Antony N0P

Cybersecurity’s notes🛡👨🏻‍💻 Research⚙️💉Digital Forensics🔍🖥Malware Analyst🦠🧬

[S3cur3Th1sSh1t @ShitSecure]

After “The Art of Evasion” @x33fcon I’m publishing NimSyscallPacker to the public. This is the most advanced public Packer/Loader I’m aware of:

https://t.co/ftd24bHryj

[Nicolas Krassas @Dinosn]

Recent CVE PoC & reproduction scripts. Focused on high-severity vulnerabilities across Linux kernel, Windows, macOS and more. https://t.co/2CAcx2ojyE

[Massimo @Rainmaker1973]

Multitasking vs focus

[Antony N0P @yrevichus]

@vxunderground Post-exploitation tool Koshka???

[Panos Gkatziroulis 🦄 @ipurple]

teletunnel - Bypassing EDR's with stealthy c++ telegram Bot and Telegram itself as C2 interface https://t.co/2V06F8oKnf #redteam

[Nicolas Krassas @Dinosn]

KslKatz: Combining KslDump and GhostKatz to dump LSASS using no-vulnerability KslD.sys memory read to bypass PPL. Extracts MSV1_0 NT hashes and WDigest cleartext passwords (if enabled) from LSASS using a Microsoft-signed driver. https://t.co/pkgRtVMc2V

[SEKTOR7 Institute @SEKTOR7net]

AV/EDR Lab Environment Setup

A curated list of various resources helpful in building own malware-centric research lab.

A post by Udayveer Singh (@m4lici0u5)

Source: https://t.co/ZM3A1n1zNQ

#redteam #blueteam #maldev #malwaredevelopment

[blueblue @piedpiper1616]

GitHub - Bombadil-Systems/zombie-zip: Malformed ZIP archive that evades antivirus detection by declaring Method=0 (stored) while containing DEFLATE-compressed payload. · GitHub - https://t.co/O6shnytzhZ

[SANS.edu Internet Storm Center @sans_isc]

Analyzing "Zombie Zip" (CVE-2026-0866) https://t.co/W8JwEIiS0A

[Nicolas Krassas @Dinosn]

Phantom - a project created to perform loading and executing .NET assemblies directly in memory within an IIS environment running in full‑trust mode. https://t.co/GtUdD1JpCa

[Panos Gkatziroulis 🦄 @ipurple]

A Windows PE manual loader written in Rust for both x86 and x64 PE files https://t.co/3aojhQttc0

[Init1Security @init1security]

227 tips dedicated to red teaming, OPSEC, infrastructure, payloads, etc.

https://t.co/zx7vUzR4Qv

[m411k @m411k_]

Here is my CVE-2025-10891 Chromium RCE PoC:
https://t.co/jqrevQ9Ca4

[Clandestine @akaclandestine]

WatchDogKiller
Weaponizing the WatchDog Anti-Malware Driver Vulnerability.
*

[Panos Gkatziroulis 🦄 @ipurple]

Persistence: The Art of Staying In https://t.co/zeeZG9uLt8

[Init1Security @init1security]

Raphael Mudge, the creator of Cobalt Strike, gave a free course on Red Team concepts and using Cobalt Strike a great resource for anyone working with C2.
#redteam

https://t.co/xYxuoeXOi8

[Init1Security @init1security]

Remember the team at SpecterOps open-sourced their PowerShell training, which remains a hugely relevant concept, and APTs are still actively using it.
#redteam
https://t.co/vRrlfh9mha

[Alexandre Borges @ale_sp_brazil]

I am pleased to announce the publication of the sixth article in the Exploiting Reversing Series (ERS).

Titled "A Deep Dive Into Exploiting a Minifilter Driver (N-day)", this 251-page article provides a comprehensive look at a past vulnerability in a mini-filter driver:

https://t.co/Sh8pgB4bh8

It guides readers through the entire investigation process—beginning with binary diffing and moving through reverse engineering, deep analysis and proof-of-concept stages into full exploit development.

I hope this serves as a valuable resource for your research. If you enjoy the content, please feel free to share it or reach out with feedback.

Have an excellent day!

[Nicolas Krassas @Dinosn]

XBot - Advanced AI Cybersecurity Agent | Gemini system prompt for automated penetration testing and security assessments https://t.co/lXQImDsgqw

[Nicolas Krassas @Dinosn]

A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities. https://t.co/sTpEwxtcVU