_Ray @_RayRT

Senior Adversarial Engineer at Lares, Member of EVILCORP\Domain Fathers. https://t.co/SIwC7MLXmP Joined June 2018

Tweets

684
Followers

356
Following

838
Likes

3K

Luke Turvey @TurvSec

4 days ago

I just released Flareprox 🔥 A Cloudflare based Fireprox alternative that allows you to route HTTP traffic through Cloudflare, to gain mostly unique IP Addresses, to avoid detection and blocks.

10 179 1K 64K 922

Download Image

🚀H-C0N returns in 2026! Abierto CFP Los próximos 6 y 7 de febrero en Madrid volvemos con una nueva edición de H-C0N. ¿Quieres impartir una charla o taller y convertirte en uno de los ponentes de esta sexta edición? No lo dudes y mándanos tu propuesta a docs.google.com/forms/d/e/1FAI…

1 27 35 4K 2

Download Image

Dirk-jan @_dirkjan

2 weeks ago

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-glob…

145 897 3K 435K 1K

Silas Cutler (p1nk) @silascutler

2 weeks ago

cool post kennedn.com/blog/posts/tap…

0 23 73 11K 51

_Ray @_RayRT

3 weeks ago

Recently, a friend fell victim to an email account compromise so I decided to investigate the attack chain to help. The attack leveraged well-known techniques such as stolen credentials, malicious OAuth apps, and hidden Outlook rules: rayrt.gitlab.io/posts/Persiste…

0 1 1 354 1

BlackArrow @BlackArrowSec

4 weeks ago

AvePoint has fixed a vulnerability in DocAve, Perimeter and Compliance Guardian discovered by our researchers @m1ntko and @Calvaruga. This vulnerability can be used to achieve Remote Code Execution (RCE) in affected systems. ➡️ Advisory: avepoint.com/company/docave…

0 8 8 1K 0

Download Image

Lares @Lares_

a month ago

Understanding #ScatteredSpider is key to smarter defense. At Lares, we simulate advanced TTPs: social engineering, malware, lateral movement & exfiltration, to expose gaps and improve readiness. ✍️Raúl Redondo (@_RayRT), Senior Adversarial Engineer buff.ly/l5GvTbw

1 1 3 234 0

Luke Turvey @TurvSec

3 months ago

I've got ~5000 IP addresses to port scan for an engagement this week. Ax did it for me in minutes using hundreds of AWS EC2s. Ez github.com/attacksurge/ax

7 28 154 9K 128

Luke Turvey @TurvSec

3 months ago

CVE-2025-50061, is a stored XSS @s0lfer and I found when testing an Oracle product a couple months ago. CVE details and fix will be released in a couple days 🙏

3 1 6 741 1

Ricardo Ruiz @RicardoJoseRF

3 months ago

I wrote a short post about how you only need the NtReadVirtualMemory address for dynamic API resolution, plus how you could use a vulnerable binary to leak its address (and you would not have GetProcAddress, GetModuleHandle or LoadLibrary in the IAT) - github.com/ricardojoserf/…

1 14 33 2K 16

SEKTOR7 Institute @SEKTOR7net

3 months ago

Modern lateral movement techniques detection (mainly DCOM/DCE/RPC/RDP) with examples. Some assumptions worth mentioning: visibility into source IP/port/hostname, logon activity, remote process metadata. A blog post by @HuntressLabs team. Awesome read, guys!…

1 62 247 10K 124

Download Image

Praetorian @praetorianlabs

4 months ago

🚨 New attack disclosed: GitHub Device Code Phishing John, Matt, and Mason reveal how they've been using this technique to compromise F500 orgs with high success rates. 📖 Blog covers methodology, red team case studies & detection strategies praetorian.com/blog/introduci…

1 64 154 68K 93

Synacktiv @Synacktiv

4 months ago

Microsoft just released the patch for CVE-2025-33073, a critical vulnerability allowing a standard user to remotely compromise any machine with SMB signing not enforced! Checkout the details in the blogpost by @yaumn_ and @wil_fri3d. synacktiv.com/publications/n…

5 263 598 197K 343

RedTeam Pentesting @RedTeamPT

4 months ago

🎉 It is finally time for a new blog post! 🎉 Join us on our deep dive into Windows Authentication Coercion and its current state in 2025, including some brand-new tooling ✨ #itsec #infosec #pentest #redteam blog.redteam-pentesting.de/2025/windows-c…

4 55 106 9K 65

Arun @dazzyddos

4 months ago

The original BadSuccessor research by @YuG0rd was too good to ignore, I couldn't wait to replicate it in my lab. I wrote a short post on operationalizing the technique with real-world, stealthy abuse paths. medium.com/p/429cefc36187

1 57 182 22K 104

Yuval Gordon @YuG0rd

4 months ago

🚀 We just released my research on BadSuccessor - a new unpatched Active Directory privilege escalation vulnerability It allows compromising any user in AD, it works with the default config, and.. Microsoft currently won't fix it 🤷‍♂️ Read Here - akamai.com/blog/security-…

22 373 866 159K 454

Download Image

Oliver Lyak @ly4k_

5 months ago

👇 github.com/ly4k/Certipy/d…

16 127 299 36K 61

🕳 @sekurlsa_pw

6 months ago

Certipy-merged has these PRs merged compared to the orginal Certipy from @ly4k_ . And now also Kerberos ADCS web enrollment support. So you probably want the merged version 🙃.

ret2src @ret2src

6 months ago

Certipy-merged has these PRs merged compared to the orginal Certipy from @ly4k_ . And now also Kerberos ADCS web enrollment support. So you probably want the merged version 🙃. https://t.co/ZA0aDtdv4W

1 23 86 14K 28

0 35 123 29K 52

Download Image

krp @_kripteria

5 months ago

Im happy to announce Neo4LDAP — a query and visualization tool focused on Active Directory environments. It combines LDAP syntax with graph-based data analysis in Neo4j, offering an alternative approach to tools like BloodHound. youtube.com/watch?v=5V22K3… 🧵: 1/4

3 28 56 8K 39

Jonathan Peters @cod3nym

5 months ago

Stumbled over this new AMSI bypass. It works by manipulating the COM RPC communication used by AMSI to talk to AV engines. By hooking NdrClientCall3 which handles the RPC calls we can intercept AMSI scan requests before they reach the AV engine. I wrote a simplified version that…