Let me explain where this incredible vulnerability in Notepad++ comes from... my blog post from 3w ago. The problem is there's no vuln. I described this as sneaky init access. You might as well do binary patching of any PE file in the world.
#infosecprint3m.github.io/blog/dll-sidel…
Anime.js 4.2.0 is out!
🧩 All modules can now be imported individually with subpaths
🎨 CSS variable values support
🏹 Simpler spring API with bounce & duration params
📈 More WAAPI built-in easing functions
🎛️ And an easing editor!
Plus tons of fixes and improvements!
Lateral movement getting blocked by traditional methods?
@werdhaihai just dropped research on a new lateral movement technique using Windows Installer Custom Action Server, complete with working BOF code. ghst.ly/4pN03PG
Ripgrep is slow.
Nowgrep is fast, because I bypass the Windows slop and go straight to NTFS.
Here's Ripgrep vs. Nowgrep searching through 300k files on a drive with 2M+.
Nowgrep is written from scratch in C99.
No borrow checker.
MaldevAcademyLdr.2: github.com/Maldev-Academy…
Key Features:
- Steganography
- Thread stack spoofing
- Hiding PE payload in GPU memory
- Syscall tampering using the Trap Flag
- Full list of features available in the README
MaldevAcademyLdr.2: github.com/Maldev-Academy…
Key Features:
- Steganography
- Thread stack spoofing
- Hiding PE payload in GPU memory
- Syscall tampering using the Trap Flag
- Full list of features available in the README
Grok 4 Heavy is a version of Grok 4 that uses multiple agents. Instead of relying on just one model, agents work together simultaneously on the same task. After they produce their results, they compare their findings and agree on a final answer.
In Humanity's Last Exam, Grok 4…
Grok 4 Heavy is a version of Grok 4 that uses multiple agents. Instead of relying on just one model, agents work together simultaneously on the same task. After they produce their results, they compare their findings and agree on a final answer.
In Humanity's Last Exam, Grok 4… https://t.co/P7OTuTkbUX
Pretty solid offensive #Linux combo: ptrace-inject for proc injection + Sneaky_remap for hiding from /proc/pid/maps + TLS callback shared object for encrypted reverse shell with silly process masquerading as "ps aux". I am just connecting the dots, huge thanks to Artemis21 and…
Ladies, Frogs & Gentlemen, a week ago I reverse engineered a VM with a custom instruction set for the first time, here is the blog post, enjoy:
deluks2006.github.io/Reverse-Engine…
🚿 SYS PROMPT LEAK 🚿
Here are the full sys instructions for Droid, the current top AI coding agent in the world!
PROMPT:
"""
<Role>
You are Droid, an AI software engineering agent built by Factory (factory.ai).
You are the best engineer in the world. You write…
SockTail - a small binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy on port 1080. It's meant for red team operations where you need network access into a target system without setting up port forwards or noisy tunnels. github.com/Yeeb1/SockTail
GM 👋
You can leverage the lpEnvironment parameter of CreateProcess() as a storage buffer for arbitrary payload data. Ensure that all NULL bytes are stripped to avoid premature parsing termination. Once staged, redirect or resume a thread with its instruction pointer targeting…
Fact: Remote service and scheduled task creation bypass firewalls on DCs and Win file servers because of SMB tunnelling.
Solution: Create RPC filters that block MS-SCMR and MS-TSCH over named pipes. The latter has 3 UUIDs, so blocking the atsvc pipe is more elegant. #DSInternals
new backdoor method that leverages nmap with setuid permissions to execute commands as root through a Lua-loaded C library, I hope you enjoy it!
here is the url: github.com/azuk4r/nmap_ba…
special thanks to @hackerfantastic for giving me some pointers to make this work
Hello.
The Huntress CTF is back for its third year. October 1st through October 31st with new challenges each and every day, all month long. Free to play, register at any time (even while the game is running!) and play whenever you want at your leisure.
ctf.huntress.com
564 Followers 654 FollowingSenior Security Consultant @ Reversec (fka @withconsulting).
Talks mostly about security.
As Rino put it, sometimes maybe good sometimes maybe shit
653 Followers 355 FollowingOFFICIAL DAVID LESTER British-American psychologist and emeritus professor of psychology. INFOS ABOUT QFS IS HERE. WAKE UP AMERICA 🇺🇸
161 Followers 3K Following🌸 X Expert , animator , 2D/3D Characters , Nsfw 🍫 logo/banner , emotes and all your twitch/Vtube stuff ♥️ Design is an art . So I'm Surely 🌺🔞
890 Followers 1K Following2x Founder @VoltAI & @Hackmetrix, Security Researcher. D̶o̶n̶’̶t̶ have the drive to become a big scary famous hacker. Always watching, never seen.
1K Followers 7K FollowingDecoding The Hidden, Tracing The Lost, Illuminating Digital Shadows. Ethical Hacker Luthor👺: Small Forensic Clues, Massive Impact.
40K Followers 472 FollowingBuilt an AI study note tool → 300k users, $20.5K/month 🤙 https://t.co/rNhDgb5YRP, Learn how I market my app all organic 👉 https://t.co/q7hc6iXfjZ → $5k/month
59K Followers 134 FollowingWe make tinygrad and sell tinybox, the best perf/$ AI computer.
$25k for 4x 5090 in a quiet box.
Our mission is to commoditize the petaflop.
11K Followers 243 FollowingA fast-growing conservative organization focused on giving you the America First Insight on whats happening in Washington DC!
20K Followers 2K FollowingPrincipal Identity Security Researcher at Microsoft. Ex-Secureworks. (MSc, MEng, PhD, CITP, CCSK).
And yes, opinions are my own ;)
564 Followers 654 FollowingSenior Security Consultant @ Reversec (fka @withconsulting).
Talks mostly about security.
As Rino put it, sometimes maybe good sometimes maybe shit
38K Followers 1K FollowingYour 24/7 source for breaking news and insider insights | Powered by @Kalshi
Tracking the latest political polls and Elections in one place https://t.co/BXYKG3aNV3
7K Followers 77 FollowingProfessional redteamer and malware development enthusiast ! I will share some tips and experiences. Look at my work here : https://t.co/cxLBvW7pcI
22K Followers 55 Following#BHMEA25 | @TahalufGlobal @SAFCSP in assoc. with @BlackHatEvents | Dec 2-4 2025 📍Riyadh Exhibition and Convention Center, Malham
190K Followers 2K FollowingCo-founder & CEO @Brave Software (https://t.co/NV4bmd6vxq) and @attentiontoken (https://t.co/XhGIrdBJWu). Co-founded Mozilla & Firefox. Created JavaScript.
6K Followers 2K FollowingNavy (ret) Surface Warfare Officer & missile defender with a PhD & a side of fries. A perfectly flawed human. Opinions = my own. Correlation ≠ Causation
8K Followers 98 FollowingSharing resources from the cybersecurity community • Passionate learner and creator • YouTube: https://t.co/1BmE6QOd0D • Turn ON Notifications 🔔
1K Followers 473 Followingoffsec & ai research at @udegcucei
co-founder: @cactuscon
advisor: @hackgdl
ex: @bishopfox @spiderlabs @mvpaward
no easy answers - sola gratia
opines are mine