @cisagov's crossfeed 🥇

🥇 = Editor's choice

More in thread 🧵👇

[Andreas 💻 @superhedgy]

@StavrosZenios This hypothesis would be a great topic for research.

[CyberInsider @CyberInsidercom]

Proton Mail Discloses User Data Leading to Arrest in Spain

https://t.co/lPY0cGj7Qi

#protonmail #privacy #opsec

[Dark Web Informer @DarkWebInformer]

Confirmed. This is @zscaler @Threatlabz that was breached. #ZScaler #Threatlabz #DarkWebInformer #DarkWeb #Cybersecurity #Cyberattack #Cybercrime #Infosec #CTI

[Rasta Mouse @_RastaMouse]

[BLOG]
Here's the blog post demonstrating how you can make your own. https://t.co/kANwcxZS8T

[Andreas 💻 @superhedgy]

@Xaralambidou @OMichaelides Agreed. A sad day for Cyprus.

[CloudBreach @Cloud_Breach]

#BreachingAWS Lab - Command Execution with #AWS SSM 🔥 ☁️👇
https://t.co/NIVTd29ota

#CloudBreach #CloudSec #InfoSec #Cloud #RedTeam