Pentester, wannabe red teamer, AD enthusiast

Canada
Joined May 2024
After you finish patching your PHP, don't forget about the CA compromise from yesterday! Here is a role you can demo it in your lab: github.com/badsectorlabs/lud… Mint an EV cert for any domain, and code sign any binary! Keep windows off the network - update is aggressive!
8
29
1,803
stuk0v retweeted
Planning on coming to #DEATHcon in #Montreal and haven't bought your ticket yet? This is the last week to get swag with your ticket! Get your ticket now: eventbrite.ca/e/2026-deathco… You can still buy tickets next week, but you won't get our super comfy t-shirt. ;)
3
2
5
731
Don't get stuck in Montreal without a shirt!
Planning on coming to #DEATHcon in #Montreal and haven't bought your ticket yet? This is the last week to get swag with your ticket! Get your ticket now: eventbrite.ca/e/2026-deathco… You can still buy tickets next week, but you won't get our super comfy t-shirt. ;)
1
3
212
Guess what... @fortraofficial / @_ZeroPointSec are looking for a new content developer to join our ranks. fortra.wd12.myworkdayjobs.co…
1
11
39
5,682
New Release Havoc Professional 0.8: Leviathan 🩸 - Introduce Kaine User-Defined C2 - Expanded Linux post-ex capabilities - Refactored port forwarding and sleep masking - Enhanced .NET/PowerSafe execution - In-Memory PE Execution and BOF-PE support infinitycurve.org/blog/levia…
1
2
27
947
stuk0v retweeted
NetNTLMv1 is dead. Long live NetNTLMv1. 🌈 Today we're releasing NTLMRain: recovering NT hashes from NetNTLMv1 responses. 🌐 Browser-based cracking ⌨️ Cross-platform CLI with GPU/CPU support 💾 Searchable tables that fit on a 4 TB disk Read the blog: outflank.nl/blog/2026/09/08/…
7
160
6
450
34,497
There is a 🏟️Ludus skill included ☺️ We have 1st party 🏟️Ludus skills and an MCP server! Check them out here: docs.ludus.cloud/docs/using-…
Introducing SpecterOps Skills: a public repository built to turn practitioner knowledge into reusable, reviewable workflows for AI-assisted security work. @zinic shares what we're building, why we're building it, and how you can contribute ➡️ ghst.ly/4ybT6ew
4
40
3,123
stuk0v retweeted
Outflank is proud to have collaborated with @SpecterOps on a new red team AI skills marketplace. This collection packages offensive security knowledge into reusable skills for AI agents. Read more on our blog: outflank.nl/blog/2026/09/02/…
1
32
1
137
7,088
stuk0v retweeted
Detect the Certighost with NetExec🔥 Thanks to @Xed_sama, the enum_cve module of NetExec will now detect if a host has not been patched and is potentially vulnerable to the Certighost vulnerability (CVE-2026-54121)🚀
8
78
1
329
21,684
stuk0v retweeted
You can know dump TDO with secretsdump dot py, thanks to Goultarde 🥳
Are one-way trusts really one way? @lowercase_drm sums up how the TDO password lets you turn a one-way AD forest trust into bidirectional access, and releases a new tool to remotely extract these secrets. offsec.almond.consulting/tru…
7
1
16
3,773
stuk0v retweeted
🚨 @DEATHCon2026 - Montreal On Site Tickets 🚨 Tickets: eventbrite.ca/e/2026-deathco… Tickets are selling super fast this year! This is my first post about it and already 25% of the tickets are sold!! #DetectionEngineering and #ThreatHunting buy your tickets now!!
4
6
2,942
stuk0v retweeted
This is amazing work!
Quick 'n dirty BloodHound ecosystem overview. The different ingestors, collectors, analysis tools. There might be things missing. gist.github.com/gitgotgitgot…
6
41
6,864
Cloudflare Drop just launched, temporary static site hosting (expires after 60 minutes) without an account, just drop your assets and go. Red Teamers... GO GO GO GO!!! cloudflare.com/drop/ Example: drop-4638acd5-ef1.aback-arch…
7
49
6
215
55,966
First blog post in a mini series where I look at "disposable tooling". This post shares what I have found to be useful when 1-shot'ing LLM generated Stage-0 agents for Mythic. specterops.io/blog/2026/06/2…
8
84
7
318
48,836
Over the past week, several well known security researchers have received post deletions and account locks for valid security content. For years X/Twitter has remained the de facto gathering place for offensive security research. Unfortunately, if this aggressive enforcement of this opaque policy continues, what remains of the community in this space will be permanently silenced. I hope some resolution to this issue is found quickly. Some of the best relationships I've built in the offensive security community originated on this platform, and it would be disappointing for the next generation of researchers to not have that opportunity. @elonmusk @nikitabier @X
I guess it is my turn to be flagged. It really feels like Claude is doing all to clean up and flag everything cyber-related. I wish we could have the old Twitter back.
6
12
3
77
6,461
Timeline of AD CS attack research & Microsoft patches since the ADCS paradigm shift: Certifried Pre-Owned whitepaper by @harmj0y and @tifkin_
3
21
99
6,919