-
Tweets1K
-
Followers5K
-
Following1K
-
Likes1K
Charlie Clark retweeted
This release is probably going to be one of our biggest and most impactful! Kudos to the team @peterwintrsmith @modexpblog @s4ntiago_p @GigelV41464 @saab_sec 🙌
We're really bringing the 🔥 with our next Nighthawk release - Janus - nighthawkc2.io/janus/
1
23
112
26K
38
Charlie Clark retweeted
I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-glob…
@UrfinJuice9 each ticket requires a referral
A little example of cross domain S4U: exploit.ph/crossing-trust…
Charlie Clark retweeted
Happy to finally share a new blog with @exploitph on our work revisiting the Kerberos Diamond Ticket. ✅ /opsec for a more genuine flow ✅ /ldap to populate the PAC 🆕 Forge a diamond service ticket using an ST We finally gave it a proper cut 💎 huntress.com/blog/recutting…
@sekurlsa_pw @al3x_n3ff the same technique also allowed me to bypass authentication silos: msrc.microsoft.com/update-guide/v…
@sekurlsa_pw @al3x_n3ff this technique makes several attacks possible, one I wrote about at the same time is kerberoasting from a mitm position without creds: exploit.ph/all-ur-as-belo…
@al3x_n3ff yeah, I did that 3 years ago: exploit.ph/all-ur-as-belo…
Charlie Clark retweeted
Have you ever wondered if there was a way to deploy a "Remote EDR"? Today I'm excited to share research I've been working on for the past couple months. This dives into DCOM Interfaces that enable remote ETW trace sessions without dropping an agent to disk. Includes a detailed write-up: jonny-johnson.medium.com/no-agent-no-pr… And a new GitHub project "JonMon-Lite": github.com/jonny-jhnson/J…
Charlie Clark retweeted
My #SOCON2025 talk is now live for those interested in credential guard research. youtu.be/9U_7u849yQQ?fe…
@_RastaMouse @_EthicalChaos_ @__invictus_ @4ndr3w6S the reason I think the TDO holds both is because when you sync the TDO, you get both keys
@_RastaMouse @_EthicalChaos_ @__invictus_ @4ndr3w6S I think the TDO holds both, as I said I think it's due to how the server lookup is coded, it was easier to have a trust account for requesting tickets rather than trying to code it differently or something, but I'd need to be familiar with the code to be sure
@_RastaMouse @4ndr3w6S @SteveSyfuhs I assume it's something to do with how AD does the server lookup though
@_RastaMouse @4ndr3w6S idk why exactly, ig you'd have to ask MS, perhaps the way AD works under the hood it requires an actual account to create a ST
@_RastaMouse @4ndr3w6S so you request a referral to krbtgt/domain2, it uses the account cred for the DOMAIN2$ INTERDOMAIN_TRUST_ACCOUNT as the service key for the referral
@_RastaMouse @4ndr3w6S I assume you mean the INTERDOMAIN_TRUST_ACCOUNT, in which case it's used to request a referral to the foreign domain
@_abs0lute fwiw, I've not noticed a speed increase for AES encrypted tickets, only RC4
fwiw, you can speed up cracking RC4 kerberoast tickets by requesting the ticket from the AS without a PAC
@_abs0lute I'm not sure about with john and certainly the more resources you have, the larger increase you'll notice, but it seems to be due to the enc-part being around 1000 bytes smaller (at around 100-200 bytes without a PAC), it doesn't make a huge difference but it's definitely faster
@TheCovertCorvus I mentioned this in my blog post: semperis.com/blog/new-attac…
@TheCovertCorvus no, you can request any non-krbtgt ticket from the AS without a PAC without any changes required
Justin Elze @HackingLZ
74K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
Florian Roth ⚡️ @cyb3rops
225K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Oliver Lyak @ly4k_
9K Followers 268 Following Yet another security researcher 🔦 Github: https://t.co/7WFOFz17KI
Grzegorz Tworek @0gtweet
39K Followers 2K Following My own research, unless stated otherwise. Not necessarily "safe when taken as directed". GIT d- s+: a+ C++++ !U !L !M w++++$ b++++ G-
Adam Chester 🏴�... @_xpn_
39K Followers 554 Following TRACE at @SpecterOps | Blog at https://t.co/tjfTOllCEu
sn🥶vvcr💥sh @snovvcrash
12K Followers 492 Following Sr. Penetration Tester / Red Team Operator @ptswarm :: Author of the Pentester’s Promiscuous Notebook :: He/him :: Tweets’re my pwn 🐣
Dave Kennedy @HackingDave
233K Followers 6K Following Founder @Binary_Defense @TrustedSec. @WeHackHealth Pod. God + Family/Hacker/CSO/USMC/Intel/Fitness. Make the world a better place.
n00py @n00py1
14K Followers 965 Following Retweeter of InfoSec/Offsec/Pentest/Red Team. Occasional blogger/Independent security research.
mgeeky | Mariusz Bana... @mariuszbit
15K Followers 1K Following 🔴 Offensive Security Developer @ Outflank, Red Team operator, ex-AV dev, ex- malware researcher 🫖 Green tea lover
mpgn @mpgn_x64
19K Followers 236 Following Flibustier du net ̿ ̿̿'̿'\̵͇̿̿\=(•̪●)=/̵͇̿̿/'̿̿ ̿ ̿ ̿ Podcast Hack'n Speak @hacknspeak / https://t.co/GyACSFg9mw
an0n @an0n_r0
14K Followers 734 Following CRT(E|O|L) | OSCP | @RingZer0_CTF 1st (for 2yrs) | HackTheBox Top10 | RPISEC MBE | Flare-On completer | GoogleCTF writeup winner | SSD research | Math MSc |🇭🇺
Josh @passthehashbrwn
10K Followers 294 Following Adversarial Simulation at IBM, tweets are mine etc.
Dirk-jan @_dirkjan
30K Followers 208 Following Hacker at @OutsiderSec. Researches AD and Azure (AD) security. Likes to play around with Python and write tools that make work easier.
Filip Dragovic @filip_dragovic
7K Followers 1K Following My research unless stated otherwise. My opinions are my own and do not represent the views of my employer. Red Team @MDSecLabs
Vincent Yiu @vysecurity
32K Followers 404 Following Director of Red Team, Offensive Security, Agentic AI. Helping organizations safeguard their businesses from the bad guys.
bright @Khalid0xf
0 Followers 476 Following
Luis Rojas @nullvoidlabs
5 Followers 295 Following I'm a junior/associate penetration tester building toward ICS/OT red team Git: https://t.co/L3K9z2tFJO
We Qi @w3nq14
3 Followers 282 Following
Shrinjay Mukherjee @Shrinjaym1
8 Followers 22 Following
Velkris @warped_atom
27 Followers 240 Following 0x01 :: 52 65 64 20 54 65 61 6d 0x02 :: 50 65 6e 74 65 73 74 65 72 0x03 :: 4f 66 66 65 6e 73 69 76 65 20 44 65 76
Hisoka @Hisooka25
40 Followers 413 Following
XavierGerd @XavierGerdo
0 Followers 47 Following
Hedi @squarepoly
3 Followers 25 Following
X G @itsxgan
1 Followers 1K Following
Jimm @Jimm78148666
7 Followers 311 Following
PL @planvin
0 Followers 7 Following
rykers @beardedsec
60 Followers 2K Following
Hacker Stickers @HackerStick3rs
3K Followers 7K Following we're just here to spread neat hacking and cybersecurity related stickers. need high quality vinyl stickers made? DM us.
...and that was how w... @HowWeLostTheWar
327 Followers 3K Following Behind every wooden horse is a woodshop
Geekcrue @geekcrue
206 Followers 711 Following Incident Response & Forensics Professional. Supporter of all things Auburn University. #WAREAGLE
Roy Donk @holden_maddick
2 Followers 111 Following
Saja_foadT @foad_hame
1 Followers 142 Following Bir medya aktivisti, Gazze Şeridi'ndeki yoksul ailelere insani yardım alanında çalışıyorum. " Media_Activist"
Ghost Byte @PickettTon18807
6 Followers 1K Following
jonafk555 @jonafk555_
5 Followers 389 Following Cybersecurity player / Web security / Penetest / OSINT
maya ✨ @mayacqld
9 Followers 327 Following 18 🌺 spam acc got new of... and im looking for a content buddy ✝︎
trias @tr1as3c
1 Followers 91 Following
Abdeslem A @h4nz0x7
0 Followers 154 Following
Unknown @Unknowno313
15 Followers 1K Following
Yahya MA @YMoularad
1 Followers 431 Following
Fares @alenezi_F_B52
351 Followers 678 Following
twis @Twis65640Twis
1 Followers 522 Following
Yuu @sumaka0322
0 Followers 961 Following
Brian Billings @BillingsNetSPI
134 Followers 365 Following Director of Major Accounts for @NetSPI Surrounding myself with leaders, #Bitcoin 🚀, #CyberSecurity #NetSPI #Pentesting Views are my own.
Darius Moldovan @T3jv1l
531 Followers 568 Following Usually at keyboard !!🇷🇴 CTF Organizer at @DefCampRO and @cyberedu_ro Team
AsifAmin @AsifMAmin
4 Followers 332 Following
Richard B @radioactivedir
8 Followers 114 Following A nerd who does things, sometimes. Always learning, never an expert. Deleted old account during the eXodus.
xan @xanruth
0 Followers 123 Following
papx zobo @PapxZobo72735
2 Followers 593 Following
bl4ck4rch @bl4ckarch
287 Followers 439 Following Security Researcher & Pentester at @orangecyberdef | CTF enthusiast | @hackthebox_eu MVP 2025
Peyman Zinati @Scar3cr0vv_
207 Followers 310 Following
Hashi @unknownman772
11 Followers 616 Following
Justin Elze @HackingLZ
74K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
Florian Hansemann @CyberWarship
89K Followers 46 Following Father, Founder @HanseSecure, Pentesting, Student, ExploitDev, Redteaming, InfoSec & CyberCyber; -- Mastodon: https://t.co/KFSKYUN98M
Florian Roth ⚡️ @cyb3rops
225K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Oliver Lyak @ly4k_
9K Followers 268 Following Yet another security researcher 🔦 Github: https://t.co/7WFOFz17KI
Grzegorz Tworek @0gtweet
39K Followers 2K Following My own research, unless stated otherwise. Not necessarily "safe when taken as directed". GIT d- s+: a+ C++++ !U !L !M w++++$ b++++ G-
Adam Chester 🏴�... @_xpn_
39K Followers 554 Following TRACE at @SpecterOps | Blog at https://t.co/tjfTOllCEu
Dave Kennedy @HackingDave
233K Followers 6K Following Founder @Binary_Defense @TrustedSec. @WeHackHealth Pod. God + Family/Hacker/CSO/USMC/Intel/Fitness. Make the world a better place.
ippsec @ippsec
125K Followers 372 Following
mpgn @mpgn_x64
19K Followers 236 Following Flibustier du net ̿ ̿̿'̿'\̵͇̿̿\=(•̪●)=/̵͇̿̿/'̿̿ ̿ ̿ ̿ Podcast Hack'n Speak @hacknspeak / https://t.co/GyACSFg9mw
Mike Felch (Stay Read... @ustayready
17K Followers 2K Following Offensive @ TrustedSec | Hacking since Renegade BBS backdoors | Prior CrowdStrike/BHIS | In Christ's grip | Fighter for truth | K1HAQ | RE/VR/ED
an0n @an0n_r0
14K Followers 734 Following CRT(E|O|L) | OSCP | @RingZer0_CTF 1st (for 2yrs) | HackTheBox Top10 | RPISEC MBE | Flare-On completer | GoogleCTF writeup winner | SSD research | Math MSc |🇭🇺
Dirk-jan @_dirkjan
30K Followers 208 Following Hacker at @OutsiderSec. Researches AD and Azure (AD) security. Likes to play around with Python and write tools that make work easier.
Dr. Nestori Syynimaa @DrAzureAD
21K Followers 2K Following Principal Identity Security Researcher at Microsoft. Ex-Secureworks. (MSc, MEng, PhD, CITP, CCSK). And yes, opinions are my own ;)
DirectoryRanger @DirectoryRanger
37K Followers 108 Following This account assembles and disseminates information related to Active Directory and Windows security.
SEKTOR7 Institute @SEKTOR7net
17K Followers 348 Following Homo Aptus. Vincit qui se vincit - Publilius Syrus. Consulting, Training, Technology, Cyber domain, and more... @x33fcon founder.
Filip Dragovic @filip_dragovic
7K Followers 1K Following My research unless stated otherwise. My opinions are my own and do not represent the views of my employer. Red Team @MDSecLabs
Pliny the Liberator �... @elder_plinius
242K Followers 1K Following ⊰•-•⦑ latent space steward ❦ prompt incanter 𓃹 hacker of matrices ⊞ breaker of markov chains ☣︎ ai danger researcher ⚔︎ bt6 ⚕︎ lysios ⦒•-•⊱
Sinaei @Intel80x86
9K Followers 405 Following Windows Internals enthusiast, Interested in hardware design & low-level programming. An active developer of @HyperDbg debugger. https://t.co/TUALkTusHt
Daax @daaximus
13K Followers 413 Following reverse engineering • secure processor design • system emulation • µarch bugs @the_secret_club
sixtyvividtails @sixtyvividtails
4K Followers 399 Following Currently working as an independent GUID merchant. Fully licensed. I acquire, produce, and sell high-quality GUIDs.
Gary Stevenson @garyseconomics
188K Followers 309 Following Inequality Economist. Former Trader. Other Economists make predictions, but my ones are actually right. Explaining Economics on YouTube - garyseconomics
Dlive @D1iv3
2K Followers 1K Following Security Researcher. 2022 MSRC MVR. Windows Active Directory Security / Cloud Security / Web Security. Tweets are my own.
X-C3LL @TheXC3LL
5K Followers 632 Following Just a biologist that loves to break cyber-stuff. Ka0labs / @AdeptsOf0xcc / ID-10-Ts member. 🦉
Yarden Shafir @yarden_shafir
26K Followers 333 Following A circus artist with a visual studio license
Soroush Dalili @irsdl
20K Followers 949 Following Hacker (ethical), web appsec specialist, trainer, tools builder & apps breaker 🕸️https://t.co/YipuTcYnWc🥷 🍏A dad-joke maker🍐
Stephen Fewer @stephenfewer
10K Followers 261 Following Senior Principal Security Researcher at @rapid7. Specializing in software vulnerabilities and exploitation.
VictorV @vv474172261
3K Followers 176 Following Binary Sec😉VMware Escape at TFC 2018/21/23. Hyper-V Escape. Top3 of MSRC 23Q3/Q4/24Q1/Q3/Q4/Annual/25Q1/Annual. Watchlist for security news.
Megan @mega_spl0it
541 Followers 274 Following Purple Teamer | Probably a SIEM log | Send Memes | Putting the Tater in Administater | Security Spud @TrustedSec
Lee McWhorter - Last ... @tleemcjr
940 Followers 1K Following IT & Cyber Security Expert Generalist, Speaker/Author/Educator, CTO @Covered6llc, Chief Geek McWhorter Technologies, CompTIA Instructor & Board Member, Texan!
Higinio “w0rmer” ... @0x686967
7K Followers 5K Following Father ×3 | Full-Spectrum Operator (Offense/Defense) | Web & Network Intrusions + Fortifications | @w0rmer.bsky.social | HW Killer | Stack Ghost
🇦🇺Kylie Ochoa �... @MissAnonFatale
5K Followers 3K Following I have “the most famous breasts in FBI Cybercrime / Anonymous / Hacking history” 🤣 Mum of 2 boys | Single | #DarknetDiaries Ep. 63 - I’m the surprise ending
Scott Nusbaum @_snus
451 Followers 147 Following
Jeff Foley @jeff_foley
6K Followers 900 Following vice chair of the @owasp project committee | @owaspamass project leader | mastodon: https://t.co/5tzmNUcL6R
Altered Security @AlteredSecurity
9K Followers 2K Following Global leader in hands-on learning for enterprise and cloud security education. Join 50000+ infosec professionals from 130+ countries
Olaf Hartong @olafhartong
18K Followers 981 Following @FalconForceTeam | researcher with a camera | Microsoft MVP | Snow man role model
hasherezade @hasherezade
91K Followers 968 Following Programmer, #malware analyst. Author of #PEbear, #PEsieve, #TinyTracer. Private account. All opinions expressed here are mine only (not of my employer etc)
Matt Hand @matterpreter
10K Followers 203 Following Building @originhq | Author, Evading EDR @nostarch
Stephen Sims @Steph3nSims
26K Followers 876 Following Perpetual Student | SANS Fellow | Musician | Braggart Hater | Gray Hat Hacking | VR | 🏂 | deadcode | https://t.co/4neOSsnCQ8
Stephen Woodford | Ra... @RationalityRule
22K Followers 144 Following We are not even a pawn in the cosmic game at play... and that's okay!
Gregory Hartley @1greghartley
13K Followers 574 Following Author, former army interrogator, and resistance to interrogation instructor applying the skills of an interrogator to daily life for TV, Radio, and Print.
⭕️ Chase Hughes @NCIUniversity
57K Followers 2K Following 🌐 NCI University | Empowering Success through Mastery, Insight, and Connection - Founded by Chase Hughes and Applied Behavior Research
Sam Altman @sama
6.3M Followers 1K Following The mission of OpenAI is to ensure that AGI benefits all of humanity
Machine Learning Mast... @TeachTheMachine
76K Followers 35 Following Making Developers Awesome At Machine Learning
Marc Rogers @marcwrogers
16K Followers 1K Following Ramblings of Mad Englishman: Hacker @ BBC Real Hustle & Mr Robot. Head of Sec @ DEFCON. Founder @ CTI-League, Ransomware Taskforce, (He/Him).
Dafydd Stuttard @DafyddStuttard
7K Followers 77 Following Founder and Chief Swig at @PortSwigger. Creator of @Burp_Suite and @WebSecAcademy. Author of The Web Application Hacker's Handbook.
Abacus.AI @abacusai
102K Followers 0 Following A powerful AI Agent and SuperComputer - Build your company on Abacus AI and ChatLLM - Access to 100+ AI models
Lex Fridman @lexfridman
5.5M Followers 694 Following Host of Lex Fridman Podcast. Interested in robots and humans.
Will Dormann is on Ma... @wdormann
27K Followers 1K Following I play with vulnerabilities and exploits. I used to be here on Twitter but now I'm here: @[email protected] https://t.co/hXggdAVkSQ
Labman @Amarjit_Labu
2K Followers 2K Following Lover of breaking things | Cybersec researcher with a wide taste in music genres!! https://t.co/AOHvviQE9r ||| chr°ᶰ1k |||
Merill Fernando @merill
21K Followers 4K Following Ex-Microsoft PM | Tweets my own Built → https://t.co/QbUp63ffXf • https://t.co/8W7yvQi3jb • https://t.co/NFLDqDIY8h • https://t.co/tSWrIw8Ajh 📰 Newsletter→ https://t.co/tPzAEl0Zuq & https://t.co/894nfObWuU 🎙️ Podcast→ https://t.co/TBlNKTzn8t
Giorgio @cloned_tweets
189 Followers 579 Following AI safety and security research @Microsoft. Evil numerical optimization enthusiast.
Yuki Chen @guhe120
10K Followers 282 Following 古河, Indepent security researcher, Bug bounty, ACG Otaku, Pwn2Own 15/16/17, PwnFest16,TianfuCup 18/19/20, 5 times MSRC MVR yearly Top 1. Got two pwnie awards.
James Fridman @fjamie013
2.1M Followers 1 Following Do not submit any personal photos that you do not want to be made public. Terms and conditions apply. https://t.co/WWtgLUgpub
Dmitry Vostokov 🇮�... @DumpAnalysis
8K Followers 6K Following Diagnostician. Author of Diagnomicon. Gang of One. Software Surgeon. Machine Learning and AI for Software Diagnostics and Observability. Generative Debugging.Trends for United States
You might like
Will Schroeder
@harmj0y
50K Followers
S3cur3Th1sSh1t
@ShitSecure
29K Followers
mpgn
@mpgn_x64
19K Followers
Matt Hand
@matterpreter
10K Followers
Charlie Bromberg « ...
@_nwodtuhs
16K Followers
Lee Chagolla-Christen...
@tifkin_
14K Followers
Bad Sector Labs
@badsectorlabs
9K Followers
Pixis
@HackAndDo
8K Followers
LuemmelSec
@theluemmel
9K Followers
an0n
@an0n_r0
14K Followers
Chetan Nayak (Brute R...
@NinjaParanoid
32K Followers
spotheplanet
@spotheplanet
12K Followers
Ryan Cobb
@cobbr_io
12K Followers
klez
@KlezVirus
10K Followers
mgeeky | Mariusz Bana...
@mariuszbit
15K Followers