@IndiShell1046

SQL Injection fan Develop vulnerable labs and web shells in spare time https://xitter.cf/t.co/K2kSnZjLDO

 IndiShell Lab
mannulinux.org
Joined May 2016
  • Tweets5.2K
  • Following533
  • Followers2.2K
153Media
Everyone was saying RFI is dead in PHP applications (including me). Today, I got a way to perform RFI even if remote URL inclusion is disabled. I blogged about it 😄 SMB is loaded with awesomeness \m/ mannulinux.org/2019/05/explo…
13
304
14
654
Manish Kishan Tanwar retweeted
S3cur3Th1sSh1t@ShitSecureSep 18
First offensive talk today from Karan Raheja and @IndiShell1046 about weaponising IIS for Active Directory Post Exploitation. 🙌 @MCTTP_Con
2
5
1
23
3,769
Manish Kishan Tanwar retweeted
Dr. Ch33r10@Ch33r10Sep 10
🚨 GIVEAWAY TIME 🚨 I’m giving away 5 FREE seats to the @TheDFIRReport Digital Forensics Challenge happening on 9/26/26 🎟️ dfirlabs.thedfirreport.com/d… To enter: 1️⃣ Like ❤️ 2️⃣ Repost 🔁 3️⃣ Comment "I'm in!" 💬 🔥 Bonus: Reply with a cybersecurity meme!
10
17
1
20
4,146
Manish Kishan Tanwar retweeted
bohops
@bohopsSep 9
Don't forget to think about your well-being from time-to-time and go do other things that make you happy or provide fulfillment: - Disconnect from social media - Get off the screen and go touch grass and enjoy nature - Embrace hobbies outside of tech/cyber/etc. - Workout or go for a walk/run - Wake up early to catch a sunrise with a coffee
2
4
25
1,436
Manish Kishan Tanwar retweeted
Soroush Dalili
@irsdlSep 7
Just released some UI updates for webhacklist.com/ - check it out! GitHub: github.com/irsdl/webhacklist

Web Hacking Techniques Index

Explore two decades of web hacking research, nominations, preserved articles and annual Top 10 results.

webhacklist.com
1
21
2
102
7,675
Manish Kishan Tanwar retweeted
Abdelhamid Naceri@MSNightmare2000Sep 3
FalconFlank : Crowdstrike Falcon 0day LPE is now public github.com/MSNightmare/Falco…
90
501
78
2,903
366,688
New blog post 😃 In this blogpost, I have demonstrated how to escalate privileges from IIS Virtual Account to NT Authority/SYSTEM via AD CS mannulinux.org/2026/08/Privi…
1
4
15
1,020
Special Thanks to: Dominic sir, Ashwath sir, Vivek sir, Andy sir, Soroush sir and Marcus sir, Dima, Dylan, Daniil, PWS, Juanma, Filip, Jamie and Rio Bhai ji Manoj, Samarth, Noman, Owais, Sina, Nish, Alessendro, Konsta, Anurag and Vivek bhai ji ❤️Zero cool and Code breaker ICA❤️
3
98
Manish Kishan Tanwar retweeted
MDSec@MDSecLabsAug 28
When it Snows it Pours – Anatomy of a ServiceNow Red Team - new post by @__invictus_ mdsec.co.uk/2026/08/when-it-…
2
38
5
123
32,042
Manish Kishan Tanwar retweeted
nafiez@zeifanAug 29
Published my technical write-up on a vulnerability I discovered in Windows usbprint.sys. The issue was reported to MSRC, but Microsoft decided not to issue a fix. I’ve documented the technical details and PoC in the blog. Blog writeup: zeifan.my/usbtersakiti/
3
83
3
368
25,110
Manish Kishan Tanwar retweeted
Soroush Dalili
@irsdlAug 25
YSoNet v2026.8.1 is live. 50 to 62 gadgets, new .NET Framework 2.0 to 3.5 support, dedicated 4.0 coverage, stronger testing, and 508 archived references for researchers in the markdown format! 🔥 Thanks @cjm00n and @sinsinology! github.com/irsdl/ysonet/rele…

Release YSoNet v2026.9.2 · irsdl/ysonet

Sponsors Thank you to the people funding this work, named in Credits and in the release note for the release their support paid for. You can support the project through GitHub Sponsors. Highlights...

github.com
1
24
1
87
8,802
Manish Kishan Tanwar retweeted
Soroush Dalili
@irsdlAug 19
▶️ webhacklist.com now plays video. 297 archived techniques so far carry the talk behind the research. 236 play inside the record. Read the paper. Watch the author. webhacklist.com
1
17
94
4,349
Manish Kishan Tanwar retweeted
dylan
@_batsec_Aug 17
I’m excited to announce that OdinEye is now in public beta! Thanks to everyone who has tested it out so far. I’m building OdinEye with one mission, to provide a definitive answer to the question "Is this computer compromised?" Launch it from a one-liner and visualise the scan in real-time in your browser. No install, no setup. Join the beta at odineye.io
9
38
1
179
14,922
Manish Kishan Tanwar retweeted
Soroush Dalili
@irsdlAug 17
webhacklist.com/ has your back for most of the disappeared web hacking techniques! 😎I (my AI agents) still need to grab some such as ha.ckers, gnucitizenm, etc when web archive becomes available again 😌

Web Hacking Techniques Index

Explore two decades of web hacking research, nominations, preserved articles and annual Top 10 results.

webhacklist.com
Internet Archive
@internetarchiveAug 16
Dealing with a power outage. Apologies for the disruption in service.
14
115
9,564
Manish Kishan Tanwar retweeted
cr3ghost
@cr3ghostAug 6
Two new logical flaws in Kerberos just dropped at Black Hat. Low-privileged user to full domain takeover, including domain admins. If you're doing Active Directory pentesting, Kerberos attacks, red teaming, identity security, or detection engineering, read this. KerberLoss (CVE-2026-25177) and ResetNightmare (CVE-2026-27912). Both are logical bugs, not memory corruption. Described as surprisingly easy to exploit. semperis.com/blog/identity-c… #Infosec #RedTeam #DetectionEngineering
6
307
6
1,242
73,846
Manish Kishan Tanwar retweeted
Panos Gkatziroulis 🦄
@ipurpleAug 4
From Stack Overflows to Modern Pool Grooming 📖 Step-by-step development of kernel primitives, from simple stack corruption to advanced heap grooming on modern Windows 11 sibouzitoun.tech/labs/from-s…

HEVD: From Stack Overflows to Modern Pool Grooming

A four-part deep dive into Windows kernel exploitation, progressing from classic control flow hijacking to modern pool grooming and pure data-only attacks on Windows 11.

sibouzitoun.tech
6
7
1,267
Manish Kishan Tanwar retweeted
tetsuo
@tetsuoaiJul 31
Built an educational browser lab for buffer overflows with Grok. • 10 labs • IDA-style disasm + graph • gdb (breakpoints, stepi, context) • live stack • from pwn import * in the browser Crash it, step it, pwn it: hack.grok.me QT article covers bof's + ROP.
tetsuo
@tetsuoai28 Sep 2024

Buffer Overflows

Article · @tetsuoai
14
49
3
331
33,842
Manish Kishan Tanwar retweeted
DbgMan ^_^@0XDbgManAug 1
New blog Spent way too much time reverse engineering CrowdStrike Falcon. Somewhere along the way, I found a bug. It's low and not practically exploitable... but a bug is a bug :) Publishing soon 0xdbgman.github.io/posts/ins…

Inside the Falcon How CrowdStrike Catches You

A full reverse-engineering teardown of the CrowdStrike Falcon sensor: the six kernel callback sources, the WFP network engine, the file-system minifilter, the cspcm4 broker, the user-mode service...

0xdbgman.github.io
15
121
3
490
39,206
Manish Kishan Tanwar retweeted
SpecterOps@SpecterOpsJul 29
Compromise one node in a Windows Server Failover Cluster and you've compromised all of them. @unsigned_sh0rt dug into why: shared credentials, forged tickets, and a full attack chain to own the cluster. Check it out! ghst.ly/4wSZSoW
50
1
162
9,467
Manish Kishan Tanwar retweeted
Soroush Dalili
@irsdlJul 29
YSoNet v2026.7.9 is out 🎉 31 → 50 gadgets 54 → 88 variants 118 → 235 gadget/serializer combinations across 17 serializers 🆕 NEW GADGETS WORTH KNOWING ▸ DataTable + DataTableTypeSpoof Same-graph DataTable root carrier for RCE. No nested BinaryFormatter or extra binder boundary. TypeSpoof emits a real DataTable subclass, so blocking only the exact DataTable wire name may not prevent reconstruction. ▸ TypeConfuseDelegateFileOperations Five delegate-confusion variants for writing, copying, moving and truncating files. No child process, compiler or WPF required. ▸ AssemblyInstallerLoad Loads a specified DLL from a local or UNC path and instantiates [RunInstaller(true)] installer types. Supported by nine serializers. ▸ DynamicUpdateMapExtension Passes x:XData to NetDataContractSerializer without a binder, allowing a XAML-only sink to carry an NDCS gadget. 🔧 NOTABLE UPDATES ▸ TypeConfuseDelegate now supports SortedDictionary and TreeSet roots, useful for testing blocklists that match only the exact SortedSet wire name. ▸ WindowsIdentity and WindowsClaimsIdentity can carry the inner BinaryFormatter graph through actor, bootstrapContext, claims or WIF’s _actor sink. Variant numbering is now aligned across both gadgets and all serializers. 🔗 github.com/irsdl/ysonet ysonet.com | ysonet.net #AppSec #YSoNet
2
26
2
101
8,542
Manish Kishan Tanwar retweeted
Aurélien Chalot@Defte_Jul 29
Did you know MSSQL databases can be exposed via Named pipes ? Welp using Impacket we can now connect to these github.com/fortra/impacket/p… Working on the integration on NXC 👀
2
37
2
194
12,498
Load more