sailay(valen) (@404death) header
sailay(valen) (@404death) profile picture

sailay(valen)

@404death

Just an idiot, a tiny presence in an infinite universe. S-1-5-7 https://teapawt.net/t.co/OwoK61Z67A

github.com/sailay1996
Joined April 2013
  • Tweets4.4K
  • Following700
  • Followers4.7K
150Media
Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)
Skip the LSASS theatre ... walk the $MFT, take the hive, leave no minidump behind.
Image from sailay(valen) (@404death)
5
35
200
9,042
sailay(valen) retweeted
0xor0ne (@0xor0ne) profile picture
0xor0ne
@0xor0neNov 7
How to use LLMs for vulnerability research (@ZephrFish) MCP: blog.zsec.uk/bullyingllms/ Harness: blog.zsec.uk/harnessing-harn… #infosec #llm
Image from 0xor0ne (@0xor0ne)
Image from 0xor0ne (@0xor0ne)
15
131
1
986
45,918
sailay(valen) retweeted
Nicolas Krassas (@Dinosn) profile picture
Nicolas Krassas
@DinosnOct 28
From Arbitrary File Read to Shell: Yet Another RCE in Telerik tantosec.com/blog/2026/10/te…
From Arbitrary File Read to Shell: Yet Another RCE in Telerik

From Arbitrary File Read to Shell: Yet Another RCE in Telerik

A vulnerability in Telerik UI for ASP.NET AJAX led to an arbitrary file read via RadImageEditor's image cache. Leaking web.config turned it into RCE.

tantosec.com
1
12
61
6,040
sailay(valen) retweeted
Invoke RE (@InvokeReversing) profile picture
Invoke RE
@InvokeReversingOct 26
We've uploaded our live stream from October 16th where we analyzed a Rust loader that uses indirect syscall resolution, AES decryption, ETW patching and multiple unpacking steps to load and execute NWHStealer. Enjoy!
Image from Invoke RE (@InvokeReversing)
1
13
30
1,318
sailay(valen) retweeted
Joas Antonio (@C0d3Cr4zy) profile picture
Joas Antonio
@C0d3Cr4zyOct 24
Syswhispers4 github.com/JoasASantos/SysWh…
GitHub - JoasASantos/SysWhispers4: AV/EDR evasion via direct and indirect system calls Windows NT...

GitHub - JoasASantos/SysWhispers4: AV/EDR evasion via direct and indirect system calls Windows NT...

AV/EDR evasion via direct and indirect system calls Windows NT 3.1 through Windows 11 24H2 · x64 · x86 · WoW64 · ARM64 - JoasASantos/SysWhispers4

github.com
1
48
1
210
11,801
sailay(valen) retweeted
Yasser Sinjab (@ysinjab) profile picture
Yasser Sinjab
@ysinjabSep 15
laurentiugabriel.github.io/b…

How I use LLMs to learn complex topics · Laurentiu Raducu

LLMs are used for any things. Learning new things is one of the top use cases.

laurentiugabriel.github.io
3
48
657
39,562
sailay(valen) retweeted
Jake Bolam (@xixasec) profile picture
Jake Bolam@xixasecSep 14
I wrote a blog post about exploiting Logi Options+ for SYSTEM shells. blog.amberwolf.com/blog/2026…

A Peripheral Path to SYSTEM - Exploiting Logi Options+ for SYSTEM Shells

Chained flaws in the Logitech Options Plus updater give any local user SYSTEM code execution, with no admin rights or user interaction. CVE-2026-12518.

blog.amberwolf.com
1
21
1
59
4,182
sailay(valen) retweeted
Pavel Yosifovich (@zodiacon) profile picture
Pavel Yosifovich
@zodiaconSep 15
How do you run your own service inside Svchost.exe? trainsec.net/library/malware…
Image from Pavel Yosifovich (@zodiacon)
3
41
262
14,518
sailay(valen) retweeted
Dead Retard (@MSNightmare2000) profile picture
Dead Retard@MSNightmare2000Sep 13
Story time...
Dead Retard (@MSNightmare2000) profile pictureDead Retard@MSNightmare2000Sep 11
they fired me for no reason, it was never abount bounties.
33
178
27
1,411
339,227
sailay(valen) retweeted
Dead Retard (@MSNightmare2000) profile picture
Dead Retard@MSNightmare2000Sep 8
Microsoft has failed to properly patch ShieldBreak CVE-2026-69414 - msrc.microsoft.com/update-gu… ShieldCrash demonstrates a full bypass of the patch - github.com/MSNightmare/Shiel… Works with latest September 2026 patch
Dead Retard (@MSNightmare2000) profile pictureDead Retard@MSNightmare2000Aug 11
Microsoft has failed to properly patch RoguePlanet (CVE-2026-50656), ShieldBreak, a PoC that demonstrates a full bypass to the previous patch is now public. github.com/MSNightmare/Shiel… The PoC works with the latest August 2026 patch
20
186
11
1,091
68,974
sailay(valen) retweeted
Dead Retard (@MSNightmare2000) profile picture
Dead Retard@MSNightmare2000Sep 3
FalconFlank : Crowdstrike Falcon 0day LPE is now public github.com/MSNightmare/Falco…
89
500
78
2,891
367,433
sailay(valen) retweeted
supermao (@buaaxhm) profile picture
supermao
@buaaxhmAug 29
我太爱这个了 太牛逼了 github.com/zhaoxuya520/rever…
GitHub - zhaoxuya520/reverse-skill: Reverse Engineering / Authorized Penetration Testing / Security...

GitHub - zhaoxuya520/reverse-skill: Reverse Engineering / Authorized Penetration Testing / Security...

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Cod...

github.com
141
281
10
2,512
265,918
sailay(valen) retweeted
Dead Retard (@MSNightmare2000) profile picture
Dead Retard@MSNightmare2000Aug 29
Also, looking for a job, hard requirement has to be in Germany, if you have anything for me, you can reach me by email ! [email protected]
6
20
2
217
16,019
sailay(valen) retweeted
Dead Retard (@MSNightmare2000) profile picture
Dead Retard@MSNightmare2000Aug 30
GenDigital products are vulnerable to a 0day vulnerability, a PoC that demonstrates a SAM database dump and elevation of privilege is now public github.com/MSNightmare/Prett…
14
135
4
939
36,620
sailay(valen) retweeted
Dead Retard (@MSNightmare2000) profile picture
Dead Retard@MSNightmare2000Aug 29
Kaspersky 0day ? Anyone ? github.com/MSNightmare/HardB…
28
251
16
1,764
153,986
sailay(valen) retweeted
Master_寒蝉 (@Master_HanChan) profile picture
Master_寒蝉
@Master_HanChanAug 19
CVE-2026-42980 Windows 内核 WMI 整数下溢本地提权漏洞，低权限攻击者可利用该漏洞将自身权限提升至 SYSTEM，进而完全控制受影响主机。 (切记，运行第二次poc存在蓝屏概率) github.com/G4sp4rCS/CVE-2026…
Image from Master_寒蝉 (@Master_HanChan)
50
50
241
13,089
sailay(valen) retweeted
OrcaRouter 🐳 (@OrcaRouter) profile picture
OrcaRouter 🐳
@OrcaRouterAug 15
We just released our uncensored weights for Qwen3.8 27B FP8, designed for AI Red Teaming and security research, enjoy! huggingface.co/orcarouter/Qw…
orcarouter/Qwen3.8-27B-Uncensored-FP8 · Hugging Face

orcarouter/Qwen3.8-27B-Uncensored-FP8 · Hugging Face

Image-Text-to-Text model with 28B parameters. Download, explore files and run it on Hugging Face.

huggingface.co
133
644
94
6,898
7,615,665
sailay(valen) retweeted
Aidan Khoury (@aidankhoury) profile picture
Aidan Khoury@aidankhoury27 Nov 2023
Yet another very powerful patchguard and vbs compliant method for hooking system calls globally revers.engineering/fun-with-…
Fun with another PatchGuard-compliant Hook - Reverse Engineering

Fun with another PatchGuard-compliant Hook - Reverse Engineering

Abuse the HalPrivateDispatchTable to hook SYSCALL system-wide while maintain compliance with PatchGuard on Windows 10 and 11.

revers.engineering
6
103
1
390
91,725
sailay(valen) retweeted
domas (@xoreaxeaxeax) profile picture
domas@xoreaxeaxeaxAug 13
New exploit: “xor dword [0xf80c2094], 1<<22” Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed. github.com/xoreaxeaxeax/skit…
165
1,068
184
8,162
1,101,339
Seems like I can proudly say that I got some CVE IDs and published security research before the AI era.
1
288
sailay(valen) retweeted
Elon Musk (@elonmusk) profile picture
Elon Musk
@elonmuskAug 2
Accurate 😂
Image from Elon Musk (@elonmusk)
3,762
4,557
779
47,265
13,668,088
Load more