vs1m

# 𝙩𝙧𝙖𝙫𝙚𝙡 𝙩𝙝𝙚 𝙬𝙤𝙧𝙡𝙙; 𝙝𝙖𝙘𝙠 𝙩𝙝𝙚 𝙥𝙡𝙖𝙣𝙚𝙩;
cyber cowboy

All opinions and alike are only mine
pp: Andrei Ozdoba
Banner:

[vs1m @Vsimpro]

Got an ethical pentest for a kiosk-esque environment, but you're stuck in a browser? Have access to websites, but have a need to go deeper?

Look no further! With https://t.co/gSWLVmmkVq you have access to tools that enable lateral enum, calculator://, file browsing, and more!

[vs1m @Vsimpro]

@C5pider @grit8086 Good shit men!

[vs1m @Vsimpro]

@C5pider @x33fcon don't fall for this scam -- he might ENJOY the chat & be friendly ???

[vs1m @Vsimpro]

Blogspot activity!
https://t.co/VCgiIGvPwQ

[vs1m @Vsimpro]

Completely nerdsniped myself today and expanded on this. New source in the same place:

https://t.co/a1MM5wLw7g

Now looking for reappearance across multiple git instances (one can hope) and automatically tracking if there's a hit.

Follows his blog too. Adding rss for tweets l8r

[vs1m @Vsimpro]

Yesterday I wrote a scraper to monitor NEs GitLab account in case they drop anything interesting.

>mfw I deploy it, and it doesn't work.

Between testing the script locally and deploying, gitlab dropped their account. 💀

Heres the sauce regardless:
https://t.co/a1MM5wLw7g

[vs1m @Vsimpro]

So immediately if an account pops up, its gonna start monitoring it, and clone any possible repositories now and in future. 🤖

[vs1m @Vsimpro]

@ibay770 In consideration!

[vs1m @Vsimpro]

Yesterday I wrote a scraper to monitor NEs GitLab account in case they drop anything interesting.

>mfw I deploy it, and it doesn't work.

Between testing the script locally and deploying, gitlab dropped their account. 💀

Heres the sauce regardless:
https://t.co/a1MM5wLw7g

[Pirat_Nation 🔴 @Pirat_Nation]

GitLab has apparently taken down the Nightmare-Eclipse account just days after the researcher moved there following the GitHub ban.

The drama started after Nightmare-Eclipse released several Windows exploits and Defender bypass tools, including BlueHammer, RedSun, and UnDefend. GitHub removed the account earlier this week over concerns that the tools could be misused and weaponized.

Security company Huntress says some of the tools have already been seen in real-world intrusion cases, showing how quickly proof-of-concept research can end up being used in actual attacks.

[vs1m @Vsimpro]

@TherealUDP thanks and right! pop up for a chat my guy :)

[vs1m @Vsimpro]

@C5pider *ankles breaking* 😭

[vs1m @Vsimpro]

✍️ **NEW BLOG:**

Malware can be stopped by taking down infrastructure.

What if the Defenders could not rely on this technique❔

I investigated how Nostr's censorship resistant model could be used as robust comms for Malware.

Read more about it here:
https://t.co/l0TjomHRcJ

[vs1m @Vsimpro]

@C5pider thank you :3 🕺🕺🕺

[vs1m @Vsimpro]

Don't want to read the whole thing? :D

Code is here: https://t.co/L7A8l1GbA1

[vs1m @Vsimpro]

Also, stay tuned, blog incoming with new tech :)

[vs1m @Vsimpro]

ChatGPT wont help with malware but if you just start with a base, GPT-5.4 will gladly help you via opencode. It won't pick up the context clues.

Just dont mention the malware is malware.

[vs1m @Vsimpro]

"An increasingly fake online world in a world which is increasingly online."

-Dr. B

[vs1m @Vsimpro]

@0xv1nx0 Scrap the mmo, we're gonna live off the land

[vs1m @Vsimpro]

@_JohnHammond @0xv1nx0 👀

[vs1m @Vsimpro]

I had a blog post in mind, "scraping with scraps" where I would've used the Vultr free tier VPS for a free crawler setup. The need for this lightweight scraper has been **completely** killed.

Here's the docs:
https://t.co/qUZA3SW6eT
https://t.co/9hiKE78hHt

[vs1m @Vsimpro]

Cloudflare made scraping free?

Stack:
Scraper - CF /scrape freetier endpoint
Storage - Aiven free-tier PostgreSQL
Run/Parse - Python to trigger crawl & move HTML to PSQL
VPS - Vultr free VPS for scheduled runs

No proxies. No headless browser infra. No cost

Whole pipeline = $0