X-C3LL

Just a biologist that loves to break cyber-stuff. Ka0labs / @AdeptsOf0xcc / ID-10-Ts member. 🦉

[MDSec @MDSecLabs]

Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639) - new research from @craigsblackie and @R3n5k1 from @AmberWolfSec https://t.co/eTRU43n8PF

[AmberWolf @AmberWolfSec]

AmberWolf and @MDSecLabs are jointly disclosing technical details on CVE-2026-40639, a weakness found in how some Dell platforms store BIOS passwords.

[X-C3LL @TheXC3LL]

@singe @z3ro2504 @sensepost Maybe I'm wrong... but I believe it's the same concept that https://t.co/NcxudXCip6 (6 years ago) or this approach that avoids NtQueryInformationProcess to find the shellcode in env vars https://t.co/SF7pEJNtEF

[Craig S. Blackie @craigsblackie]

Catch me and @R3n5k1 tonight @DC4420 talking about UEFI hacking, bitlocker and CVEs!

[Dominic Chell 👻 @domchell]

I've been pretty quiet recently, mainly because we've been cooking up a few things at @MDSecLabs - some of which will be revealed over the next month or so. One of the most exciting things is a HUGE new @nighthawk_c2 release. It's packed with "stacks" of new OpSec - incl. 3 new CET compat masking. But most exciting of all, we have a super sexy new cross platform UI 🔥

[mieltxo @mieltxo]

Hoy he tenido la oportunidad de leer el libro "Crónicas del Red Team" de @TheXC3LL, y ha sido un pasatiempo inmejorable…

https://t.co/tncHd8Jdz1

[Charles Fol @cfreal_]

The CFP for #EntryPoint2027 is now open – expect Hexacon, but for red teaming – submit your fancy web, AD, RT research!

[MDSec @MDSecLabs]

Join @craigsblackie next week at DC4420 and learn how to break full disk encryption in your Dell - Unlocked and Leaked https://t.co/C4GBQEVDBA

[Adam Chester 🏴‍☠️ @_xpn_]

New blog post is up looking at how LLMs are making local EDR rulesets, YARA rules, and behavioral detections trivial to extract. This post focuses on how simple the harness can be. Buckle up h4xx0rs, the next few months are gonna get interesting! https://t.co/QvzXsPA01F

[watchTowr @watchtowrcyber]

We're back, analyzing CVE-2026-8037, a pre-auth RCE in Progress' Kemp LoadMaster appliance.

https://t.co/VAYjf3Zhss

Speak soon...

[X-C3LL @TheXC3LL]

Now that ppl is getting banned here, imagine if we start just dropping our contents in blogs instead of using social networks for chasing clout. We can even alert when new post are released. We could call it "Really Simple Shit"(RSS) and let the people read them by the morning ☕

[X-C3LL @TheXC3LL]

@gilberto_tic @DaniLJ94 Buenas! No está todavía a la venta, espero que lo esté en las próximas semanas. Avisaré por redes sociales

[X-C3LL @TheXC3LL]

@mkliuss @DaniLJ94 Espero que en un par de semanas 🤞. Cuando esté avisaré por redes sociales

[X-C3LL @TheXC3LL]

@DaniLJ94 🥰

[ATTL4S @DaniLJ94]

Acabo de terminar el libro de @TheXC3LL y quería compartir algunas reflexiones.

Quiero empezar diciendo que este libro parece inocente.

A simple vista puede verse como un "libro de historietas de batalla" para entretener... y lo cierto es que entretenido es. (1/5)

[Rich Warren @buffaloverflow]

New blog by my colleagues Dave (@johnnyspandex) and Adam:

Microsoft Graph API - Hidden Exclusions with Overly Scoped Permissions 🧐

https://t.co/pku1PIYigh

[Dirk-jan @_dirkjan]

I just wrote a new blog on bypassing CA policies in Entra ID that have a resource exclusion, and why you probably want to enable baseline enforcement if you have such policies. Enjoy!

https://t.co/a1rGl3wss8

[X-C3LL @TheXC3LL]

@NN2ed_s4ur0n @EuskalHack Graciñas!!!

[X-C3LL @TheXC3LL]

Uploaded the slides of my talk "Ticket Please" in EuskalHack (it was a 101) https://t.co/Cte2RNpDvf

[EuskalHack @EuskalHack]

¡Hemos llegado a la ponencia de clausura! Es turno de Juan Manuel Fernández y su charla “Tickets Please: Let's talk about AD-Joined Linux Environments" #offensive #pointofview #ESCIX @TheXC3LL