Noah @hack4mate

Red-Teamer | Pentester | Student | total n00b 0.0.0.0 Joined March 2019

Tweets

83
Followers

27
Following

211
Likes

828

Dirk-jan @_dirkjan

2 weeks ago

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-glob…

145 897 3K 435K 1K

LaurieWired @lauriewired

3 weeks ago

VLANs protect you as much, if not *moreso* than traditional antivirus, yet I barely know 2 people IRL that use them. IoT garbage? VLAN Work PC? VLAN Gaming Console? VLAN Who cares if something is compromised if it can't talk to anything useful.

199 159 4K 189K 989

BlackSnufkin @BlackSnufkin42

4 weeks ago

CVE-2025-52915 assigned - my first vulnerability!🥳 A classic BYOVD case: kernel driver with unrestricted process termination. Vendor coordination turned out more challenging than the exploit itself. Technical write-up: blacksnufkin.github.io/posts/BYOVD-CV… #ExploitDev #CVE #BYOVD #RedTeam

0 45 130 8K 45

Meysam @R00tkitSMM

a month ago

My timeline is full of 𝗶𝗢𝗦 𝟬-𝗰𝗹𝗶𝗰𝗸 𝗲𝘅𝗽𝗹𝗼𝗶𝘁 again. If you’re new to these bugs, check out my write-up on my own fuzzing experience with 𝗜𝗺𝗮𝗴𝗲𝗜𝗢 from last year. r00tkitsmm.github.io/fuzzing/2024/0…

2 87 430 35K 287

Chetan Nayak (Brute Ratel C4 Author) @NinjaParanoid

a month ago

I know a lot of people will hate me for saying this but it has to be said. I get a lot of DMs saying RT is getting harder everyday, traditional loaders dont work anymore, opensource tools tend to crash or get detected instantly. But wasnt that the whole point of Red team? Thats…

23 57 377 33K 82

chompie @chompie1337

a month ago

I've been asked countless times how to learn VR & xdev. The answer is always: "do something you think is cool". It's hard to figure out what to do. Try the PhrackCTF which I've now open-sourced. It's not a contrived CTF - modeled after real vulnerabilities github.com/xforcered/Phra…

10 144 616 49K 385

zhassulan zhussupov @cocomelonckz

a month ago

cocomelonc.github.io/malware/2025/0… next one from my blog. tLab #technologies company recently discovered one of the first in #Kazakhstan in interesting #phishing campaign aimed at one of the clients. #hacking #research #malware #programming #purpleteam #maldev #cybercrime #apt #microsoft

0 7 41 3K 28

eversinc33 🤍🔪⋆｡˚ ⋆ @eversinc33

2 months ago

As a little follow up, I wrote a small blog post/tutorial on how to reverse engineer windows drivers with IDA - this is aimed at people that newer touched drivers before and covers IOCTL codes, IRPs and some IDA shenanigans with unions. eversinc33.com/posts/driver-r… Enjoy :3

4 130 542 34K 439

Download Image

zhassulan zhussupov @cocomelonckz

2 months ago

cocomelonc.github.io/macos/2025/08/… next one from my blog. no exploits here - just clean mechanics you can reuse in #redteam/#blueteam practice/#exercises. #cybersecurity #hacking #malware #macos #apple #programming #research #purpleteam #maldev #malwareanalysis #arm #intel

1 34 157 14K 87

Noah @hack4mate

2 months ago

Hey, for those who use Laptops, what Laptops are you using for CTFs and Running VMs? Or how is your setup. :)

1 0 2 79 0

Justin Gardner @Rhynorater

2 months ago

This is crazy - one git clone --recursive and you're cooked. dgl.cx/2025/07/git-cl…

8 57 338 34K 203

R.B.C. @G3tSyst3m

2 months ago

It's high time I shared the final post in my buffer overflow series! We finally bypass ASLR and I also include a video walkthrough stepping through the debugging process. Thanks for taking the journey with me throughout this series 😀 g3tsyst3m.github.io/binary%20explo…

0 46 137 6K 76

incendiumrocks @incendiumrockz

2 months ago

I remember that I had to do some research online on how to make exploits for vulnerabilities over MS-RPC. With this blog, I hope to fill the gap on the lacking information available online on how to make these yourself. incendium.rocks/posts/Exploit-…

1 54 137 6K 77

spaceraccoon | Eugene Lim @spaceraccoonsec

2 months ago

I hacked an Optical Network Terminal (ONT)! This one was slightly more hardened than the usual ones, but thankfully hardware hacking expands your toolbox... spaceraccoon.dev/getting-shell-…

2 55 183 13K 68

vx-underground @vxunderground

2 months ago

Black Mass Volume III is on it's final stages of development. Our publisher has received it. If they don't yell at us and be mean, Black Mass Volume III will become available Friday, July 25th, 2025. It will be available online as a PDF for free. You can buy a physical copy for…

34 94 689 44K 147

Download Image

R.B.C. @G3tSyst3m

2 months ago

Part 4 of the Buffer Overflow series has been posted! In today's writeup, we learn how to create a decoder stub, introduce an obligatory nop sled, and use memcpy to copy the encoded shellcode to our newly created memory region using VirtualAlloc 😺 g3tsyst3m.github.io/binary%20explo…

1 59 218 13K 179

zhassulan zhussupov @cocomelonckz

3 months ago

cocomelonc.github.io/macos/2025/07/… next one from my blog. ASM code tested on Intel, C code tested on Intel and ARM (M1) #malware #hacking #programming #blackhat #redteam #blueteam #maldev #research #assembly #intel #arm #cybercrime #cybersecurity #apt

0 11 30 2K 14

vx-underground @vxunderground

3 months ago

Dear Red Team nerds, If you're curious what a successful and serious malware campaign looks like (if you want to make a more serious Red Team engagement) I HIGHLY suggest reading the write up on the new malware campaign called TransferLoader zscaler.com/blogs/security…

16 287 1K 74K 1K

Max dcb @max2cbx

3 months ago

🧪 New technique: DreamWalkers A reflective shellcode loader that crafts a synthetic, clean call stack. Achieving stealthy execution from memory-mapped modules. 🔗 maxdcb.github.io/DreamWalkers/ #MalwareResearch #RedTeam #WindowsInternals #OffSec

3 78 188 11K 121

R.B.C. @G3tSyst3m

3 months ago

Here's Part 2 of the Buffer Overflows in Modern Era series. In this post, we'll perform the actual buffer overflow using Python, learn how ROP works + DEP restrictions, and once again execute the obligatory Windows calculator 😸 g3tsyst3m.github.io/binary%20explo…