vs1m retweeted
This is the first Skynet Day (Aug 29) where it's actually plausible that this is happening somewhere in the world
vs1m retweeted

UwU Underground@uwu_undergroundAug 28
North AmericaConnected via North America Android AppAccount-level information, not a live location or per-post device.
Continue to appreciate @AikidoSecurity and their marketing and their continued understanding that security researchers crossing paths with real-world attackers does not inherently imply collaboration but in fact demonstrates how the ecosystem operates. Our deepest respect goes to the entire team over there.
For years all us now, all of us; researchers, criminals, journalists, defenders and governments often end up sitting at the same lunch table, watching the same rooms, eating the same slop, and learning from the same people. None of us would be where we are in cyber without these factors.
Proximity is not, and has never signified allegiance. And before you think this is shade at @Huntress it is not, it is more of an acknowledgement of how we feel pipelines of cybersecurity occur. We respect Huntress and especially their researchers greatly, their efforts to help provide security throughout is both noble and impactful.
Security has always been a menagerie of uncomfortable ecosystems intertwining. Sometimes the people studying the fire, fighting the fire and starting the fire are all sleeping in the same bed while staring at the the same fire that is consuming them.
☯️
RIP TeamPCP ...and now? Storytime.
In the year’s most slow-burn, enemies-to-not-quite-lovers arc, TeamPCP and our @CharlieEriksen have spent months orbiting each other.
Charlie tracked their attacks. They started leaving him encrypted messages in the malware:
Havoc Professional Finally Released! 🕸️🕷️
Since our last blog post introducing the Havoc Professional framework and the Kaine-Kit, we've been refining the framework behind the scenes while also welcoming @avx128 as a new member of our team. This blog post covers the numerous features included in the initial release of Havoc Professional.
I'm excited to finally share the work my team and I have put in over the past year. This is just the beginning of what we have planned.
infinitycurve.org/blog/relea…
For the past few weeks I've been building a fuzzer from scratch in Rust. Today I'm releasing Astra along with a complete write-up that covers the full implementation, check it!
- Repo: github.com/20urc3/Astra
- Article: 2ourc3.com/posts/astra/
vs1m retweeted
Read my latest article: Introduction to root-cause analysis on Linux: 2ourc3.com/posts/post_0x04.h…
vs1m retweeted
Approved 🫡
Been building on this idea databouncing.io/bouncing-wit…
Using signup forms for databounce/data exfil
Got the POC working: Playwright automation to register emails, triggers DNS lookups -> my listener catches + send the file to a Discord webhook.
data-exfil using facebook reg :D!
vs1m retweeted
Chrome remote debugging session stealing is dead...
long live chrome remote debugging session stealing:
github.com/Pengrey/junctrap
vs1m retweeted
Introducing Havoc Professional: A Lethal Presence
We’re excited to share a first look at Havoc Professional, a next-generation, highly modular Command and Control framework, and Kaine-kit our fully Position Independent Code agent engineered for stealth!
infinitycurve.org/blog/intro…
vs1m retweeted
Just launched Code Auditor CTF — auditor.codes
A web platform to practice finding real-world C/C++ vulnerabilities
• 8000+ challenges
• Progress tracking + leaderboard
• Beginner-friendly
• Fully open source (beta): github.com/20urc3/auditor.co…
vs1m retweeted
XINTRA IS HIRING 🎉 @XintraOrg
Azure / Entra DevOps Engineer
♦️ Remote (Australia)
♦️ $125K - $140K AUD
♦️ Full-Time
xintra.org/jobs/azure-entra-…
Red Team Lead (Adversarial Simulation)
♦️ Remote (Australia or EU)
♦️ $130K-$160K AUD | €75K-€95K EUR
♦️Mid-Senior
♦️ Full-Time
xintra.org/jobs/red-team-lea…
vs1m retweeted
I wrote a comprehensive guide on harnessing libraries for effective fuzzing with AFL++ !
Have a look => github.com/20urc3/Publicatio…
vs1m retweeted
We released four MAJOR updates to XINTRA 💜
1. XINTRA Community Program
2. New Course Released
3. Enterprise Labs Offering
4. New Website + Backend
xintra.org/
Read more below 👇🧵 @XintraOrg
vs1m retweeted
NEW LAB RELEASE: Airbuzz✈️🔍
Lazarus Group (North Korea) targeting aerospace defence companies as a part of their 3 year long Operation Dream Job campaign.
👇Solve the incident here👇
xintra.org
Test your blue team skills on:
👀Memory Analysis
👀 PCAP Analysis
👀Defence Evasion Techniques
👀DLL Side Loading
Lab Contributors
Adversarial Emulator @q8fawazo
Incident Responder @r3nzsec
@XintraOrg
vs1m retweeted
While dusting off some old stuff, I came across some old logs and sample. Here's some live PCAP files from back in July 2010 when I was watching some Stuxnet implants across Iran, living their last days of life. Probably first ever public traffic samples?
github.com/Hamid-K/stalksnet
vs1m retweeted
There’s no perfect way to live your 20s.
You either live ‘em up and become an under-skilled 30 year old.
Or
You work ‘em up and become an under-lived 30 year old.
You just have to figure out which you’d rather be, accept the tradeoffs, and know there are no do overs.
vs1m retweeted
NEW LAB RELEASE: TechTonik Inc 🥳
End-to-end emulation of a CISA write-up about Russian Intelligence attacking Jetbrains to target tech companies (APT29)
👇Solve the incident here 👇
xintra.org
Test your detection skills on:
👀 TeamCity Exploitation (N-Day)
👀 Malicious Drivers
👀 Linux + Windows Forensics
👀 DLL Hijacking
Lab Contributors
Adversarial Emulator @ZephrFish
Incident Responder @svch0st
@XintraOrg


























