optional @optionalctf

The proud owner of two brain cells. HTB with @barctf | OSCP, CRT, CRTL youtube.com/c/optionalctf Joined January 2019

Tweets

2K
Followers

4K
Following

286
Likes

2K

ThePrimeagen @ThePrimeagen

2 days ago

i never saw this coming

299 1K 19K 481K 1K

Download Image

PDQ SmartDeploy versions prior to 3.0.2046 used static, hardcoded encryption keys for cred storage. Low-privileged users could potentially access admin creds from registry or deployment files. @unsigned_sh0rt unpacks his testing in his latest blog post. ghst.ly/4mjyuvw

2 52 127 15K 51

Jord @0xLegacyy

4 weeks ago

Developing a scriptable (pwndbg-like) debugger for windows. Few more things we need to iron out but will be releasing soon 🐸

6 19 169 11K 35

Download Image

Adam Langley @BuildHackSecure

4 weeks ago

Here’s my slides from today’s “Regex For Hackers” talk at DEFCON with @NahamSec, bookmark this for some exciting news in the near future docs.google.com/presentation/d…

8 97 497 34K 510

kreep @kreepsec

4 weeks ago

Had an awesome time at #DefCon 33. Lots of new discoveries, first time speaking at the #redteamvillage along with @zer0phat and met lots of cool people. Looking forward to the next one!

1 1 4 417 0

Download Image

RedTeamVillage @RedTeamVillage_

a month ago

💻 ModuleOverride – Changing a Tyre Whilst Driving – @zer0phat & @kreepsec teach process injection using existing memory sections to run malicious shellcode. Hands-on demos and detection strategy discussions at @RedTeamVillage_ during @defcon 33! ⚡

0 3 9 1K 1

Download Image

/ˈziːf-kɒn/ @x33fcon

2 months ago

#x33fcon 2025 talks: @domchell - Hiding in Plain Sight > youtu.be/GyoxCTYPAus

0 18 52 5K 24

Download Image

vx-underground @vxunderground

2 months ago

20 89 2K 58K 90

Download Image

watchTowr @watchtowrcyber

2 months ago

Happy Friday! We're ending the week by publishing our analysis of Fortinet's FortiWeb CVE-2025-25257.... labs.watchtowr.com/pre-auth-sql-i…

9 111 292 31K 141

Adam Chester 🏴‍☠️{AFK} @_xpn_

2 months ago

PSA to anyone struggling, don't be told that "you're just worried", "you're just feeling sad", "you're overthinking things"... depression, anxiety, OCD, ADHD, Autism are killers. Talk, and advocate for yourself!

Adam Chester 🏴‍☠️{AFK} @_xpn_

2 months ago

3 0 43 13K 0

4 6 48 6K 3

optional @optionalctf

2 months ago

Nothing like scratching the bug bounty itch with several crits to end the night. Now to rest ready for Steelcon

0 0 1 260 0

Filip Dragovic @filip_dragovic

2 months ago

Today MSRC fixed two vulnerabilities I reported a couple months ago. EoP in Windows Update service (affects only windows 11/10 with at least 2 drives) msrc.microsoft.com/update-guide/v… EoP in Microsoft PC Manager msrc.microsoft.com/update-guide/v… PoC for CVE-2025-48799: github.com/Wh04m1001/CVE-…

10 99 390 27K 141

Beau Bullock @dafthack

3 months ago

I'm teaching an intro to cloud security workshop on July 11th. This is a pay what you can course so you can take it for free. I'll also be teaching the full version of my Breaching the Cloud course at @WWHackinFest in October. Registration links below: Workshop:…

4 29 85 8K 45

kepano @kepano

4 months ago

if you're looking for a @pocket replacement, I built Obsidian Web Clipper — it's open source and works with any app that supports Markdown (not just Obsidian)

kepano @kepano

4 months ago

if you're looking for a @pocket replacement, I built Obsidian Web Clipper — it's open source and works with any app that supports Markdown (not just Obsidian)

36 110 2K 118K 1K

Download Video

18 55 859 43K 329

Zero-Point Security @_ZeroPointSec

4 months ago

ZPS has a new site with some pretty cool changes to pricing, labs, and exams. Read more here: zeropointsecurity.co.uk/blog/new-site-…

12 71 319 41K 75

John Hammond @_JohnHammond

4 months ago

HELLO NAHAMCON 2025 CTF IS MAY 23 TO MAY 25 BEN ASKED ME TO HELP PROMOTE AND I FORRGOOTTT PLEASE REGISTER AND PLAY OUR GAME jh.live/nahamcon-ctf I WILL CONTINUE TO SPAM UNTIL SHOWTIME AND DURING EVENT SORRY BUT IT WILL BE FUN I PINKY PROMISE

12 42 279 41K 45

Download Image

Panos Gkatziroulis 🦄 @netbiosX

4 months ago

AMSI Bypass via RPC Hijack (NdrClientCall3) This technique exploits the COM-level mechanics AMSI uses when delegating scan requests to antivirus (AV) providers through RPC github.com/andreisss/Ghos…

0 58 194 14K 109

Logan Goins @_logangoins

4 months ago

I jumped heavily into learning about SCCM tradecraft and wrote a detailed write-up with custom examples, covering the most interesting vulnerabilities that combine commonality and impact from low-privilege contexts, and what you can do to prevent them :) logan-goins.com/2025-04-25-scc…