Pinned Tweet
Really liked the Windows Access Tokens course from @zeropointsecltd ! I made a little tool while going through the course, and it helped me understand and apply the knowledge. github.com/5tuk0v/PointyToke…
stuk0v retweeted
Replying to @SpecterOps
@SpecterOps now has a Discord server for the Community to gather and talk about #BloodHound #AttackPath #Offensive and #Defensive #Tradecraft #Identity and just have fun talking with like minded professionals!
Join us now at : discord.specterops.io and get a vanity 👻 role!
stuk0v retweeted
After you finish patching your PHP, don't forget about the CA compromise from yesterday! Here is a role you can demo it in your lab: github.com/badsectorlabs/lud…
Mint an EV cert for any domain, and code sign any binary! Keep windows off the network - update is aggressive!
stuk0v retweeted
Planning on coming to #DEATHcon in #Montreal and haven't bought your ticket yet?
This is the last week to get swag with your ticket!
Get your ticket now: eventbrite.ca/e/2026-deathco…
You can still buy tickets next week, but you won't get our super comfy t-shirt. ;)
stuk0v retweeted
Don't get stuck in Montreal without a shirt!
Planning on coming to #DEATHcon in #Montreal and haven't bought your ticket yet?
This is the last week to get swag with your ticket!
Get your ticket now: eventbrite.ca/e/2026-deathco…
You can still buy tickets next week, but you won't get our super comfy t-shirt. ;)
stuk0v retweeted
Guess what... @fortraofficial / @_ZeroPointSec are looking for a new content developer to join our ranks.
fortra.wd12.myworkdayjobs.co…
stuk0v retweeted
New Release Havoc Professional 0.8: Leviathan 🩸
- Introduce Kaine User-Defined C2
- Expanded Linux post-ex capabilities
- Refactored port forwarding and sleep masking
- Enhanced .NET/PowerSafe execution
- In-Memory PE Execution and BOF-PE support
infinitycurve.org/blog/levia…
stuk0v retweeted
NetNTLMv1 is dead. Long live NetNTLMv1. 🌈
Today we're releasing NTLMRain: recovering NT hashes from NetNTLMv1 responses.
🌐 Browser-based cracking
⌨️ Cross-platform CLI with GPU/CPU support
💾 Searchable tables that fit on a 4 TB disk
Read the blog: outflank.nl/blog/2026/09/08/…
stuk0v retweeted
There is a 🏟️Ludus skill included ☺️
We have 1st party 🏟️Ludus skills and an MCP server! Check them out here: docs.ludus.cloud/docs/using-…
Introducing SpecterOps Skills: a public repository built to turn practitioner knowledge into reusable, reviewable workflows for AI-assisted security work.
@zinic shares what we're building, why we're building it, and how you can contribute ➡️ ghst.ly/4ybT6ew
stuk0v retweeted
Outflank is proud to have collaborated with @SpecterOps on a new red team AI skills marketplace. This collection packages offensive security knowledge into reusable skills for AI agents.
Read more on our blog: outflank.nl/blog/2026/09/02/…
stuk0v retweeted
Detect the Certighost with NetExec🔥
Thanks to @Xed_sama, the enum_cve module of NetExec will now detect if a host has not been patched and is potentially vulnerable to the Certighost vulnerability (CVE-2026-54121)🚀
stuk0v retweeted
You can know dump TDO with secretsdump dot py, thanks to Goultarde 🥳
Are one-way trusts really one way? @lowercase_drm sums up how the TDO password lets you turn a one-way AD forest trust into bidirectional access, and releases a new tool to remotely extract these secrets.
offsec.almond.consulting/tru…
stuk0v retweeted
🚨 @DEATHCon2026 - Montreal On Site Tickets 🚨
Tickets: eventbrite.ca/e/2026-deathco…
Tickets are selling super fast this year!
This is my first post about it and already 25% of the tickets are sold!!
#DetectionEngineering and #ThreatHunting buy your tickets now!!
stuk0v retweeted
This is amazing work!
Quick 'n dirty BloodHound ecosystem overview. The different ingestors, collectors, analysis tools.
There might be things missing.
gist.github.com/gitgotgitgot…
stuk0v retweeted
Cloudflare Drop just launched, temporary static site hosting (expires after 60 minutes) without an account, just drop your assets and go.
Red Teamers... GO GO GO GO!!! cloudflare.com/drop/
Example: drop-4638acd5-ef1.aback-arch…
stuk0v retweeted
First blog post in a mini series where I look at "disposable tooling". This post shares what I have found to be useful when 1-shot'ing LLM generated Stage-0 agents for Mythic. specterops.io/blog/2026/06/2…
stuk0v retweeted
Over the past week, several well known security researchers have received post deletions and account locks for valid security content.
For years X/Twitter has remained the de facto gathering place for offensive security research. Unfortunately, if this aggressive enforcement of this opaque policy continues, what remains of the community in this space will be permanently silenced.
I hope some resolution to this issue is found quickly. Some of the best relationships I've built in the offensive security community originated on this platform, and it would be disappointing for the next generation of researchers to not have that opportunity.
@elonmusk @nikitabier @X
stuk0v retweeted
Releasing DCOMIllusionist as part of our talk on DCOM at @x33fcon with @k3vinTell. It's a remote in memory fileless lateral movement technique based on some research of @tiraniddo
github.com/synacktiv/DCOMIll…
stuk0v retweeted
This is big 🔥🔥 techcommunity.microsoft.com/…

































