ret2src @ret2src
Breaker of Stuff | Injector of 0x41 | Discoverer of Dumb Things | Creator of Glitches. Dropping shells since 0x7DC. Joined July 2021-
Tweets780
-
Followers410
-
Following1K
-
Likes1K
Quick 'n dirty BloodHound ecosystem overview. The different ingestors, collectors, analysis tools. There might be things missing. gist.github.com/gitgotgitgotit…
I made a thing that might help people: mr-r3b00t.github.io/net_draw/
medium.com/@business1sg00… Oneliners for ADCS EScx vulnerabilities.
Ghost-Sender is a misconfiguration enabling the delivery of arbitrary phishing emails against a large number of Exchange Online tenants. labs.infoguard.ch/posts/ghost-se… #infosec #cybersecurity #redteam #phishing
Synacktiv publicly disclosed a Kerberos reflection bypass, CVE-2026-26128, with PoC exploit code. It yields SYSTEM on most Windows builds. Patch now. #Kerberos #PoC #CVE #Windows securityonline.info/kerberos-refle…
I have suspected the klist.exe could be used to dump local tickets but never had time to check that out correctly. This guy did and explains it very well! Only requires local admin rights, no system, to dump all TGT's on the computer jakeotte.com/posts/klist-re…
Escalating from On-prem to Entra through MITM Attacks My colleague @0x64616e just published his latest research on lateral movement between on-premises Active Directory and Entra through DNS hijacking. Check it out: ➡️ securitylog.sva.de/2026/offsec/es…
Introducing RelayKing. github.com/depthsecurity/… Blog: depthsecurity.com/blog/introduci… Automatically identify relay attack paths. No longer will you be left to manually detect a comprehensive inventory of all the relaying vectors on your engagements. It will detect signing/EPA settings on all protocols you specify, NTLM reflection CVEs, and WebDav WebClient presence. Then, produce a comprehensive report of the relaying vectors on the network in your preferred output format. This ensures that you report ALL vulnerable instances easily, without the need for manual patching together of results from various tools. Ideal usage is with a set of low-privilege AD credentials, but it also supports unauthenticated scanning (with far less coverage). See GitHub and the blog post for more details. Please note that there ARE bugs. The LDAP(S) detection has been annoying but SHOULD be mostly solid. If you get suspicious results from it, please report an issue on GitHub with the config RelayKing reported, versus the actual one. Enjoy!
@Defte_ Patched version available from archpkgs (github.com/dadevel/archpk…) by @0x64616e tomorrow (as soon as the nightly build ran).
Self shadow cred is back again 🔥🔥🔥🔥🔥🔥🔥🔥🥳
@Defte_ Update: Thanks to @RedTeamPT, I created a pull request for ntlmrelayx to reflect the new requirements: github.com/fortra/impacke… Now Shadow Creds are working again 😀
@Defte_ Update: Thanks to @RedTeamPT, I created a pull request for ntlmrelayx to reflect the new requirements: github.com/fortra/impacke… Now Shadow Creds are working again 😀
@ShitSecure Another way is to look for snapshots of a target VM and get the memory .vmem file. After converting the memory dump it should open in WinDbg and extract some secrets with Mimikatz extension.
@VNchocoTaco When have the insides of Apple products become so ugly? Looks like a cheap Android phone, some parts don’t even seem to be straight. Is this the company so obsessed about details and perfection?
My colleague Mathias and I just finished our talk about "Relaying Unprivileged Users to RCE" at @MCTTP_Con. You can find our slides at github.com/svaredteam/tal…
Active Directory Pentest Mindmap v2025.03 Full view and updated map : orange-cyberdefense.github.io/ocd-mindmaps/i…
@nickvangilder @eliedelkind Funny, all of them are basically saying the same thing…what a coincidence
I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-glob…
Better watch out for the TCP, I’ve seen it being abused by those pesky hackers over and over again!
Hackers reportedly used something called "TruffleHog" during their attack. They also used "child_process", and something called HTTP, something called TLS, and something called TCP. Please be on the lookout for any of these hacking tools being used in your environment.
@techspence @Abdulmalik_TTG Will you still be reporting ESC1, even without a PoC? In our reports, we use a special tag called “inconclusive” for such cases.
Here's an initial release of a LDAP browser written in python with a nice GUI and some integrations with #BloodHound github.com/ZephrFish/pyLD…
Made a thing, mucking about with python and a LDAP browser concept to ingest straight into BloodHound, simple LDAP browser using PyQt as a GUI and neo4j-driver to ingest into BH. Coming Soon #itstimetobrowse
r3tr0 @DattaCharan96
81 Followers 1K Following
Dr. Nestori Syynimaa @DrAzureAD
21K Followers 2K Following Principal Identity Security Researcher at Microsoft. Ex-Secureworks. (MSc, MEng, PhD, CITP, CCSK). And yes, opinions are my own ;)
JPJitsu @jimmyjhoffa
898 Followers 2K Following "I have no special talents, I am only passionately curious." Lead by example. Be a Pro. Leave it better than you found it.
fatima2026 @fatima202606
1 Followers 553 Following
#VØID @0x4161
4K Followers 1K Following Security Researcher 👾 10+ Cybersecurity Certs Founder of @ktech_club 20 YO
MaYil @mayl8822
86 Followers 4K Following
Leonard @sheeeng
361 Followers 675 Following Battered, deleterious, disconsolate, fatuous, insipid, piffling, reticent, vapid, vexed, etc.
Chris Gill (@cfgcloud... @cgill
2K Followers 5K Following Learn-it-all | 6X Azure MVP | MCT | Blogger @ https://t.co/7Xj6BwvEck | Mentor | #a11y | Own views | @ComeCloudWithUs co-host | Husband | Author of https://t.co/51cbeeoUIp
Logivate @Logivate
2 Followers 187 Following
Coontzy1 @Coontzy1
374 Followers 1K Following Professional Script Kiddie | Security Consultant @ TrustedSec | Windows & AD research | Opinions are my own
Your Friendly Grinch @vincenzo__65
307 Followers 2K Following Non ci resta che piangere ( blues post elezioni )
Sam @sbraidley
829 Followers 1K Following Senior Penetration Tester (Ex-@sensepost) 👨🏻💻 Photographer, Gamer, Film Enthusiast, Vegan 🌱. @usbeegone. he/him
rogerwignall @rogerwignall
19 Followers 7K Following
Andrew McCallum @atr8472
716 Followers 7K Following
Colin Marshall @colinmarshall27
133 Followers 3K Following
Grogu @Grogu0x004
3 Followers 108 Following
0x8hany @Haniawad
477 Followers 1K Following
Cailloux @Cailloux968499
25 Followers 3K Following
0x4143 @0x4143
2K Followers 5K Following Purple Teaming by day, Malware Hunter by night 🏴 (All opinions are my own, not of my employer)
chamberxx @wpiotrw
50 Followers 929 Following
N1san17 @Tkaurai
36 Followers 833 Following Father | Believer | Offsec | Cybersec | AI **Opinions are my own and not the views of my employer**
'Murica TheGreat @ShutdownBlues
162 Followers 4K Following My twitter account to document how truly fucked America has become in the hand of the internal threats, i.e. our politicians
Zigmund @Zigmund14593670
23 Followers 2K Following
Remo hardeman @NWMNKYS
53 Followers 689 Following
ibrahim mahomed @ibm921000
51 Followers 788 Following
Henry Beaudin @henrybeaudin
1K Followers 7K Following Dad of 2, Operations Director @Crypto_ISAC, ex @goldmansachs, @bridgewater, @foursquare, and a few others. Views = my own.
Preslav @Preslav2003
4 Followers 398 Following
zahra @AlyZhra21373
39 Followers 2K Following
mgl @mglangley
31 Followers 2K Following
Chris @m3th0s428
51 Followers 217 Following
🍋_Drizzle85 @Lemon_Drizzle85
4 Followers 52 Following
3oран @zmarjanovic1
75 Followers 2K Following
R. @JiggaPls
4 Followers 1K Following
- @dancoleofkole
57 Followers 505 Following
Bassam Assiri🇸🇦 @BassamAssiri
7K Followers 2K Following Non Technical Account Cyber Account:@BassamAssiriSec
a @a4041875119645
0 Followers 853 Following
Openflaw @Openflaw0
17 Followers 3K Following
Alan @zenth
171 Followers 2K Following
Jalen Sheppard @jshep71042
7 Followers 331 Following
堇姬 Naup @naup96721
717 Followers 1K Following naup96321 I'm a CTF player @ pwner. And i also love Linux kernel. Now, I play CTF with CakeisTheFake / SquidProxyLovers, Now also studying at NYCU CS
Logan Diomedi @relay_royalty
223 Followers 140 Following Principal Offensive Security @depthsecurity TTP research. Exploit dev. Tool dev. Music production. Opinions are my own and not my employer's.
Steffen Buck @buck_steffen
137 Followers 155 Following
Ivan Fratric 💙💛 @ifsecure
19K Followers 211 Following Tech lead and security researcher at Google Project Zero. Author: Jackalope, TinyInst, WinAFL, Domato. PhD. Tweets are my own. Backup @[email protected]
Sahil Bloom @SahilBloom
1.2M Followers 469 Following NYT Bestselling Author of The 5 Types of Wealth. Founder of Wild Roman. Gave up a grand slam on ESPN in 2012 and still waiting for it to land.
Dylan @InsecureNature
3K Followers 242 Following Security researcher, public speaker and founder. Forbes 30 Under 30 Truffle Security @trufflesec https://t.co/vxEH7Cftbg Prev @Netflix
Berry Your Network �... @Abdulmalik_TTG
1K Followers 1K Following Not Your Regular Security Researcher | Hat off to all security researchers who shared their research | Putting the him in Vim
Adam N. @Qwesi_RED
198 Followers 889 Following /usr/bin/whoami → Cyber Security Consultant | AppSec & SecOps Ninja | (OSCP+, eMAPT, PNPT, eWPTX, CCNA, SC-900, CASP+, CREST CRT) 14x CVEs
Uriel Kosayev @UrielKosayev
6K Followers 432 Following Author of MAoS - Malware Analysis on Steroids & Antivirus Bypass Techniques | Cybersecurity Researcher | Keynote Speaker | Co-Founder @TrainSec Academy
Binary Defense @Binary_Defense
14K Followers 336 Following We're determined to make the world a safer place through our-industry recognized managed security services. Founded by @HackingDave
Dave W Plummer @davepl1968
112K Followers 100 Following Hi! I'm Dave Plummer. You might remember me from such Windows components as Task Manager, Windows Pinball, Calc, ZIPFolders, Product Activation, etc. Cheers!
Blake Burge @blakeaburge
418K Followers 232 Following On a mission to build meaningful things with @sahilbloom. Fan of Bourbon, Books, and Good Advice 🥃 📚 💬
Brad Spengler @spendergrsec
7K Followers 4 Following President of @opensrcsec, developer of @grsecurity Personal account
cyber-ipman @Cyberipman
903 Followers 437 Following Girl dad | Security Engineer | Windows/Linux tryhard | Infinite conquest of learning | OSRS lifelong nerd
Flipper Devices @flipper_net
109K Followers 152 Following A portable multi-tool device in a toy-like body for pentesters and hardware geeks. Buy worldwide here ➡️ https://t.co/n09EKVnqri
Jacob Krell @hackerfren
3K Followers 763 Following Hacker | Pilot | Lifter | OSCE3, CISSP, CCNP | Top 20 Hack the Box | World’s first Certified Offensive AI Expert (COAE) | reviews & writeups | meme magic 🐸
Shodan @shodanhq
114K Followers 2 Following Monitor your external network, search the Internet of Things and perform empirical market research. You can also find us on https://t.co/nPLFbFy8R5
EZ @IAMERICAbooted
3K Followers 2K Following If you can't beat the machines, you may as well train them. Posts don't represent my employer(s).
Wil Gibbs @cl4sm
611 Followers 270 Following Artiphishell CEO | @ASU Sefcom PhD Student | @Shellphish Captain Emeritus | AIxCC Shellphish Team Lead | 日本語
Red Siege Information... @RedSiege
10K Followers 1K Following Penetration Testing, Purple Team, Red Team & Adversary Emulation, Security Posture Review and Training Let our Offense, Prepare your Defense. #weareoffensive
MOR DAVID @m0rd4vid
324 Followers 470 Following Cyber Security Expert & Red Teamer with 5+ Years of Experience.
Zack Korman @ZackKorman
18K Followers 2K Following Cofounder @ Embroidery. Building AI cybersecurity stuff.
Paweł Hałdrzyński @phaldrzynski
905 Followers 38 Following Researching web applications' security at daylight - auditing smart contracts at night
fin3ss3g0d @fin3ss3g0d
222 Followers 65 Following Red Team Operator/Pen Tester | Offensive Security Software Developer | Tweets are unaffiliated with my employer | OSCP | OSEP | CRTO | CRTL
Justin Kohler @JustinKohler10
683 Followers 187 Following Chief Product Officer@Specterops. Father of 4. Biking is life.
PinkDraconian @PinkDraconian
12K Followers 301 Following ▶️ YouTube: https://t.co/j2KvfZx6Un 💼 LinkedIn: https://t.co/1Ky1Jft7mj
Soroush Dalili @irsdl
20K Followers 949 Following Hacker (ethical), web appsec specialist, trainer, tools builder & apps breaker 🕸️https://t.co/YipuTcYnWc🥷 🍏A dad-joke maker🍐
Two Seven One Three @TwoSevenOneT
5K Followers 2K Following Chief Security Officer (CSO) || Security Researcher at https://t.co/YsorB5YEAu || Penetration Tester || Red Teamer || Social Engineering Awareness Trainer
Ezra Woods @Shammahwoods
309 Followers 186 Following we do a bit of security research ‘round these parts. opinions are my own
Mike Manrod @CroodSolutions
3K Followers 2K Following CISO and faculty by day, adversary emulation/tools by night, bad jokes and memes all the time.
Apple Design @TheAppleDesign
114K Followers 37 Following Apple Design. Not affiliated with Apple Inc. DM or mail for business.
Charles Shirer @bsdbandit
25K Followers 27K Following A Hacker who is A Lover of People, and Life @RetroTwinz @Secbsd, @GrumpyHackers, @NovaHackers, @deadpixelsec @hacknotcrime Advocate @PositivelyBlue_ OSCP, OSWP
Robert Graham @robertgraham
69K Followers 2K Following Created (BlackICE,IPS,sidejacking,masscan). Doing (blog,code,cyber-rights,Internet-scanning). Macrodata refiner.
Geluchat @Geluchat
5K Followers 959 Following Baptiste Devigne | Bug Bounty Hunter | Best Hacker and Best Team H1-813 (Salesforce) | Best Team H1-0131 (AWS) | Eradicator H1-6102 (Salesforce)
Khoa Dinh @_l0gg
2K Followers 128 Following
Trends for United States
You might like
