Jeff Tchelong @jeff_tchelong
Passionné par la sécurité informatique et le Ethical Hacking Joined April 2022-
Tweets249
-
Followers16
-
Following451
-
Likes352
knew win10 had the dsquery.dll laying around but never knew what to do with it "rundll32.exe dsquery.dll OpenQueryWindow" will pop open a console for you and you can do some light LDAP recon you can also open with with win + ctrl + f probably useful for VDI/Citrix type tests
A quick and easy way to find services with unquoted service paths is to open up PowerShell and run the following: Get-WmiObject win32_service | select Name,PathName,StartMode,StartName | where {$_.StartMode -ne "Disabled" -and $_.StartName -eq "LocalSystem" -and $_.PathName…
Another hoontr find: tprtdll.dll (like so many others) exposes some Nt/Rtl/Zw functions. It doesn't redirect to ntdll, instead it makes the syscall itself - so you can call something like NtAllocateVirtualMemoryEx without ever touching ntdll! PoC: github.com/whokilleddb/fu…
Why're we still doing the Impacket thing when @SkelSec's stuff is so sick? gist.github.com/snovvcrash/a1a… (just kidding ofc, Impacket is forever in our hearts)
Why're we still doing the Impacket thing when @SkelSec's stuff is so sick? gist.github.com/snovvcrash/a1a… (just kidding ofc, Impacket is forever in our hearts) https://t.co/pLkvLGezEt
How Component Object Model (COM) works. #ThreatHunting #DFIR #Windows #Microsoft
#x33fcon 2025 lightning talks: Michał - Blue Team Blunders: 5 common SOC pitfails > youtu.be/oUc3Z7NEsqw
Feeling super bad right now for it but I was too hasty here. I'm 100% sure I got network SYSTEM auth for multiple triggers the last days but now all besides from one just lead to user auth. I'll take down the repo as the initial promise was wrong here, need to investigate more.🙄
Feeling super bad right now for it but I was too hasty here. I'm 100% sure I got network SYSTEM auth for multiple triggers the last days but now all besides from one just lead to user auth. I'll take down the repo as the initial promise was wrong here, need to investigate more.🙄
To trigger local SYSTEM authentication for relaying to ADCS or LDAP for LPE you would usually need the printer service or EFS service to be enabled (printerbug/petitpotam). Here is an alternative without this requirement 🤠 github.com/rtecCyberSec/R…
CVE-2025-33073 is really insane 🤯 Reproduce this attack in GOAD in 3 commands. x.com/Synacktiv/stat…
CVE-2025-33073 is really insane 🤯 Reproduce this attack in GOAD in 3 commands. x.com/Synacktiv/stat… https://t.co/DJHElRcIgk
CVE-2025-24813 is a critical security issue that affects Apache Tomcat versions from 9.0.0.M1 to 11.0.2. It allows remote code execution, information disclosure and malicious content injection github.com/Franconyu/Poc_…
DLL hijacking techniques reference #ThreatHunting #DFIR
RemoteMonologue is now live on the X-Force Red GitHub! 🔥 github.com/xforcered/Remo…
RemoteMonologue - A Windows credential harvesting attack that leverages the Interactive User RunAs key and coerces NTLM authentications via DCOM. Remotely compromise users without moving laterally or touching LSASS. Hope you enjoy the blog & tool drop 🤟 ibm.com/think/x-force/…
Active Directory Domain Services Elevation of Privilege Vulnerability (CVE-2025-21293) - A tale of mediocracy birkep.github.io/posts/Windows-…
TeamViewer - @whynotsecurity TL;DR: TeamViewer stored user passwords encrypted with AES-128-CBC with they key of 0602000000a400005253413100040000 and iv of 0100010067244F436E6762F25EA8D704 in the Windows registry. whynotsecurity.com/blog/teamviewe…
Credential Dumping: GMSA hackingarticles.in/credential-dum…
“Intune Attack Paths — Part 1” by Andy Robbins posts.specterops.io/intune-attack-…
some engines I use for digging deeper 👽 1- shodan.io 2- en.fofa.info 3- hunter.how 4- zoomeye.ai 5- search.censys.io
Lesley @l_lucchesi18
225 Followers 3K Following
⚡️ @InfosecZone
472 Followers 2K Following Bringing all ethical hackers together on Infosec Zone! Follow us to stay updated with the hacker community.
@belette_timorée @belettet1m0ree
121 Followers 281 Following ✒️tester 🏃🏾♂️Run.. Run with It!! Pick up Something Start to run with it!🏃🏾♂️
Annie @a_morey61
250 Followers 3K Following
Ellen @huntellen14
254 Followers 3K Following
Carmen @taylorcarmen22
327 Followers 3K Following
Alora Alarcon @AlarconAlo11397
34 Followers 560 Following 23=GreatestOfAllTime … Patience is virtue!!! ♏️ #LLSkoob 4LAA surprise on link below 🌧️}®️
Alicia @alicia_steiger7
262 Followers 3K Following
Philip Renaud @ygrek_te
225 Followers 324 Following « Quand tu parles avec un con peut-être il est entrain de faire pareil » || Data Science || Otaku || MIA SAN MIA 🤍❤️
Irwin Strachan @IrwinStrachan
933 Followers 1K Following
PowerShell Young Team... @PoSHYoungTeam
767 Followers 2K Following You can take the sysadmin out of the scheme, but you can't take the scheme out the sysadmin... Son of the Rock (@DumbartonFC)
Julie Hub @JulieInnovation
34 Followers 306 Following Web développeur Passionnée par le web et notamment les data analytics au service de l'intelligence artificielle. Travail chez DataCrack
Jerome Cauter @Jerome_cauter
42 Followers 392 Following développer web chez sueno digital, engagé contre la falsification des documents officiels
L0u!5e @Louisitaa
960 Followers 712 Following #cybersecurity #vpn Dirco @thegreenbow 👩🏻💻 Mbre @ACN_SecNum @clusif @Jeunes_IHEDN #blockchain ex SecGé ➡️ Club Français de la Cryptomonnaie
Offlink @_Offlink
22 Followers 118 Following OFFlink Liés par la connexion, Alliés de la déconnexion
R.B.C. @G3tSyst3m
1K Followers 125 Following Security Professional and Researcher with over a decade of experience. I'm fairly low profile, but share useful info from time to time.
Angelboy @scwuaptx
5K Followers 944 Following Senior Security Researcher at @d3vc0r3 MSRC 2024/2025 MVR Top 100
![[Hacker + lover of bash] I Don't know how to hack but i know how to pwnd!](https://pbs.twimg.com/profile_images/1176789748322643968/bEReriMR.jpg)
Ahsan Khan @hunter0x7
34K Followers 1K Following [Hacker + lover of bash] I Don't know how to hack but i know how to pwnd!
Youssef Sammouda (sam... @samm0uda
37K Followers 526 Following Hacker, bug bounty hunter, guy behind https://t.co/TBAtP71Cop. 1st in Meta bug bounty program for the last 6 years. YES Team Member
Yassine Aboukir 🐐 @Yassineaboukir
31K Followers 373 Following HackerOne Top 50, Elite, Pentest Lead, Ambassador, MVH Title and (former) Hacker Advisory Board • Digital Nomad • (Un)pro Athlete
Pentester Land @PentesterLand
31K Followers 492 Following فَوَرَبِّكَ لَنَسْأَلَنَّهُمْ أَجْمَعِينَ عَمَّا كَانُواْ يَعْمَلُون
shubs @infosec_au
56K Followers 2K Following Co-founder, security researcher. Building an attack surface management platform, @assetnote
James Kettle @albinowax
79K Followers 94 Following Director of Research at @PortSwigger aka @Burp_Suite. Find my research, tools & contact details at https://t.co/vP6UbGmvl3
Justin Gardner @Rhynorater
35K Followers 2K Following Christian | Full-time Bug Bounty Hunter | Host of @ctbbpodcast | Advisor @CaidoIO | 4x LHE MVH | 🗣️ English, 日本語 | ♥️ @mariahchan_ ♥️
publiclyDisclosed @disclosedh1
65K Followers 2 Following This is an unofficial HackerOne public disclosure watcher who keeps you up to date about the recently disclosed bugs. By @NOBBD
spaceraccoon | Eugene... @spaceraccoonsec
25K Followers 301 Following Here to learn! Infosec@Open Government Products | White Hat && SecOps
db @whokilleddb
1K Followers 509 Following Maldev @bhinfosecurity | Finding increasingly stupid ways to do simple things
eversinc33 🤍🔪�... @eversinc33
6K Followers 1K Following computers be computin | https://t.co/Eiur8iOJQ4
LeakIX @leak_ix
7K Followers 236 Following Provide comprehensive visibility into internet-facing assets. Looking for vulnerabilities and misconfigurations 24/7 since 2020. https://t.co/MEjkffN1xg
Tetsuo @tetsuoai
214K Followers 1K Following Low-level dev since '94 | CS/Math & C/Assembly Projects: @7etsuo @beeldcoin @groktprompt c/asm 🇺🇸
Tavis Ormandy @taviso
130K Followers 632 Following Vulnerability researcher at Google. This is a personal stream, opinions expressed are mine. I'm also @[email protected]
Ori Damari @0xrepnz
6K Followers 259 Following Low level developer, Reverse engineer, Windows kernel. Read my blog! 😋
Thomas Roccia 🤘 @fr0gger_
32K Followers 2K Following AI Security x Threat Intel · Sr. Threat Researcher @Microsoft · Creator of #Unprotect & #NOVA · Malware Warlock · Python 🧡 · Prev @McAfee_Labs · Views mine 😈
Matthew @embee_research
14K Followers 2K Following Security Researcher, Creating and Sharing Educational Content.
UNPACME @unpacme
4K Followers 2 Following An automated malware unpacking service from OpenAnalysis Inc.
Jiří Vinopal @vinopaljiri
10K Followers 469 Following Threat Researcher at Check Point @_CPResearch_ #DFIR #Reversing - All opinions expressed here are mine only. https://t.co/iWvwWF1AnN
The DFIR Report @TheDFIRReport
62K Followers 0 Following Real Intrusions by Real Attackers, the Truth Behind the Intrusion. Services: https://t.co/XW613EKt2w
Reverse Engineering a... @re_and_more
15K Followers 521 Following RE and More by Alexey Kleymenov (https://t.co/s1pWjL46AW). Private classes and group workshops in malware analysis and reverse engineering. #infosec #malware
Greg Linares (Laughin... @Laughing_Mantis
37K Followers 2K Following 20+ yrs in Infosec. Malware Influencer. I turn Malware into Art and Music. Art @MalwareArt. 4x Pwnie Nominee. 𝕍𝕏. GameDev. Autistic.
Tim Misiak @timmisiak
8K Followers 278 Following OS/systems engineer. Worked on WinDbg for a while. I write about low level tech sometimes. On bluesky: @timdbg.com On mastodon/fediverse: @[email protected]
Pavel Yosifovich @zodiacon
14K Followers 917 Following Windows Internals expert, author, and trainer. Teaching system programming & debugging at TrainSec. Check out my books & courses! 🚀 #WindowsInternals #TrainSec
Stephen Sims @Steph3nSims
24K Followers 833 Following Perpetual Student | SANS Fellow | Musician | Braggart Hater | Gray Hat Hacking | VR | 🏂 | deadcode | https://t.co/CadJehomsU
Alexandre Borges @ale_sp_brazil
28K Followers 147 Following Vulnerability Researcher and Exploit Developer
Justine Tunney @JustineTunney
40K Followers 328 Following I built a C library that lets you compile 12kb static binaries that run natively on Linux, Mac, Windows, FreeBSD, OpenBSD, NetBSD and BIOS using just GCC/Clang.
GuidedHacking @GuidedHacking
53K Followers 393 Following Reverse Engineering & Game Hacking Courses @ https://t.co/Dl5ED4o7YS
hasherezade @hasherezade
89K Followers 909 Following Programmer, #malware analyst. Author of #PEbear, #PEsieve, #TinyTracer. Private account. All opinions expressed here are mine only (not of my employer etc)
Jack Halon @jack_halon
5K Followers 400 Following Red Team and Offensive R&D at @CrowdStrike | Powered by ☕🍻🍩
Denis Skvortcov @Denis_Skvortcov
635 Followers 96 Following Independent information security researcher • Lead application security researcher at AppSec @Kaspersky • OSCP OSWE
Cyber Advising @cyber_advising
14K Followers 32 Following Cyber Security Consulting | Ethical Hacking & Exploit Research 🕵️♂️ https://t.co/brWqIrIqA9
Tom Dörr @tom_doerr
102K Followers 2K Following Follow for posts about GitHub repos, DSPy, and agents Subscribe for top posts DM to share your AI project (Due to volume of DMs I'll prioritize subscribers)
Nick Carr @ItsReallyNick
38K Followers 3K Following Tech Director / Threat Intelligence at Microsoft. Previously, Director of Incident Response & Intel Research at Mandiant. Former Chief Technical Analyst at CISA
Peter Carson @carsonpeter
332 Followers 64 Following
Ru Campbell @rucam365
8K Followers 1K Following Microsoft Security MVP • Dad, metal, lifting, wrestling, cars • Author, Mastering Microsoft 365 Defender • @Threatscape • @M365SandCUG • https://t.co/CaVgOm8IvJ
Sean Metcalf @PyroTek3
36K Followers 618 Following Identity Security Architect @ TrustedSec. Microsoft Certified Master #ActiveDirectory & former Microsoft MVP. Co-Host @ Enterprise Security Weekly. He/Him. #BLM
Olaf Hartong @olafhartong
17K Followers 966 Following @FalconForceTeam | researcher with a camera | Microsoft MVP | Snow man role model
TheGreenBow Software @thegreenbow
240 Followers 195 Following Protect your connections in any situation
OtterHacker @OtterHacker
7K Followers 77 Following Professional redteamer and malware development enthusiast ! I will share some tips and experiences. Look at my work here : https://t.co/cxLBvW7pcI
SysOps Pratique @sysopspratique
6K Followers 5 Following Suivez les dernières actualités de SysOps Pratique (ex Linux Pratique), le bimestriel spécialisé dans les solutions open source, traitant de #SysOps et #DevOps.Trends for United States
You might like
