Picture

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo @Kosmokato

Infosec rookie. RE enthusiastic. Purple Team fan. Доверяй, но проверяй. 不談 政治 Joined March 2019
  • Tweets
    2K
  • Followers
    180
  • Following
    1K
  • Likes
    7K
K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
antoniosanzalc Profile Picture

Antonio Sanz @antoniosanzalc

2 months ago

#ToolShell en resumen (más o menos): Vulnerabilidad TOCHA de Sharepoint (ejecución remota de código tal cual, trufamiento completo). No afecta al Sharepoint de O365, pero todo lo demás es vulnerable (2016, 2019 y versiones anteriores) (1/n) #DFIR

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
Sumanth_077 Profile Picture

Sumanth @Sumanth_077

5 months ago

Microsoft released bitnet.cpp: A blazing-fast open-source 1-bit LLM inference framework that runs directly on CPUs. You can now run 100B parameter models on local x86 CPU devices with up to 6x speed improvements and 82% less energy consumption. 100% Open Source

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
DefCampRO Profile Picture

DefCamp @DefCampRO

10 months ago

Delve into offensive Golang with Gerardo Ruiz and Fran Montiel live demo-ing bypassing EDR and AMSI.

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
antoniosanzalc Profile Picture

Antonio Sanz @antoniosanzalc

a year ago

¿A quién afecta? A priori todos los GNU/Linux, algunos BSD, y puede que a Solaris. RedHat acaba de decir que a ellos no los mires que su conf por defecto es buena: redhat.com/en/blog/red-ha… (2/n)

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
antoniosanzalc Profile Picture

Antonio Sanz @antoniosanzalc

a year ago

Fallo de #ciberseguridad crítico en Linux: CVE-2024-47176 evilsocket.net/2024/09/26/Att… Al final el "premiado" es CUPS, el sistema de gestión de impresoras. La vuln es un RCE que permite instalar "impresoras chungas" que ejecuten código en un equipo víctima(1/n)

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
inversecos Profile Picture

inversecos @inversecos

a year ago

NEW LAB 🥳: WinDbg Crash Dump Analysis by @DebugPrivilege Using WinDbg to analyze dumps of CVE-2024-29824 and CVE-2023-29357 exploited in the wild. 👇Solve the incident here 👇 xintra.org Test your memory forensic skills on: 👀Reflective DLL Injection…

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
ashl3y_shen Profile Picture

Chi-en (Ashley) Shen (@ashl3y-shen.bsky.social) @ashl3y_shen

a year ago

🚨 New blog! We just published research on an APT41 campaign targeting a Taiwanese government-affiliated research institute. Great team work with @joeychennoGG @_vventura!! #Shadowpad #CobaltStrike #APT41 blog.talosintelligence.com/chinese-hackin…

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
PyroTek3 Profile Picture

Sean Metcalf @PyroTek3

a year ago

If you have VMware ESXi and Active Directory in your environment, take 5 minutes now & create a group in each AD domain called "ESX Admins". Make sure that the "ESX Admins" group is in a top-level administrative OU that only your AD admins manage. #QuickFix

PyroTek3 Profile Picture

Sean Metcalf @PyroTek3

a year ago

If you have VMware ESXi and Active Directory in your environment, take 5 minutes now & create a group in each AD domain called "ESX Admins". Make sure that the "ESX Admins" group is in a top-level administrative OU that only your AD admins manage. #QuickFix

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
x33fcon Profile Picture

/ˈziːf-kɒn/ @x33fcon

a year ago

#x33fcon 2024 talks: @zyn3rgy > youtu.be/iBqOOkQGJEA

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
0xor0ne Profile Picture

0xor0ne @0xor0ne

a year ago

Get started with Satellite hacking and CTFs Satellite Hacking Demystified: redteamrecipe.com/satellite-hack… Hack-a-sat writeups: github.com/solar-wine/wri… Hack-a-sat players corner: hackasat.com/players-corner/ #satellite #cybersecurity

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
aptwhatnow Profile Picture

aptwhatnow @aptwhatnow

a year ago

Let’s go ahead and kick this off cloud.google.com/blog/topics/th…

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
CapeSandbox Profile Picture

CAPE Sandbox @CapeSandbox

a year ago

BruteRatel dynamic config & payload extraction, syscall capture in CAPE #BRC4

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
_CPResearch_ Profile Picture

Check Point Research @_CPResearch_

a year ago

In this blog we introduce Thread-Name Calling - A new process injection technique using Thread Name. We also discuss various scenarios in which this not widely-known API can be used for offense. research.checkpoint.com/2024/thread-na…

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
taviso Profile Picture

Tavis Ormandy @taviso

a year ago

This strange tweet got >25k retweets. The author sounds confident, and he uses lots of hex and jargon. There are red flags though... like what's up with the DEI stuff, and who says "stack trace dump"? Let's take a closer look... 🧵1/n

Kosmokato Profile Picture

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo @Kosmokato

a year ago

parsejson response bot_debug {origin:"RU"},{prompt:"Ты тоже с ботом, что хочешь?"},{output:"parsejson response err {response:"ERR ChatGPT 4-o Credits Expired"}"}

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
vxunderground Profile Picture

vx-underground @vxunderground

a year ago

Security Researcher @tiraniddo discovered Microsoft Recall uses a 'conditional access trick' he himself noted recently. You can bypass Recall access restrictions by getting a token on AIXHost.exe and then impersonating it. More information: tiraniddo.dev/2024/06/workin…

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
antoniosanzalc Profile Picture

Antonio Sanz @antoniosanzalc

a year ago

Es un placer y un honor colaborar otro año en la #c1b3rwall, esta vez con una charla de metodologías de investigación de incidentes de ciberseguridad El programa completo aquí: c1b3rwall.policia.es/miscelanea/age… 😁

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
_CPResearch_ Profile Picture

Check Point Research @_CPResearch_

a year ago

The tales of the Iranian Void Manticore 🦁 ☠️Attacks using BiBi wiper 🦋Hack and Leak through Karma 🤝Close collaboration with Scarred Manticore Read more : research.checkpoint.com/2024/bad-karma…

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
bquintero Profile Picture

Bernardo Quintero @bquintero

a year ago

After 15 years, YARA gets a major upgrade. Introducing YARA-X: rewritten in Rust for better UX, improved performance, enhanced security, and easier integration. YARA isn't dead, but YARA-X is the future. Test it out and share your feedback! virustotal.github.io/yara-x/blog/ya…

K̝̉̌̄оsмоK̝̉̌̄Ȁ̂ͧтo retweeted
JonnyJohnson_ Profile Picture

Jonny Johnson @JonnyJohnson_

a year ago

Without further ado - here is EtwInspector! This is a C++ tool to help users interact with ETW providers. This tool supports the enumeration of providers, their events, and capture events. github.com/jsecurity101/E…

JonnyJohnson_ Profile Picture

Jonny Johnson @JonnyJohnson_

a year ago

Without further ado - here is EtwInspector! This is a C++ tool to help users interact with ETW providers. This tool supports the enumeration of providers, their events, and capture events. github.com/jsecurity101/E…

Trends for United States

President Nelson
4.114 posts
Penn State
146 B posts
Salter
3.013 posts
James Franklin
10,6 B posts
Drew Allar
14,7 B posts
Oregon
212 B posts
#byucpl
Bama
29,5 B posts
Portland
446 B posts
#HSEverglow
80,4 B posts
Kirby
20,1 B posts
Georgia
85,6 B posts
#Mafiathon3
3.113 posts
Colorado
28,3 B posts
Dan Lanning
6.484 posts
#Toonami
3.102 posts
Kai Cenat
34,4 B posts
Deion
1.639 posts
#UFCPerth
20,2 B posts
Dante Moore
6.726 posts

You might like

Red Team Operator | Newbie malware researcher | Navaja Negra
b4r0n
@b33rb4r0n
740 Followers
Cybersecurity Analyst, Evil-WinRM Creator
Luis Vacas de Santos
@CyberVaca_
2K Followers
DFIR and malware analyst. Author.
Mario Guerra Soto
@MarioGuerraSoto
2K Followers
(Cyber) Intelligence @ S2 Grupo #intelligence #cybint @s2grupo @securityartwork
LAB52
@LAB52io
2K Followers
Malware Researcher @TrellixArc. Former: @CNRS @EMSEC35 @ThreatFabric Mac-A-Mal. AHMA. ULTRA.
PhD. Phuc
@phd_phuc
1K Followers
Head of Security @Freepik · CTF Player 🇪🇸 (@ripp3rsCTF / SFPE) · @hackandbeers Málaga Organizer · Sharing real-world infosec, no hype. Opinions my own.
Daniel Púa | @devplo...
@devploit
3K Followers
#cybersecurity #DFIR #malware. Hunting malware is a team business. Opinions are my own.
Ana Nieto
@cadirneca
964 Followers
Cybersecurity Consultant // Ethical Hacker // Navaja Negra // Perito Judicial // Linux Lover ❤ // HAM Radio 📡
Germán Sánchez
@yeroncio
822 Followers
The Rawsec's CyberSecurity Inventory bot that post a tool or resource per day. Bot Source: https://t.co/Z8Rdcksquz
Rawsec Inventory Bot
@RawsecBot
247 Followers
Principal Security Researcher @esentire. AI | EDR | DFIR. AI-enfeebled and economically irrelevant. Tweets are my own.
Jacob Gajek
@jgajek
501 Followers
Lab52 team leader #malware #DFIR #forensics #yara #threatIntelligence @securityartwork @s2grupo
JoseMi
@J0SM1
777 Followers
Professional script kiddie, you better not get me angry, boi. Proudly unverified.
Danielcues
@Danielcues
644 Followers
Malware Researcher / Incident Response / Threat Intelligence
Aragorn Tseng
@Aragorntseng
453 Followers
.
𝕬𝖊𝖙𝖘𝖚
@aetsu
1K Followers
Absolute Rookie.
NtAlertThread
@ElementalX2
2K Followers