Freelance | Blogger | SANS ISC Handler | FOR610/FOR710 Instructor | BruCON co-organizer | BlueTeam | DFIR | MTB | PGP: 0xEB583912514B3E1F | Tweets are mine!
Belgium
Joined May 2008
- Tweets35.4K
- Following1K
- Followers15.2K
- Likes5.3K
Xavier Mertens @[email protected] 🇧🇪 retweeted
REMnux now includes CILantro by @jgajek for deobfuscating and unpacking .NET malware variants. docs.remnux.org/discover-the…
Xavier Mertens @[email protected] 🇧🇪 retweeted
Another blog! This time on phase 1 of the @SANSInstitute DFIR AI frameworks. smarterforensics.com/2026/08…
Xavier Mertens @[email protected] 🇧🇪 retweeted
The REMnux project now distributes @hasherezade's JSC Deobfuscator as a container. It turns obfuscated V8 bytecode (.jsc) into readable View8 pseudocode for static analysis. docs.remnux.org/run-tools-in…
Xavier Mertens @[email protected] 🇧🇪 retweeted
On the last day of early-bird for #BruCON0x12 training, we added additional seats for the sold out Building, Securing and Hacking Intelligent Agentic Systems by Philippe Bogaerts. Grab them while they last🚨 brucon.org/training-details/…
Xavier Mertens @[email protected] 🇧🇪 retweeted
The MCP server for examining Process Monitor log files by @JameZUK is now on REMnux, with OpenCode preconfigured for its use. github.com/JameZUK/ProcmonMC…
Xavier Mertens @[email protected] 🇧🇪 retweeted
In a recent ISC SANS Diary, @xme 🇧🇪 discussed a malicious ZIP archive that led to Remcos, a pretty common RAT.
As Xavier noted, "Most of the files used in this infection path remain undetected by most AVs." [1]
PowerShell, AppData, Dynamic DNS, and Run Key as a persistence mechanism. Four of the eight areas I covered in my first blog post, N-IOCs to Rule Them All [2]. The information presented remains relevant, and finding such infections is not as hard as it sounds, even if they might bypass AV rules and signatures.
[1] isc.sans.edu/diary/From+a+VH…
[2] dfir.ch/posts/n-iocs/
Xavier Mertens @[email protected] 🇧🇪 retweeted
🚀 OWASP Belgium Chapter Meeting at KU Leuven!
🎤 Talks by:
• Jim Manico — Secure Coding with AI using Claude Code & Codex
• Georges Bolssens — Reverse-engineering IoT devices with OSS tooling & LLMs
🍻 Drinks + sandwiches included
📍 Heverlee
🔗 owasp.org/www-chapter-belgiu…
:
Xavier Mertens @[email protected] 🇧🇪 retweeted
Our 18th edition (#BruCON0x12) is officially launched. Ticket sales open on June 1st at 17:00 CEST. With demand increasing every year, make sure you are ready to secure your spot in time. 🎯
You can also check this year's training program consisting of no less than 10 courses 💪! From hardware hacking and exploit development to AI-focused content, the lineup offers valuable learning opportunities for red, blue, and purple teams at all levels.
🚨New this year is BruCON After Dark — an extended evening experience on Thursday. Expect a mix of activities including a party, movie screening, special activities and much more! Whether you want to relax, connect with others, or dive into hands-on activities, After Dark has you covered.
Check out this blog post for more information 👉 brucon.org/post/brucon-0x12-…
Xavier Mertens @[email protected] 🇧🇪 retweeted
An Example of Stack String in High Level Language isc.sans.edu/diary/33008
Xavier Mertens @[email protected] 🇧🇪 retweeted
🔥Discover our VULNERABILITY RESEARCH session!
- Advanced Web Fuzzing by Vincent Herbulot 💣
- Fuzzwizard by Marion Lafon 🚀
- Automated Vulnerability Detection in Go by @KarolinaGorna_ 🔬
Book your free(!) seat 🥰
🎟️ Booking: pretix.eu/passthesalt/2026/
Xavier Mertens @[email protected] 🇧🇪 retweeted
As per our tradition, tickets for the 18th edition of BruCON will go live on June 1st at 5PM CET. Set your alarms, notify your friends, test your F5 button and get ready🚨. More details about the #BruCON0x12 conference and training program will follow soon.
Xavier Mertens @[email protected] 🇧🇪 retweeted
Tickets; 12/May/2026 at 11:00am, GMT+2
Only 1 batch of tickets this year. 😳
First-come, First-Served
All additional important details were sent out earleir today through the mailing list.
👉 instagram.com/reel/DYNfEXrIR…
Xavier Mertens @[email protected] 🇧🇪 retweeted
Compromised DVRs and Finding Them in the Wild isc.sans.edu/diary/32886
Xavier Mertens @[email protected] 🇧🇪 retweeted
A Little Bit Pivoting: What Web Shells are Attackers Looking for? isc.sans.edu/diary/32874
Xavier Mertens @[email protected] 🇧🇪 retweeted
🚀 BruCON0x12 – Call for Trainers, Workshops & Talks Opens Soon!
Get ready! The Call for Training, Workshops, and Talks for BruCON0x12 (21 - 25 September) opens on April 1st and runs till the end of the month. If you’ve got a story to tell, a skill to share, or research that deserves the spotlight — we want to hear from you!👊
👉 Check out the link for more information brucon.org/post/brucon-0x12-…
Xavier Mertens @[email protected] 🇧🇪 retweeted
CFP ENDING IN 10 DAYS
📅 We are going to close our #pts26 CFP on March 31 at midnight (GMT+2).
🔥 If you want to be on stage next july with us, just GO and SUBMIT your Security x Open source (or open format/protocol) proposal 👉 cfp.pass-the-salt.org/pts202…
🙏RT appreciated!
Xavier Mertens @[email protected] 🇧🇪 retweeted
GSocket Backdoor Delivered Through Bash Script isc.sans.edu/diary/32816
Xavier Mertens @[email protected] 🇧🇪 retweeted
Analyzing "Zombie Zip" (CVE-2026-0866) isc.sans.edu/diary/32786
Xavier Mertens @[email protected] 🇧🇪 retweeted
Microsoft Patch Tuesday March 2026 isc.sans.edu/diary/32782
