Rogue Saint 🧃 retweeted
‼️ UPDATE: A researcher says the Broadcom Wi-Fi router bug affects way more countries.
The vulnerable code is also in ZTE's F680 v4, which ISPs from Spain to Vietnam, Egypt and Moldova offer.
Three Movistar Spain routers appear affected. Broadcom still won't assign a CVE.
Rogue Saint 🧃 retweeted
Yo ill be in San Diego attending @OffensiveAIcon ping if you wanna catchup, chat, drink, or hack.
Rogue Saint 🧃 retweeted
0 click rce, WAN side , router, anywhere anytime. You don't even need aircrack anymore to get wifi pass.
Rogue Saint 🧃 retweeted
I think I'd be doing the blog on how I got to this, it was actually fun, Had Memory Pollution and something I call Visible Reasoning Trace Injection.
Rogue Saint 🧃 retweeted
Replying to @M4yFly
Successfully Found my way up to Domain Admin
I made a walkthrough on how i did that here bl4ckarch.github.io/posts/GO…
Feel free to come and discuss about it 😉
Rogue Saint 🧃 retweeted
Our first Blog post is live, Introduction to RustPack 🔥
msecops.de/blog/posts/rustpa…
More to follow in the future for sure!
Rogue Saint 🧃 retweeted
Another exciting giveaway for our community as part of the Month of Azure Red Teaming 2026.
We’re giving you a chance to win FREE access to our Azure Red Team courses:
• CARTP® (Beginner)
• CARTE® (Advanced)
If you’ve been looking to build real-world Azure Red Teaming skills through hands-on labs and practical attack paths, this is your opportunity.
How to participate:
• Like and follow us
• Comment which course you’re interested in and why
• Repost this post
We will announce the random winners on April 25, 2026.
Don’t miss this exclusive Month of Azure Red Teaming offer:
Flat 20% OFF on our Azure Red Team courses
Use code: MOART20
Valid till May 5, 2026
Explore now:
alteredsecurity.com/azure-re…
#Azure #RedTeaming #CloudSecurity #CyberSecurity #AzureSecurity #Giveaway #AlteredSecurity
Rogue Saint 🧃 retweeted
Giveaway - Our instructor-led advanced bootcamps for sharpening your Red Team skills start this weekend.
Attacking and Defending Active Directory - Advanced Edition (CRTE) starts this Friday.
Advanced Windows Tradecraft - Evasion Techniques for Red Teams (CETP) starts this Saturday.
I am giving away one seat for each of the bootcamps. To participate, please Follow @nikhil_mitt and @AlteredSecurity, Like, Comment and Repost.
We will announce the random winners on Wednesday.
alteredsecurity.com/bootcamp…
#RedTeam #Evasion
Rogue Saint 🧃 retweeted
A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby by @natashenka
projectzero.google/2026/01/p…
A 0-click exploit chain for the Pixel 9 Part 2: Cracking the Sandbox with a Big Wave by @__sethJenkins
projectzero.google/2026/01/p…
A 0-click exploit chain for the Pixel 9 Part 3: Where do we go from here? by @natashenka
projectzero.google/2026/01/p…
Thank you so much @hackthebox_eu for recognizing me as an MVP for 2025 with this sweet swag package.
I owe a lot to HTB. Without HTB, my life would be on a completely different track. Through the platform, I've built skills and made friends. Here's to many more years of hacking.
Rogue Saint 🧃 retweeted
On-Prem Red Team Week starts today (28 Jan - 3 Feb 2026).
Train in real enterprise environments.
Certifications: CRTP, CRTE, CETP, CRTM, CESP-ADCS.
Get up to 25% OFF + fresh 90-day lab access.
Use code: REDTEAM2026
Enroll now: alteredsecurity.com/online-l…
#RedTeam #OnPremSecurity #CyberSecurityTraining #AlteredSecurity
Rogue Saint 🧃 retweeted
On-Prem Red Team Week Giveaway!
Win FREE access to:
• 1 CRTP seat
• 1 CRTE seat
How to participate:
1. Like & follow us
2. Comment which course you’re interested in and why
3. Repost
Winners will be announced on Jan 30, 2026.
On-Prem Red Team Week is live (28 Jan – 3 Feb 2026):
• 15% off on a single purchase
• 20% off on 2 or more purchases
• 25% off on 5 or more purchases
(includes extra 5% Early Bird for first 100)
Use code: REDTEAM2026
For more details: alteredsecurity.com/online-l…
#RedTeam #OnPremSecurity #CyberSecurity #AlteredSecurity
Rogue Saint 🧃 retweeted
People tagged me saying this is malware. It's not malware. It's a false positive.
It's flagged as malware because it functionality present which modifies system components and settings (in the name of gaming, or something) which some malware families may also try to do.
It also has some unusual stuff inside which looks like malware, but it's not.
1. It's 144MB because it's the new fancy .NET "hostfxr" stuff, so it's all bundled together and comes with all the necessary dependencies. Inside of the binary though is an RCData section (custom section) which is (probably) flagged as malware because it contains a .DLL which is (yet another) .NET dependency. However, this is all unironically normal stuff.
2. The binary loads an internal module called "XillyGameMode". XillyGameMode is fancy, has a bunch of fancy graphics, but it ultimately contains a few core services
3. Internal "services"
- "GameDetector" + GameModeService
- MemoryService
- NetworkService
- PowerService
- RegistryService
- UpdateService
Each "service" also has settings associated with it.
4. GameModeService checks for the presence of a bunch of random video games based on their process in-memory string (how they appear in Task Manager). It looks for: Call of Duty, Fortnite, Apex, CS2, Valheim, DOTA2, LoL, Overwatch, Valorant, GTA5, RDR2, Cyberpunk2077, and Minecraft.
If any of these are identified it sets it to focus. In other words, it makes sure it's not in the background of something. This service also functions as the thingie that handles all the other services.
5. MemoryService invokes PSAPI!EmptyWorkSet and attempts to flush unused memory to disk.
6. NetworkService disables multicasting stuff, for DNS stuff, or something. It also disables NetBIOS.
7. PowerService attempts to determine if it's a desktop using Win32_SystemEnclosure from WMI. If it thinks it's a Desktop, it changes power settings to High Performance. If it thinks you're a laptop, or can't determine if it's a Desktop, it tries modifying power read scheme thingies. Some weird power stuff I never cared to look more into.
8. RegistryService modifies registry stuff to give GPU priority, disables explorer.exe restart functionality (???), enables Game Bar auto start stuff
9. UpdateService looks for updates on GitHub. It has some weird update logic by dropping a *.BAT file, but it just kills the current process. There is smarter ways to do this, but whatever.
10. It's not malware. It has malware-like functionality because it changes system settings. I don't think changing some of these things really matters a whole lot, but I'm not a gamer NERD, so I don't know.
Thanks
I've been gatekeeping this for months.
Windows steals 30-40% of your FPS through background bloat.
I built a tool that reclaims it in one click.
Completely free. No BS.
Download: github.com/xillyservices-cod…
Rogue Saint 🧃 retweeted
Exciting news for students enrolled in the malware development course. Later this week, all module code will be available for download in Rust.
In total, more than 120 projects have been converted from C to Rust.
This has been an ongoing project for months and would not be possible without @5mukx.
Rogue Saint 🧃 retweeted
I'm going to have to be a little mean for a second.
Every time I begin doing giveaways people begin sending me messages about why they deserve the giveaway. They'll say, "my Mom died", "my kids sick", "I lost my job", "I'm poor", "I'm homeless", etc.
I'm sorry, dawg, but life isn't fair. I can't make an exception for you because you're having a tough time. If I'm being honest, a LOT of people are having a tough time. I know your struggle is real, but millions of other people are struggling right now too.
I can't turn the giveaways into whoever has the worst life contest. Sorry.
Rogue Saint 🧃 retweeted
Pushed a new update to github.com/assetnote/react2s… -- it now scans for the RCE payload via reflection. Use the --waf-bypass flag to bypass WAFs, works well for Cloudflare/AWS. Other WAFs might need tinkering with the payload, depending on whether they don't have a max context limit.



































