D3STY (@d3sty_) profile picture

D3STY

@d3sty_

Pentester • Red Teamer • CTF @laniakeactf On-prem, cloud, containers — wherever the misconfigs are

Joined June 2023
  • Tweets759
  • Following669
  • Followers217
62Media
Photo by D3STY (@d3sty_)Photo by D3STY (@d3sty_)Photo by D3STY (@d3sty_)Photo by D3STY (@d3sty_)Photo by D3STY (@d3sty_)Photo by D3STY (@d3sty_)Photo by D3STY (@d3sty_)Photo by D3STY (@d3sty_)Photo by D3STY (@d3sty_)Photo by D3STY (@d3sty_)
At #x33fcon currently @_ar0x4 presenting "#Tunnel Vision: What #Microsoft's Secure Edge Can't See" - x33fcon.com/#!/s/ArshiaReisi… - #red, #purple, #research, #windows
Image from /ˈziːf-kɒn/ (@x33fcon)
Image from /ˈziːf-kɒn/ (@x33fcon)
Image from /ˈziːf-kɒn/ (@x33fcon)
Image from /ˈziːf-kɒn/ (@x33fcon)
7
17
912
Europeans watching the man who called NATO obsolete, then threatened a member’s territory, now ask for help for the war he already ‘won’
163
2,891
185
17,877
585,425
D3STY retweeted
F.O.L.A (@folaoftech) profile picture
F.O.L.A
@folaoftechJan 28
Remote employees when they visit the office for the first time 🤣🤣🤣🤣
33
308
31
3,516
232,054
D3STY retweeted
nyxgeek (@nyxgeek) profile picture
nyxgeek
@nyxgeekJan 5
Here's a video PoC for Azure Entra ID SignIn Log Bypass in action. I had to make it to help MSRC replicate it (lol). You'll see how simple this bypass was. No worries admins, Microsoft says that it was only a "Moderate" issue.
12
66
3
415
41,745
Elon musk has made this platform a disinformation haven leveraging the monetisation features for people in low income countries. I would guess that if you spread enough hate here you can make a good living if you live in India / Nigeria etc
19
31
7
399
59,371
Me spotting LLMs in my replies
Image from Peter Hague (@peterrhague)
14
10
1
238
4,993
It's been almost a year since my last blog... So, here is a new one: Extending AD CS attack surface to the cloud with Intune certificates. Also includes ESC1 over Intune (in some cases). dirkjanm.io/extending-ad-cs-… Oh, and a new tool for SCEP: github.com/dirkjanm/scepreq

Extending AD CS attack surface to the cloud with Intune certificates

Active Directory Certificate Services (AD CS) attack surface is pretty well explored in Active Directory itself, with *checks notes* already 16 “ESC” attacks being publicly described. Hybrid certif...

dirkjanm.io
8
189
2
522
32,715
Their only weakness...
Image from PentesterLab (@PentesterLab)
3
50
4
308
23,169
Doing an internal pentest in an unpatched Windows environment.
3
32
1
262
22,426
D3STY retweeted
Yeeb (@Yeeb_) profile picture
Yeeb@Yeeb_2 Jul 2025
Created small tool that joins a device to a Tailscale network and exposes a local SOCKS proxy. It’s built for red team pivots and quick access into (restricted) environments. The underlying tsnet library is currently Go-only, so it's semi-portable for now. github.com/Yeeb1/SockTail
GitHub - Yeeb1/SockTail: Lightweight binary that joins a device to a Tailscale network and exposes...

GitHub - Yeeb1/SockTail: Lightweight binary that joins a device to a Tailscale network and exposes...

Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephemeral access into restricted environments using Tailscale’s ...

github.com
3
61
1
222
28,840
TL;DR: AIs are now junior red-teamers who clear the first hour of work faster than most humans. arxiv.org/pdf/2505.19915
4
16
2,050
Turkish APT Exploits Chat App Zero-Day to Spy on Iraqi Kurds: bit.ly/43kpduy by Nate Nelson #DRGlobal
1
4
1
3,143
👇 github.com/ly4k/Certipy/disc…
The Future of Certipy and the Release of v5 & ESC16 · ly4k Certipy · Discussion #270

The Future of Certipy and the Release of v5 & ESC16 · ly4k Certipy · Discussion #270

Certipy has been quiet for a while - but not forgotten. After two years without active maintenance, I'm happy to say that changes are coming. Today, I'm releasing Certipy v5. It's been ...

github.com
16
126
5
298
37,380
did you know? there is a german tradition each year where 12 german kids are sacrified to the german bread god "Bernd", to grant us good harvest for the upcoming months.
Image from Jules (@Jules1Youtube)
50
349
17
5,879
133,791
hey @Steam since my steam account is 21 years old, can you stop asking me to prove that I'm old enough to see violence
253
4,551
86
199,372
3,209,578
bring back ASCII art and UIs with personality 😞💔
49
639
41
5,076
81,754
The Russian internet provider Nodex in St. Petersburg was completely looted and wiped. Data exfiltrated, while the empty equipment without backups was left to them
Image from herm1t (@vx_herm1t)
15
215
30
1,738
137,590
its crazy how much capture the flag has changed. in 2014 a 400 point challenge was "run the program in a debugger and read the flag from a register" in 2024: hey escape from VM plz
19
19
2
1,430
79,020
D3STY retweeted
Yeeb (@Yeeb_) profile picture
Yeeb@Yeeb_22 Dec 2024
If you’re into Malware Development and want to see some cool angles on different techniques, check out this project by a friend of mine, @vxvoid a github.com/voidvxvt/HellBunn…
GitHub - voidvxvi/HellBunny: Shellcode loader written in C and Assembly utilizing direct or...

GitHub - voidvxvi/HellBunny: Shellcode loader written in C and Assembly utilizing direct or...

Shellcode loader written in C and Assembly utilizing direct or indirect syscalls to evade UM EDR hooks - voidvxvi/HellBunny

github.com
This quoted post is unavailable.
Try viewing anyway · View on X
6
26
1,443
Attacking UNIX Systems via CUPS, Part I evilsocket.net/2024/09/26/At…
Attacking UNIX Systems via CUPS, Part I | evilsocket

Attacking UNIX Systems via CUPS, Part I | evilsocket

Hello friends, this is the first of two, possibly three (if and when I have time to finish the Windows research) writeups. We will start with targeting GNU/Lin…

evilsocket.net
168
1,107
291
3,578
1,061,373
Load more