Febin @febin0x1

CEH(Master) | eJPT | OSCP | CRTP | eWPTX | 13x CVE | {passion:hacking} | StarGazer, loves Astronomy #infosec #cybersecurity #hacking root@localhost Joined June 2020

Tweets

530
Followers

325
Following

406
Likes

3K

Suraj Malhotra @MrT4ntr4

3 days ago

I just wrote about Windows User-Mode Heap Exploitation. mrt4ntr4.github.io/Windows-Heap-E… Based on a HitconCTF challenge by @scwuaptx, it walks through exploiting a heap overflow vulnerability and abusing file-structure corruption to achieve arbitrary read/write! Hope you like it 🍻

2 51 227 13K 115

Download Image

0xdf @0xdf_

3 days ago

Puppy is a nice AD assume breach box. I'll abuse GenericWrite on a group, GenericAll on a user, bruteforce a KeepassXC DB, find creds in a config, and dump DPAPI stored credentials. 0xdf.gitlab.io/2025/09/27/htb…

1 26 105 9K 51

OccupytheWeb @three_cube

a month ago

Yes, an innocent Looking jpeg can deliver RCE Malware! hackers-arise.com/the-one-man-ap…

20 102 599 62K 443

Florian Hansemann @CyberWarship

2 months ago

''Windows Inter Process Communication A Deep Dive Beyond the Surface - Part 2'' #infosec #pentest #redteam #blueteam sud0ru.ghost.io/windows-inter-…

0 20 44 3K 35

Hacking Articles @hackinarticles

4 months ago

Active Directory Pentesting Using Netexec Tool: A Complete Guide hackingarticles.in/active-directo… #infosec #CyberSecurity #CyberSecuritytips #microsoft #redteam #informationsecurity #CyberSec #ai #offensivesecurity #infosecurity #cyberattacks #security #oscp #CyberSecurityawareness…

6 128 464 28K 427

Download Image

Adam Chester 🏴‍☠️ @_xpn_

4 months ago

New blog post is up! Stepping out of my comfort zone (be kind), looking at Meta's Prompt Guard 2 model, how to misclassify prompts using the Unigram tokenizer and hopefully demonstrate why we should invest time looking beyond the API at how LLMs function. specterops.io/blog/2025/06/0…

5 48 126 16K 47

Sarah Young @_sarahyo

4 months ago

Okay so this is HUGE - our amazing AI red team have open sourced their AI red team labs so you can set up your own training! aka.ms/AIRTlabs @ram_ssk

8 349 1K 57K 1K

Smukx.E @5mukx

6 months ago

Introduction to Windows kernel exploitation: * mdanilor.github.io/posts/hevd-0/ * mdanilor.github.io/posts/hevd-1/ * mdanilor.github.io/posts/hevd-2/ * mdanilor.github.io/posts/hevd-3/ * mdanilor.github.io/posts/hevd-4/

1 125 512 23K 416

Download Image

0xor0ne @0xor0ne

6 months ago

Beginners introduction to Linux kernel rootkits inferi.club/post/the-art-o… #Linux #cybersecurity

15 162 902 34K 536

Download Image

Operation Zero @opzero_en

6 months ago

We are looking for: — Telegram 1-click RCE — Up to $500,000 — Telegram 0-click RCE — Up to $1,500,000 — Telegram full chain — Up to $4,000,000 In the scope are exploits for Android, iOS, Windows. The prices are depending on limitations of zero-days and obtained privileges.…

21 68 496 125K 295

Bobby Cooke @0xBoku

6 months ago

I've received messages about credit for discovering executing arbitrary JS in Electron applications. I was not the first person to discover this, just the first to make a whole C2 for it in Node.JS instead of executing a command to load a beacon. If you have prior published…

2 15 85 10K 21

0xor0ne @0xor0ne

6 months ago

In depth analysis of Scudo’s internals security measures (Android’s Hardened Memory Allocator) usenix.org/system/files/w… #infosec #Android

3 40 220 9K 69

Download Image

The Citizen Lab @citizenlab

6 months ago

🆕 REPORT: Our first investigation into Israel-based spyware company Paragon Solutions reveals multiple threads linked to the proliferation of its mercenary spyware operations across the globe. citizenlab.ca/2025/03/a-firs…

3 153 238 39K 85

chompie @chompie1337

7 months ago

Amazing blog post by Bobby! Highly recommend if you’re interested in red teaming ttps against hardened environments. Stay tuned for a follow up post from me on abusing trusted electron apps to bypass the strictest WDAC policies and execute shellcode natively 👀

Bobby Cooke @0xBoku

7 months ago

21 132 316 36K 123

1 15 87 9K 23

starlabs @starlabs_sg

7 months ago

STAR Labs Windows Exploitation Challenge Writeup We're happy to announce that @Fr0st1706 solved our recent Windows exploitation challenge & earned a ticket to @offbyoneconf ! 🎉 Full writeup here: starlabs.sg/blog/2025/03-s… Thank you to everyone who participated!