sudo apt install opsec
Joined March 2025
- Tweets36
- Following219
- Followers5
- Likes538
CycloneSec retweeted
You don't need a USB. You need to look like one.
Emulate the device, Windows fetches a signed package off Windows Update and runs vendor code as SYSTEM. Arbitrary code execution, LPE, standard user or empty logon screen.
DEF CON 34 talk w/ @Qm9yamFN.
Link at the first comment.
CycloneSec retweeted
Two new logical flaws in Kerberos just dropped at Black Hat. Low-privileged user to full domain takeover, including domain admins.
If you're doing Active Directory pentesting, Kerberos attacks, red teaming, identity security, or detection engineering, read this.
KerberLoss (CVE-2026-25177) and ResetNightmare (CVE-2026-27912). Both are logical bugs, not memory corruption. Described as surprisingly easy to exploit.
semperis.com/blog/identity-c…
#Infosec #RedTeam #DetectionEngineering
CycloneSec retweeted
‼️ BREAKING: More than 100,000 UK police officers and staff have had their full names, contact details and force locations leaked on the dark web after a hack on the national police legal database.
MoD, Home Office, NCA and CPS staff are also exposed. One officer says the leak "puts officers at serious risk."
CycloneSec retweeted
Re: our statement on Image Generation in Google Earth:
“We know that people uniquely trust Google Earth for a reliable view of the world. We’ve seen geospatial professionals using this feature for a range of useful purposes, however we’ve also seen people sharing screenshots of generated imagery that appear to violate our policies. So we’re rolling back this feature in Google Earth while we work on implementing stronger guardrails. It's important to note that generated images didn’t appear in the main Google Earth experience for others to see and were watermarked as AI generated.”
CycloneSec retweeted
Tonight I typed just one sentence into Google Earth and put refugees near the Mexican border. Then I planted a nuclear plant in Iran. What on earth is Google doing? Check my latest post here: digitaldigging.org/p/how-to-…
CycloneSec retweeted
The first autonomous agent cyberattack is an unprecedented event that deserves unprecedented transparency. Today we’re sharing everything we can: a full technical timeline, an interactive replay, and how we used an open model to defend ourselves, so defenders everywhere can learn from it and prepare for what’s next.
huggingface.co/blog/agent-in…
CycloneSec retweeted
gist.github.com/testanull/08…
The PoC of SharePoint SE preauth RCE
I still can't believe that MS replaced an old stable one with a new terrible design, come with multiple preauth vuln ¯\_(ツ)_/¯
CycloneSec retweeted
💥 Introducing "Dirty Frag"
A universal Linux LPE chaining two vulns in xfrm-ESP and RxRPC. A successor class to Dirty Pipe & Copy Fail.
No race, no panic on failure, fully deterministic. ~9 years latent.
Ubuntu / RHEL / Fedora / openSUSE / CentOS / AlmaLinux, and more.
Even if you've applied the "Copy Fail" mitigation, your Linux is still vulnerable to "Dirty Frag". Apply the Dirty Frag mitigation.
Details:
dirtyfrag.io
CycloneSec retweeted
Targeted Keberoasting with NetExec🔥
If you have Write privileges over a user, you can temporarily add an SPN to your target user, request the service ticket, and then remove the SPN. Voilà: a crackable hash without interfering with potentially critical users. Made by @azoxlpf🚀
ALT Targeted Kerberoasting with NetExec
CycloneSec retweeted
We built Jikipedia, a new wiki that compiles Jmail data into exhaustive reports on key figures in the Epstein scandal.
It lists all recorded visits to Epstein's estates, each person's possible knowledge of Epstein's crimes and laws that they may have violated.
Here is Epstein's executive assistant, who sent >100k emails to him and was shielded from prison via a 2007 non-prosecution deal.
CycloneSec retweeted
Privacy nerds:
> Tuta email
> XMR
> Qubes OS
> Tails
> No social media
> Live in a cave
Epstein:
> "hello i am sex trafficking children"
> Attached image as proof
> Sent from iPhone
CycloneSec retweeted
NetExec v1.5.0 has been released!🔥
Merry Christmas everyone!🎉 It's been a very long time since the last release, so there are a TON of new features!
Some of the highlights:
- Built-in LDAP signing and channel binding checks
- RDP command execution
- certipy find integration
ALT NetExec v1.5.0 has been released!🔥
