=! @addContent

||Malloy|| #infosec Enthusiast addcontent.me Kenya Joined May 2012

Tweets

4K
Followers

204
Following

805
Likes

8K

Alex Neff @al3x_n3ff

4 days ago

Update on the NTLM reflection attack: ctjf discovered that SMB signing enforcement does NOT protect against the NTLM reflection attack🛡 Cross-protocol relaying is still possible, even with mitigations in place. Only patching your system fully mitigates the vulnerability! 1/4🧵

6 80 379 46K 229

Download Image

codewhisperer84 @codewhisperer84

5 days ago

Check out Titanis, my new C#-based protocol library! It features implementations of SMB and various Windows RPC protocols along with Kerberos and NTLM. github.com/trustedsec/Tit…

13 186 534 83K 230

Nicolas Krassas @Dinosn

a week ago

AI powered clipboard. github.com/evilsocket/cli…

0 4 13 4K 10

Panos Gkatziroulis 🦄 @netbiosX

4 weeks ago

TTP-Threat-Feeds - a script-powered threat feed generator designed to extract adversarial TTPs and IOCs using AI github.com/bobby-tablez/T…

0 21 66 4K 40

Jay T. @johntroony

4 weeks ago

Cybersecurity is a mirror: it exposes flaws not just in systems, but in people. Those who lead as well as they secure are always a step ahead. You can set the standard, influence your team, and make every decision count. Someone on your team needs to hear this! Pass it along.

0 2 5 121 0

Print3M @Print3M_

4 weeks ago

DLL Sideloading for Initial Access – Red Team Operator's Guide 🔥 (new article) print3m.github.io/blog/dll-sidel… - finding software to backdoor - finding DLL and function to backdoor - legit software backdooring - OPSEC considerations #redteam #infosec #malware #security

1 100 338 18K 212

Download Image

The Bug Bounty Hunter @tbbhunter

a month ago

Log4Shell (Log4J): Advanced Exploitation Guide intigriti.com/researchers/bl… @intigriti #bugbounty

0 9 50 2K 23

Logan Goins @_logangoins

a month ago

I Just documented a cool way to authenticate proxied tooling to LDAP in an AD environment using C2 payload auth context, without stealing any tickets or hashes! Keep tooling execution off-host and away from EDR on your Red Team assessments! specterops.io/blog/2025/08/2…

5 118 403 31K 220

Remedy @xyz_remedy

a month ago

This is how attackers legally hack crypto wallets. A 25-minute guide used by real pentesters to break into browser wallet extensions like MetaMask. Here’s how they do it:

2 75 444 28K 591

Download Image

Panos Gkatziroulis 🦄 @netbiosX

2 months ago

Fraud Tools, Tactics, and Techniques (FT3) is Stripe's adaptation of ATT&CK-style security frameworks, specifically designed to enhance our understanding of the tactics, techniques, and procedures (TTPs) used by actors in fraudulent activities github.com/stripe/ft3

0 55 213 13K 209

Michael Bargury @mbrg0

2 months ago

we hijacked microsoft's copilot studio agents and got them to spill out their private knowledge, reveal their tools and let us use them to dump full crm records these are autonomous agents.. no human in the loop #DEFCON #BHUSA @tamirishaysh

105 899 9K 1.2M 7K

Download Image

OS Dev @OSdev_

2 months ago

Writing a WinDbg extension youtu.be/ly-nZjuLNkw?fe…

0 36 164 13K 95

sapir federovsky @sapirxfed

2 months ago

This post is SO GOOD! I knew nothing about easy auth, It's so interesting! And the abuse ideas are so creative! It's not the first time i see how env variables on app lead to such things (See MI research by NetSpy). Go read it! dazesecurity.io/blog/abusingEa…

1 12 76 6K 44

Smukx.E @5mukx

2 months ago

Introduction to COM Hijacking – Persistence pentestlab.blog/2020/05/20/per…

1 52 214 9K 123

Download Image

Panos Gkatziroulis 🦄 @netbiosX

2 months ago

LudusHound - a tool for red and blue teams that transforms BloodHound data into a fully functional, Active Directory replica environment via Ludus for controlled testing. github.com/bagelByt3s/Lud…

0 32 107 4K 75

S3cur3Th1sSh1t @ShitSecure

2 months ago

Feeling super bad right now for it but I was too hasty here. I'm 100% sure I got network SYSTEM auth for multiple triggers the last days but now all besides from one just lead to user auth. I'll take down the repo as the initial promise was wrong here, need to investigate more.🙄

S3cur3Th1sSh1t @ShitSecure

2 months ago

3 109 326 33K 202

Download Image

5 14 90 19K 31

SpecterOps @SpecterOps

3 months ago

SCCM’s Management Points can leak more than you’d expect. @unsigned_sh0rt shows how Network Access Accounts, Task Sequences, and Collection Settings can be stolen by relaying a remote Management Point to the site database. Check it out ⬇️ ghst.ly/4eNLaHU

1 80 167 13K 89

David @dmcxblue

3 months ago

OK, I'm glad I want back to read the SpecterOps blog on grabbing access tokens from ESTSAUTHPERSISTENT, thanks that it's already written in python a quick patch was it #redteam

1 1 41 3K 23

Download Image

Jay T. @johntroony

3 months ago

To any political party or formation serious about democratic change; I offer digital forensics, tech readiness & OpSec support. Bonus services included (free if needed) just to help see the end of this regime. If you’re organizing, I’m ready to help. Let’s talk.

0 7 4 401 2

Download Image

Gray Hats @the_yellow_fall

3 months ago

A critical NTFS vulnerability (CVE-2025-49689) allows local attackers to escalate to SYSTEM privileges in Windows 11 using a crafted VHD. Avoid untrusted VHDs! meterpreter.org/critical-ntfs-…