Troy Ting

Still Learning

[Vivek | Cybersecurity @VivekIntel]

🧬 DLLHijackHunter — Automated DLL Hijacking Discovery & Exploitation Validation

Not just detection — real execution proof.

• Finds hijack paths (services, tasks, COM, UAC bypass)
• Filters false positives (ACL + KnownDLL + API sets)
• Canary DLL → confirms actual execution
• Scores findings by exploitability

From misconfig → confirmed privesc path

🔗 https://t.co/au6AkI8PSW

#RedTeam #WindowsSecurity #PrivEsc

[incursion @Incursi0n]

Made a quick BOF to exploit the currently unpatched BlueHammer vulnerability to dump SAM hashes from a low integrity context.

https://t.co/0AqFwHpQ9f

[BlackArrow @BlackArrowSec]

Microsoft has addressed a one-click NTLM leak vulnerability affecting Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (@Calvaruga).

➡️ Read the write-up: https://t.co/JvMGad5NuI
➡️ Microsoft bulletin: https://t.co/0IbpRxxUY7

[Md Ismail Šojal 🕷️ @0x0SojalSec]

A fully local 26B MoE model was built for red teaming and bug hunting.

Trained on elite bug reports and real evasion tactics. DPO fine-tuned for hunter mindset.

Claude sees your payloads in logs; that's why BugTraceAI Apex 26B local MoE for real red teamers.

- executes WAF bypasses with internal thinking blocks.
- It enforces deep internal reasoning before generating any output.
- Delivers production-grade WAF/EDR evasion with AES-256-GCM obfuscation.
- Zero refusals, Trained on real-world elite reports and evasion techniques.

Fits in 16.7GB. Runs on RTX 3060.

- https://t.co/FfnGgGXoQy

[Anastasis Vasileiadis @Anastasis_King]

🟥𝗟𝗟𝗠 𝗥𝗲𝗱 𝗧𝗲𝗮𝗺𝗶𝗻𝗴 𝗥𝗲𝘀𝗼𝘂𝗿𝗰𝗲𝘀

🔗 Red Teaming LLM Applications by DeepLearning :-
https://t.co/vxFaGaQUnJ

🔗Planning red teaming for LLMs by Microsoft :-
https://t.co/pMKTpSVrUZ

🔗Red teaming LLMs by HuggingFace :-
https://t.co/liz7MQBWic

🔗LLM Red Teaming by KLU :-
https://t.co/kje9hPRXph

🔗Red Teaming LLMs Nihad Hassan :-
https://t.co/r9EfNsalfJ

🔗Red-Teaming to make LLMs robust and safer :-
https://t.co/0mBq716Cfm

🔖#infosec #cybersecurity #hacking #pentesting #security

[DFIR Radar @DFIR_Radar]

Qilin ransomware deploys sophisticated multi-stage EDR killer targeting 300+ security products. Advanced loader uses SEH/VEH-based obfuscation and kernel manipulation to completely disable endpoint detection systems.

Technical breakdown:
• Stage 1: Malicious msimg32.dll side-loaded via DLL hijacking, implements slot-policy table for syscall evasion and Halo's Gate technique
• Stage 2-3: Complex VEH-based control flow obfuscation, overwrites ExitProcess IAT entry, maps payload into shell32.dll memory space
• Stage 4: EDR killer loads rwdrv.sys (abused ThrottleStop driver) for physical memory R/W, hlpdrv.sys for process termination (T1562.001)
• Kernel manipulation: Unregisters EDR callbacks for process/thread/image events, overwrites CiValidateImageHeader with ArbPreprocessEntry
• Geo-fencing excludes post-Soviet countries, requires admin privileges for driver loading

Attack chain systematically blinds behavioral detection before ransomware deployment. Hunt for msimg32.dll side-loading, unsigned drivers in system directories, and unexpected ExitProcess IAT modifications.

#DFIR_Radar

[stuxf @stuxfdev]

We at @verialabs built an autonomous CTF agent in a weekend and won 1st place at @BSidesSF 2026, solving all 52/52 challenges.

It races multiple AI models (Claude, GPT-5.4) in parallel, each in isolated Docker sandboxes with full CTF tooling. A coordinator LLM reads solver traces and sends targeted guidance to stuck agents.

As AI gets better at finding and exploiting vulnerabilities, we think it's important to understand exactly how good it is and where it fails.

https://t.co/MnbR9anYTS

[vx-underground @vxunderground]

> Notepad++ says infra compromised
> Suspects Chinese state-sponsored hackers
> "Why would China hate Notepad++????"
> Look inside

[Altered Security @AlteredSecurity]

The wait is over.

Before anything else - this is not a sale, not a discount, and not a promotion.

For years, the Red Team community has helped shape how we think about labs, certifications, and real-world attack paths.
Today, we’re giving something back.

We’re opening access to 10 new enterprise-grade Red Team labs on our Red Labs & Challenges platform (BETA) as a community release.

These labs are built around real Azure security and red team scenarios, with:
⦁Dedicated enterprise-style environments
⦁Clear objectives with flags
⦁Full solutions and walkthroughs
⦁No gamification. No shortcuts.

This new lab category focuses on attacking Azure one RESTful API at a time, using BARK (BloodHound Attack Research Kit) - along with native REST API Calls - to help practitioners deeply understand offensive Azure tradecraft.

They’re built using the same standards and philosophy we apply to CARTP and CARTE: realistic systems, real attack paths, and lessons that translate directly to enterprise environments.

Red Labs is where we experiment, learn, and raise the bar - long before anything becomes a certification.

Opening this set is our way of supporting practitioners who want hands-on exposure to real enterprise environments, without noise or hype.

This one is for the community that keeps pushing red teaming forward.

Full details here: https://t.co/7XEELQeZqZ

[Troy Ting @Troy8223]

@AlteredSecurity Wanna do CRTP cuz it’s a great content among the market teaching exploiting AD with mainly powershell tools.

[Altered Security @AlteredSecurity]

Final Black Friday Giveaway!

Win FREE access to:
• 1 CRTP seat
• 1 CRTE seat

How to participate:
1. Like
2. Comment which course you’re interested in and why
3. Repost

If you've already availed the Black Friday offer, you're still eligible.
Winners will be announced on Dec 15, 2025.

Few days left to grab your Black Friday deals:
• Up to 25% OFF Labs & Bootcamps
• No coupon code needed
• Use anytime within 6 months

For More details: https://t.co/hp0GLwrqy7

[Troy Ting @Troy8223]

@AlteredSecurity Want the Attacking and Defending Active Directory/CRTP!

@nikhil_mitt & @AlteredSecurity makes me motivated everyday to achieve more advanced topics in red teaming through the courses and certs! I hope one day I can understand those evasive techniques and complex AD attacks!

[Altered Security @AlteredSecurity]

GIVEAWAY!! 🔥

Hacker Summer 2025 giveaway! We are giving away a total of 2 seats for any of the highly coveted on-demand courses by @AlteredSecurity

To participate - Like👍, Repost🔁 and Comment💬 the course/certification name, what makes it useful to you and follow @nikhil_mitt and @AlteredSecurity

We will announce 2 random winners this Friday.

https://t.co/c9Jvl55xrD

#RedTeam #Pentesting #InfoSec #HackerSummer

[whitehats @wh1t3h4ts]

40 ways to use shodan.

[LaurieWired @lauriewired]

Just built an MCP for Ghidra.

Now basically any LLM (Claude, Gemini, local...) can Reverse Engineer malware for you. With the right prompting, it automates a *ton* of tedious tasks.

One-shot markups of entire binaries with just a click.

Open source, on Github now.

[Jack Rhysider 🏴‍☠️ @JackRhysider]

For an IT guy, LinkedIn is like a reverse dating app. Beautiful women message you first, and you immediately ghost them.

[Troy Ting @Troy8223]

@ProjectSEKAIctf Wonderful

[Project Sekai CTF @ProjectSEKAIctf]

🎁Monthly Giveaway🎁

Hack The Box 1-year VIP+ & 3-month Prolab
- Follow, Like, and Retweet to join!
- Winners will be picked randomly on 11 Feb.

#hackthebox #giveaway #projectsekaictf

[Troy Ting @Troy8223]

@vxunderground Comeon

[Troy Ting @Troy8223]

@vxunderground @SEKTOR7net Hardcore nerd🔥🔥🔥🔥