Red Team | Malware/exploit dev | Rev eng I love all Security Researcher who shared their work

Bikini Bottom
Joined February 2022
i now have like 3 offers 😹 life is so funny
32
122
9
4,301
43,153
‼️ UPDATE: A researcher says the Broadcom Wi-Fi router bug affects way more countries. The vulnerable code is also in ZTE's F680 v4, which ISPs from Spain to Vietnam, Egypt and Moldova offer. Three Movistar Spain routers appear affected. Broadcom still won't assign a CVE.
🚨 BREAKING: A Broadcom Wi-Fi bug lets anyone in range run code on routers without the password. Quentin Kaiser showed it on Proximus, Orange Belgium and VOO routers and estimates ~1.5M in Belgium are exposed, none patched. The bug dates to 2010. Broadcom won't assign a CVE.
41
381
64
2,033
434,341
Rogue Saint 🧃 retweeted
Yo ill be in San Diego attending @OffensiveAIcon ping if you wanna catchup, chat, drink, or hack.
2
1
15
1,190
0 click rce, WAN side , router, anywhere anytime. You don't even need aircrack anymore to get wifi pass.
1
7
10
453
I think I'd be doing the blog on how I got to this, it was actually fun, Had Memory Pollution and something I call Visible Reasoning Trace Injection.
2
7
25
341
Amala, meatpie, pounded yam, moi moi, beans and plantain. I really miss y'all now more than ever
22
Rogue Saint 🧃 retweeted
Replying to @M4yFly
Successfully Found my way up to Domain Admin I made a walkthrough on how i did that here bl4ckarch.github.io/posts/GO… Feel free to come and discuss about it 😉
3
33
124
6,922
Rogue Saint 🧃 retweeted
Our first Blog post is live, Introduction to RustPack 🔥 msecops.de/blog/posts/rustpa… More to follow in the future for sure!
1
15
2
127
298,969
Rogue Saint 🧃 retweeted
New version is out!
3
28
1
195
21,661
Rogue Saint 🧃 retweeted
Another exciting giveaway for our community as part of the Month of Azure Red Teaming 2026. We’re giving you a chance to win FREE access to our Azure Red Team courses: • CARTP® (Beginner) • CARTE® (Advanced) If you’ve been looking to build real-world Azure Red Teaming skills through hands-on labs and practical attack paths, this is your opportunity. How to participate: • Like and follow us • Comment which course you’re interested in and why • Repost this post We will announce the random winners on April 25, 2026. Don’t miss this exclusive Month of Azure Red Teaming offer: Flat 20% OFF on our Azure Red Team courses Use code: MOART20 Valid till May 5, 2026 Explore now: alteredsecurity.com/azure-re… #Azure #RedTeaming #CloudSecurity #CyberSecurity #AzureSecurity #Giveaway #AlteredSecurity
132
115
4
169
11,646
Rogue Saint 🧃 retweeted
Giveaway - Our instructor-led advanced bootcamps for sharpening your Red Team skills start this weekend. Attacking and Defending Active Directory - Advanced Edition (CRTE) starts this Friday. Advanced Windows Tradecraft - Evasion Techniques for Red Teams (CETP) starts this Saturday. I am giving away one seat for each of the bootcamps. To participate, please Follow @nikhil_mitt and @AlteredSecurity, Like, Comment and Repost. We will announce the random winners on Wednesday. alteredsecurity.com/bootcamp… #RedTeam #Evasion
209
182
5
388
27,750
Rogue Saint 🧃 retweeted
A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby by @natashenka projectzero.google/2026/01/p… A 0-click exploit chain for the Pixel 9 Part 2: Cracking the Sandbox with a Big Wave by @__sethJenkins projectzero.google/2026/01/p… A 0-click exploit chain for the Pixel 9 Part 3: Where do we go from here? by @natashenka projectzero.google/2026/01/p…
1
26
95
7,496
Felt good to hit the bag again, and spar Man I had bad form and gassed out easily
18
Rogue Saint 🧃 retweeted
Thank you so much @hackthebox_eu for recognizing me as an MVP for 2025 with this sweet swag package. I owe a lot to HTB. Without HTB, my life would be on a completely different track. Through the platform, I've built skills and made friends. Here's to many more years of hacking.
8
9
260
9,773
Rogue Saint 🧃 retweeted
On-Prem Red Team Week starts today (28 Jan - 3 Feb 2026). Train in real enterprise environments. Certifications: CRTP, CRTE, CETP, CRTM, CESP-ADCS. Get up to 25% OFF + fresh 90-day lab access. Use code: REDTEAM2026 Enroll now: alteredsecurity.com/online-l… #RedTeam #OnPremSecurity #CyberSecurityTraining #AlteredSecurity
3
12
34
2,037
Rogue Saint 🧃 retweeted
On-Prem Red Team Week Giveaway! Win FREE access to: • 1 CRTP seat • 1 CRTE seat How to participate: 1. Like & follow us 2. Comment which course you’re interested in and why 3. Repost Winners will be announced on Jan 30, 2026. On-Prem Red Team Week is live (28 Jan – 3 Feb 2026): • 15% off on a single purchase • 20% off on 2 or more purchases • 25% off on 5 or more purchases (includes extra 5% Early Bird for first 100) Use code: REDTEAM2026 For more details: alteredsecurity.com/online-l… #RedTeam #OnPremSecurity #CyberSecurity #AlteredSecurity
203
189
4
356
22,322
Rogue Saint 🧃 retweeted
People tagged me saying this is malware. It's not malware. It's a false positive. It's flagged as malware because it functionality present which modifies system components and settings (in the name of gaming, or something) which some malware families may also try to do. It also has some unusual stuff inside which looks like malware, but it's not. 1. It's 144MB because it's the new fancy .NET "hostfxr" stuff, so it's all bundled together and comes with all the necessary dependencies. Inside of the binary though is an RCData section (custom section) which is (probably) flagged as malware because it contains a .DLL which is (yet another) .NET dependency. However, this is all unironically normal stuff. 2. The binary loads an internal module called "XillyGameMode". XillyGameMode is fancy, has a bunch of fancy graphics, but it ultimately contains a few core services 3. Internal "services" - "GameDetector" + GameModeService - MemoryService - NetworkService - PowerService - RegistryService - UpdateService Each "service" also has settings associated with it. 4. GameModeService checks for the presence of a bunch of random video games based on their process in-memory string (how they appear in Task Manager). It looks for: Call of Duty, Fortnite, Apex, CS2, Valheim, DOTA2, LoL, Overwatch, Valorant, GTA5, RDR2, Cyberpunk2077, and Minecraft. If any of these are identified it sets it to focus. In other words, it makes sure it's not in the background of something. This service also functions as the thingie that handles all the other services. 5. MemoryService invokes PSAPI!EmptyWorkSet and attempts to flush unused memory to disk. 6. NetworkService disables multicasting stuff, for DNS stuff, or something. It also disables NetBIOS. 7. PowerService attempts to determine if it's a desktop using Win32_SystemEnclosure from WMI. If it thinks it's a Desktop, it changes power settings to High Performance. If it thinks you're a laptop, or can't determine if it's a Desktop, it tries modifying power read scheme thingies. Some weird power stuff I never cared to look more into. 8. RegistryService modifies registry stuff to give GPU priority, disables explorer.exe restart functionality (???), enables Game Bar auto start stuff 9. UpdateService looks for updates on GitHub. It has some weird update logic by dropping a *.BAT file, but it just kills the current process. There is smarter ways to do this, but whatever. 10. It's not malware. It has malware-like functionality because it changes system settings. I don't think changing some of these things really matters a whole lot, but I'm not a gamer NERD, so I don't know. Thanks
I've been gatekeeping this for months. Windows steals 30-40% of your FPS through background bloat. I built a tool that reclaims it in one click. Completely free. No BS. Download: github.com/xillyservices-cod…
65
118
24
3,326
697,206
Rogue Saint 🧃 retweeted
Exciting news for students enrolled in the malware development course. Later this week, all module code will be available for download in Rust. In total, more than 120 projects have been converted from C to Rust. This has been an ongoing project for months and would not be possible without @5mukx.
17
20
263
15,372
Rogue Saint 🧃 retweeted
I'm going to have to be a little mean for a second. Every time I begin doing giveaways people begin sending me messages about why they deserve the giveaway. They'll say, "my Mom died", "my kids sick", "I lost my job", "I'm poor", "I'm homeless", etc. I'm sorry, dawg, but life isn't fair. I can't make an exception for you because you're having a tough time. If I'm being honest, a LOT of people are having a tough time. I know your struggle is real, but millions of other people are struggling right now too. I can't turn the giveaways into whoever has the worst life contest. Sorry.
71
20
3
972
38,161
Rogue Saint 🧃 retweeted
Pushed a new update to github.com/assetnote/react2s… -- it now scans for the RCE payload via reflection. Use the --waf-bypass flag to bypass WAFs, works well for Cloudflare/AWS. Other WAFs might need tinkering with the payload, depending on whether they don't have a max context limit.
14
126
5
618
83,364