Splintersfury @Splintersfury

Malware analyst and cybersecurity professional focused on Windows kernel internals and reverse engineering. Singapore Joined October 2021

Tweets

12K
Followers

207
Following

1K
Likes

14K

Smukx.E @5mukx

22 hours ago

CPP / C++ Notes for Windows API Programming Win32 caiorss.github.io/C-Cpp-Notes/Wi…

4 59 345 10K 199

Download Image

780th Military Intelligence Brigade (Cyber) @780thC

a day ago

Inside Salt Typhoon: China’s State-Corporate Advanced Persistent Threat | Salt Typhoon is a Chinese state-sponsored cyber threat group aligned with the Ministry of State Security (MSS), specializing in long-term espionage operations | dti.domaintools.com/inside-salt-ty… @DomainTools

2 22 61 4K 22

Garrett @unsigned_sh0rt

2 days ago

Excited to present with @breakfix at #BHEU @BlackHatEvents where we'll be sharing our research on attacking System Center Operations Manager! @SpecterOps

2 19 76 8K 10

Download Image

Ayush Anand @Securityinbits

2 days ago

LSASS dump via comsvcs.dll is still in play. Recently seen in a ransomware cases Rundll32 calling MiniDump from comsvcs is a big red flag. I tested this in the lab. These 3 Sigma rules fired without fail 👇 Blog with full command and sigma rule links dropping soon..

4 47 172 16K 107

Download Image

Ryan Naraine @ryanaraine

2 days ago

This repository contains a utility for detecting potential BRICKSTORM backdoor compromises on Linux and BSD-based appliances and systems. (China-nexus APT) github.com/mandiant/brick…

2 41 129 12K 76

Olexander @_aircorridor

2 days ago

Pivoting within the Network: Getting Started with Chisel Pivoting sometimes can be challenging. In this article, I’d like to introduce you to a tool that simplifies this process: Chisel. hackers-arise.com/pivoting-withi… @three_cube

0 8 27 2K 11

Download Image

0xor0ne @0xor0ne

a day ago

Devirtualizing VMProtect and Themida nac-l.github.io/2025/01/25/lif… #infosec #reverseengineering

1 38 170 10K 98

Download Image

Steven Lim @0x534c

2 days ago

🚨 𝗕𝗥𝗜𝗖𝗞𝗦𝗧𝗢𝗥𝗠 𝗔𝗹𝗲𝗿𝘁: Mandiant (Google Threat Intelligence Group) has released a new report detailing BRICKSTORM—a threat actor toolset used to maintain persistent access within U.S.-based victim environments. Since March 2025, Mandiant Consulting has responded to…

2 33 110 9K 62

Download Image

Alex Plaskett @alexjplaskett

2 days ago

Bypassing TLS Verification on Nintendo Switch by Yannik Marchand reversing.live/sslbypass.html

2 38 237 14K 116

Download Image

0xor0ne @0xor0ne

2 days ago

Evaluation of different tools for routers firmware emulation (FACT, QEMU, EMUX, Qiling, Firmadyne, FAT, FirmAE, Pandawan, and EMBA) skemman.is/bitstream/1946… #cybersecurity #embedded

3 71 360 14K 215

Download Image

Smukx.E @5mukx

2 days ago

Using Reflective Loaders to Replace LoadLibrary for Hot Swappable Modules in C++ racoten.gitbook.io/red-team-devel…

1 46 278 13K 140

Download Image

Sarah Yoder @sarah__yoder

2 days ago

Earlier this year, I worked one the most interesting and complex IRs of my career. The malware and techniques from that case turned out to be key TTPs observed in multiple subsequent UNC5221 cases! cloud.google.com/blog/topics/th…

3 27 127 14K 58

NullSecX @NullSecurityX

2 days ago

XSS to RCE in Google IDX Workstation: A Technical Deep Dive $22,500 Bounty Earned 💰 nullsecurityx.codes/xss-to-rce-goo… #BugBounty #CyberSecurity #Hacking #Google

1 33 190 7K 84

Fabio Pagani @pagabuc

2 days ago

Had a blast attending and presenting at @labscon_io for the second year in a row! If you are curious about BYOVD in UEFI, and how we at @binarly_io uncovered an incomplete patch for a Supermicro BMC bug, check out our talk slides below👇

1 15 25 6K 8

Download Image

Clandestine @akaclandestine

3 days ago

GitHub - MatheuZSecurity/Singularity: LKM rootkit for modern kernels (6x) github.com/MatheuZSecurit…

0 3 9 1K 9

Swissky @pentest_swissky

2 days ago

pyghidra-mcp: Headless Ghidra MCP Server for Project-Wide, Multi-Binary Analysis - @clearbluejar clearbluejar.github.io/posts/pyghidra…

0 3 8 1K 3

Mr. OS @ksg93rd

2 days ago

#tools #NetSec #Purple_Team_Exercises "Domain Fronting is Dead, Long Live Domain Fronting: Using TLS 1.3 to evade censors, bypass network defenses, and blend in with the noise", DEF CON 28. ]-> praetorian.com/blog/domain-fr… ]-> Google Cloud HTTP/HTTPS Redirector -…

0 1 1 167 2

Lindsey O-Donnell-Welch @LindseyOD123

3 days ago

A recent @HuntressLabs blog post sparked some conversation about how EDR products work, how investigations play out, and why forensic data, like browser history artifacts, is valuable to an investigation. We pulled that thread a bit further. huntress.com/blog/what-is-m…

1 4 14 1K 0

dr. Jonas Birch @drJonasBirch

3 days ago

Binary operations in C youtu.be/DPmyUAvLVII JB #cprogramming #bitwise

0 26 122 4K 90

Fabian Bader @fabian_bader

3 years ago

📢If you missed my talk about Azure Attack Path at the @identitysummit, I just updated my blog with content created for the conference. New analytic rules, demo attack script and the slides are not available. #Azure #Security #Defend #Attack #Sentinel cloudbrothers.info/en/azure-attac…