v1n3gr3p @vinegrep

Infosec. Fuck around, find out. All tweets are my own. Joined February 2011

Tweets

3K
Followers

134
Following

461
Likes

5K

Print3M @Print3M_

2 days ago

Let me explain where this incredible vulnerability in Notepad++ comes from... my blog post from 3w ago. The problem is there's no vuln. I described this as sneaky init access. You might as well do binary patching of any PE file in the world. #infosec print3m.github.io/blog/dll-sidel…

4 48 187 15K 96

SpecterOps @SpecterOps

2 days ago

Lateral movement getting blocked by traditional methods? @werdhaihai just dropped research on a new lateral movement technique using Windows Installer Custom Action Server, complete with working BOF code. ghst.ly/4pN03PG

1 101 242 18K 144

codewhisperer84 @codewhisperer84

5 days ago

Check out Titanis, my new C#-based protocol library! It features implementations of SMB and various Windows RPC protocols along with Kerberos and NTLM. github.com/trustedsec/Tit…

13 186 536 83K 232

Craig Rowland - Agentless Linux Security @CraigHRowland

3 days ago

We have a free script that reveals hidden modules from certain Linux stealth rootkits such as the recent North Korean leak. See thread for the repo and check your hosts.

Sandfly Security @SandflySecurity

3 days ago

We have a free script that reveals hidden modules from certain Linux stealth rootkits such as the recent North Korean leak. See thread for the repo and check your hosts.

2 29 85 22K 56

Download Image

2 29 181 40K 117

Kubesploit @kubesploit

4 days ago

Pangolin is a self-hosted, WireGuard-based tunnelled reverse proxy that securely exposes internal HTTP/TCP/UDP services without opening ports ➤ ku.bz/MzkRYlF1l

4 58 304 17K 296

Malwarebytes @Malwarebytes

a week ago

🚨 Heads up, LinkedIn users! On November 3rd, Microsoft will share your LinkedIn data to train AI models — and you’re opted in by default. Here’s how to opt out: Account > Settings & Privacy > Data Privacy > Data for Generative AI Improvement > Toggle OFF ✅

16 209 504 29K 151

Download Image

quarkslab @quarkslab

a week ago

RTFM they say but if you read the manual and copy code examples from it you may inadvertently introduce vulns in your code 🙀 In April we audited the PHP code. Now we followed up with a review of the code snippets in PHP documentation and found 81 issues👇 blog.quarkslab.com/security-revie…

0 16 51 5K 21

Dirk-jan @_dirkjan

2 weeks ago

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-glob…

145 897 3K 437K 1K

r1ru @ri5255

2 weeks ago

I have released the first half of "Binary Exploitation 101", a beginner-friendly guide to binary exploitation. You can learn from classic buffer overflow to ret2dlresolve through CTF-like challenges. I am working on the second half now. Stay tuned🔥 r1ru.github.io/categories/bin…

15 314 1K 57K 1K

Download Image

M4lcode @M4lcode

2 weeks ago

Just published a deep dive into APT27 (Emissary Panda/Iron Tiger/Lucky Mouse), a Chinese state-sponsored cyber-espionage group active since 2010, known for spear-phishing, watering-hole attacks and exploitation of internet-facing applications. dexpose.io/threat-actor-p…

4 44 90 11K 41

Download Image

DeMarcus @medarkus_

2 weeks ago

For any of my Red Teamers, if you encounter ServiceNow on an engagement I highly recommend reading this blog from @MDSecLabs. Served as a big inspiration for a very successful engagement we just wrapped up. #infosec #redteam #servicenow #CyberSecurity mdsec.co.uk/2025/03/red-te…

0 33 129 7K 67

OtterHacker @OtterHacker

2 weeks ago

Got access to an AWS infrastructure during your RedTeam and you don't know how to do access persistence other than just adding an AccessKey ? 🫤 Step up your game with new TTPs ! 🫡 From IAM modification to lambda hijacking, 1001 ways to keep access ! riskinsight-wavestone.com/en/2025/09/aws…

2 44 203 22K 149

Smukx.E @5mukx

2 weeks ago

Malware development series - advanced obfuscation with LLVM and template metaprogramming 0xpat.github.io/Malware_develo…

3 104 565 21K 393

Download Image

Smukx.E @5mukx

3 weeks ago

An unexpected journey into Microsoft Defender's signature World retooling.io/blog/an-unexpe…

3 104 449 25K 276

Download Image

Swissky @pentest_swissky

4 weeks ago

A Novel Technique for SQL Injection in PDO’s Prepared Statements - @assetnote slcyber.io/assetnote-secu…

0 18 78 5K 48

0xor0ne @0xor0ne

a month ago

Three part series on Insyde H2O SecureBoot bypass by @NikolajSchlej Part 1: coderush.me/hydroph0bia-pa… Part 2: coderush.me/hydroph0bia-pa… Part 3: coderush.me/hydroph0bia-pa… #uefi #infosec

1 63 270 12K 126

Download Image

ransomNews @ransomnews

a month ago

⚠️ Trojan in disguise: PDF editor backdoor The “AppSuite PDF Editor” poses as a legit tool but is a backdoor: most of its code supports malware functions, including C2 comms, scheduled tasks, and AES-encrypted data exfiltration. Persistence is full, cleanup needs system repave.…

1 124 614 29K 321

Download Image

Matan Bahar @Bl4ckShad3

a month ago

Hijack-as-a-Service: Abusing Azure Bastion Shareable Links for Phishing and Stealthy Persistence. Check out my recent research about Azure Bastion and see how it can be used to phish users and achieve stealthy persistence. medium.com/@matanb707/hij… #Persistence #Stealth #Phishing

0 48 132 12K 80

DirectoryRanger @DirectoryRanger

a month ago

Windows Inter Process Communication A Deep Dive Beyond the Surface, by @haider_kabibo Part 1 sud0ru.ghost.io/windows-inter-… Part 2 sud0ru.ghost.io/windows-inter-… Part 3 sud0ru.ghost.io/windows-inter-… Part 4 sud0ru.ghost.io/windows-inter-… Part 5 sud0ru.ghost.io/windows-inter-… Part 6 sud0ru.ghost.io/windows-inter-…

0 62 205 10K 184

SEKTOR7 Institute @SEKTOR7net

a month ago

Breaking MS Defender telemetry with DNS blackholing. An old trick to blind the sensor - adding a new record in hosts file to redirect cloud-based entity to localhost. A nice post by Elli Shlomo (@ellishlomo). Source: cyberdom.blog/ghosting-the-s… #redteam #blueteam #maldev…