Zach Fleming

[Zach Fleming @The___Undergrad]

Anyone who might be thinking of undertaking the OSCE or OSCP. I found these machines very useful during my preparation and hopefully others might find them useful as well.

https://t.co/X8W5VcU8is

#offensivesecurity #oscp #osce #CyberSecurity #cybersec

[Adam Chester 🏴‍☠️ @_xpn_]

Trying to use Fable 5 for anything benign...

[Justin Elze @HackingLZ]

👀

https://t.co/6lVX1uy06T

[Signal @signalapp]

Our statement on the UK government’s demand that all content on all devices sold or used in the country be scanned, on the presumption of nudity, using a dystopian combination of age verification and content scanning. This proposal will not safeguard children. It endangers us all.

https://t.co/VdWe9uhi8p

[Two Seven One Three @TwoSevenOneT]

New #redteam tool for blocking EDRs: EDRChoker
Instead of fully blocking the EDR agents' connections to their server, we can throttle their bandwidth so they consistently time out when sending data, which is effectively the same as blocking but avoids triggering "block" or "drop" packet events
#pentest #cybersecurity
Github: TwoSevenOneT/EDRChoker

[Quang Vo @smuggiekeplar]

CrystalKit x Gargoyle
https://t.co/PBtDWbtf1s

[Nightmare Eclipse @ChaoticEclipse0]

I need someone to get me a crowdstrike and sentinelone licenses. Do not ask why do I need them.

[Atredis Partners @Atredis]

"Bad News for the Average Pentester" ... But who wants to be average?

Here's some thoughts from Shawn on why Human-Powered Pentesting is here to stay.

https://t.co/10pnLMYU5M

[vx-underground @vxunderground]

Good news everyone

Shai-Hulud, that spoopy Git worm thingy everyones been yapping about, has been open-sourced.

What does this mean? TeamPCP, or someone else, has released the fully weaponized worm for you.

https://t.co/Ov7VYAGQIz

[Zach Fleming @The___Undergrad]

👀👀👀

https://t.co/Jg6Vp2uT1J

[SEKTOR7 Institute @SEKTOR7net]

Compile-time C obfuscator.

Macro-header for obfuscating C code at time of compilation, targeting TCC on Windows x86/x64, a tool by DosX-dev

Source: https://t.co/WFdCYP3yPW

#redteam #blueteam #maldev #malwaredevelopment

[freefirex @freefirex2]

I don't know where this idea that you can't call CRT functions in bof's started coming from but it's just another function, you don't need to write your own memcpy, strcpy, memset, etc. Just link off to MSVCRT using DFR and your good to go https://t.co/e36MLvhGO4

[thaddeus e. grugq @thegrugq]

The only cybersecurity barrier that Mythos has lowered is the level of cybersecurity knowledge in the people talking about AI and cybersecurity.

[Octoberfest7 @Octoberfest73]

This is some really nice work. A deep dive into what legitimate Windows network traffic looks like and how Impacket differs. Lots of goodness for both red and blue. Nice job @abdo_mhanni!

[Zach Fleming @The___Undergrad]

@Mubarak_mubious Real estate

[丂卄ㄖᗪ卂几 - 👋 crack fingers @therealshodan]

Hot take: AI will accelerate old school security researchers, not the new blood.

The gap will widen between old timers and new starters, not close.

Breakthroughs will come from the people who can ‘happily’ stare at ASM for days. Not for ppl using easy mode.

[mohit @mohitwt_]

Built a custom memory allocator from scratch in C/C++:

Implemented malloc, free, a sorted free list, block reuse, and coalescing of adjacent free blocks all without touching any standard library allocation functions

instead of calling mmap per allocation, went with a 1MB memory pool upfront so all blocks sit contiguous in memory, which is what actually makes coalescing work.

I'm writing a great article on this, posting tmr.
https://t.co/mxlVukS8Or

[Nicolas Krassas @Dinosn]

Pool multiple Claude accounts together behind a single proxy https://t.co/iSJnyw4hQZ

[0x12 Dark Development @Salsa12__]

Overwriting Process Creation Kernel Callbacks

New Medium post: after identifying security drivers (EDRs/AV) monitoring the system, we take the next step, overwriting process creation kernel callbacks to neutralize their monitoring and alter telemetry

https://t.co/0x4geoZDhr

[Zach Fleming @The___Undergrad]

@HackingLZ @h0mbre_ @HackingDave 🤣🤣

[TrustedSec @TrustedSec]

How well do you really understand what's happening inside a #Kerberos exchange? In our latest blog, @codewhisperer84 breaks down the full authentication flow and demonstrates how to interact with every stage using the #Titanis toolset. Read it now! https://t.co/QfvnCt9C0T