optional @optionalctf

The proud owner of two brain cells. HTB with @barctf | OSCP, CRT, CRTL youtube.com/c/optionalctf Joined January 2019

Tweets

2K
Followers

4K
Following

288
Likes

2K

Dominic Chell 👻 @domchell

5 days ago

This release is probably going to be one of our biggest and most impactful! Kudos to the team @peterwintrsmith @modexpblog @s4ntiago_p @GigelV41464 @saab_sec 🙌

MDSec @MDSecLabs

5 days ago

This release is probably going to be one of our biggest and most impactful! Kudos to the team @peterwintrsmith @modexpblog @s4ntiago_p @GigelV41464 @saab_sec 🙌

1 23 110 20K 38

Download Image

3 14 101 13K 18

ThePrimeagen @ThePrimeagen

3 weeks ago

i never saw this coming

338 1K 21K 797K 1K

Download Image

PDQ SmartDeploy versions prior to 3.0.2046 used static, hardcoded encryption keys for cred storage. Low-privileged users could potentially access admin creds from registry or deployment files. @unsigned_sh0rt unpacks his testing in his latest blog post. ghst.ly/4mjyuvw

2 52 127 15K 51

Jord @0xLegacyy

2 months ago

Developing a scriptable (pwndbg-like) debugger for windows. Few more things we need to iron out but will be releasing soon 🐸

6 19 168 11K 34

Download Image

Adam Langley @BuildHackSecure

2 months ago

Here’s my slides from today’s “Regex For Hackers” talk at DEFCON with @NahamSec, bookmark this for some exciting news in the near future docs.google.com/presentation/d…

8 96 495 35K 509

kreep @kreepsec

2 months ago

Had an awesome time at #DefCon 33. Lots of new discoveries, first time speaking at the #redteamvillage along with @zer0phat and met lots of cool people. Looking forward to the next one!

1 1 4 425 0

Download Image

RedTeamVillage @RedTeamVillage_

2 months ago

💻 ModuleOverride – Changing a Tyre Whilst Driving – @zer0phat & @kreepsec teach process injection using existing memory sections to run malicious shellcode. Hands-on demos and detection strategy discussions at @RedTeamVillage_ during @defcon 33! ⚡

0 3 9 1K 1

Download Image

/ˈziːf-kɒn/ @x33fcon

2 months ago

#x33fcon 2025 talks: @domchell - Hiding in Plain Sight > youtu.be/GyoxCTYPAus

0 18 51 5K 24

Download Image

vx-underground @vxunderground

3 months ago

20 87 2K 58K 88

Download Image

watchTowr @watchtowrcyber

3 months ago

Happy Friday! We're ending the week by publishing our analysis of Fortinet's FortiWeb CVE-2025-25257.... labs.watchtowr.com/pre-auth-sql-i…

9 111 292 31K 141

Adam Chester 🏴‍☠️ @_xpn_

3 months ago

PSA to anyone struggling, don't be told that "you're just worried", "you're just feeling sad", "you're overthinking things"... depression, anxiety, OCD, ADHD, Autism are killers. Talk, and advocate for yourself!

Adam Chester 🏴‍☠️ @_xpn_

3 months ago

3 0 43 13K 0

4 6 48 6K 3

optional @optionalctf

3 months ago

Nothing like scratching the bug bounty itch with several crits to end the night. Now to rest ready for Steelcon

0 0 1 263 0

Filip Dragovic @filip_dragovic

3 months ago

Today MSRC fixed two vulnerabilities I reported a couple months ago. EoP in Windows Update service (affects only windows 11/10 with at least 2 drives) msrc.microsoft.com/update-guide/v… EoP in Microsoft PC Manager msrc.microsoft.com/update-guide/v… PoC for CVE-2025-48799: github.com/Wh04m1001/CVE-…

10 99 391 27K 141

Beau Bullock @dafthack

4 months ago

I'm teaching an intro to cloud security workshop on July 11th. This is a pay what you can course so you can take it for free. I'll also be teaching the full version of my Breaching the Cloud course at @WWHackinFest in October. Registration links below: Workshop:…

4 29 85 8K 45

kepano @kepano

4 months ago

if you're looking for a @pocket replacement, I built Obsidian Web Clipper — it's open source and works with any app that supports Markdown (not just Obsidian)

kepano @kepano

4 months ago

if you're looking for a @pocket replacement, I built Obsidian Web Clipper — it's open source and works with any app that supports Markdown (not just Obsidian)

36 111 2K 119K 1K

Download Video

18 56 855 43K 329

Zero-Point Security @_ZeroPointSec

4 months ago

ZPS has a new site with some pretty cool changes to pricing, labs, and exams. Read more here: zeropointsecurity.co.uk/blog/new-site-…

11 71 318 41K 76

John Hammond @_JohnHammond

5 months ago

HELLO NAHAMCON 2025 CTF IS MAY 23 TO MAY 25 BEN ASKED ME TO HELP PROMOTE AND I FORRGOOTTT PLEASE REGISTER AND PLAY OUR GAME jh.live/nahamcon-ctf I WILL CONTINUE TO SPAM UNTIL SHOWTIME AND DURING EVENT SORRY BUT IT WILL BE FUN I PINKY PROMISE

12 42 278 41K 45

Download Image

Panos Gkatziroulis 🦄 @netbiosX

5 months ago

AMSI Bypass via RPC Hijack (NdrClientCall3) This technique exploits the COM-level mechanics AMSI uses when delegating scan requests to antivirus (AV) providers through RPC github.com/andreisss/Ghos…

0 58 194 14K 109

Logan Goins @_logangoins

5 months ago

I jumped heavily into learning about SCCM tradecraft and wrote a detailed write-up with custom examples, covering the most interesting vulnerabilities that combine commonality and impact from low-privilege contexts, and what you can do to prevent them :) logan-goins.com/2025-04-25-scc…