SQL Injection fan Develop vulnerable labs and web shells in spare time https://xitter.cf/t.co/K2kSnZjLDO
IndiShell Lab
Joined May 2016
- Tweets5.2K
- Following533
- Followers2.2K
- Likes8.2K
Manish Kishan Tanwar retweeted
First offensive talk today from Karan Raheja and @IndiShell1046 about weaponising IIS for Active Directory Post Exploitation. 🙌 @MCTTP_Con
Manish Kishan Tanwar retweeted
🚨 GIVEAWAY TIME 🚨
I’m giving away 5 FREE seats to the @TheDFIRReport Digital Forensics Challenge happening on 9/26/26 🎟️
dfirlabs.thedfirreport.com/d…
To enter:
1️⃣ Like ❤️
2️⃣ Repost 🔁
3️⃣ Comment "I'm in!" 💬
🔥 Bonus: Reply with a cybersecurity meme!
Manish Kishan Tanwar retweeted
Don't forget to think about your well-being from time-to-time and go do other things that make you happy or provide fulfillment:
- Disconnect from social media
- Get off the screen and go touch grass and enjoy nature
- Embrace hobbies outside of tech/cyber/etc.
- Workout or go for a walk/run
- Wake up early to catch a sunrise with a coffee
Manish Kishan Tanwar retweeted
Just released some UI updates for webhacklist.com/ - check it out!
GitHub: github.com/irsdl/webhacklist
Manish Kishan Tanwar retweeted
FalconFlank : Crowdstrike Falcon 0day LPE is now public
github.com/MSNightmare/Falco…
Manish Kishan Tanwar retweeted
When it Snows it Pours – Anatomy of a ServiceNow Red Team - new post by @__invictus_ mdsec.co.uk/2026/08/when-it-…
Manish Kishan Tanwar retweeted
Published my technical write-up on a vulnerability I discovered in Windows usbprint.sys. The issue was reported to MSRC, but Microsoft decided not to issue a fix. I’ve documented the technical details and PoC in the blog. Blog writeup: zeifan.my/usbtersakiti/
Manish Kishan Tanwar retweeted
YSoNet v2026.8.1 is live.
50 to 62 gadgets, new .NET Framework 2.0 to 3.5 support, dedicated 4.0 coverage, stronger testing, and 508 archived references for researchers in the markdown format! 🔥
Thanks @cjm00n and @sinsinology!
github.com/irsdl/ysonet/rele…
Manish Kishan Tanwar retweeted
▶️ webhacklist.com now plays video.
297 archived techniques so far carry the talk behind the research. 236 play inside the record.
Read the paper. Watch the author.
webhacklist.com
Manish Kishan Tanwar retweeted
I’m excited to announce that OdinEye is now in public beta! Thanks to everyone who has tested it out so far.
I’m building OdinEye with one mission, to provide a definitive answer to the question "Is this computer compromised?"
Launch it from a one-liner and visualise the scan in real-time in your browser. No install, no setup.
Join the beta at odineye.io
Manish Kishan Tanwar retweeted
webhacklist.com/ has your back for most of the disappeared web hacking techniques! 😎I (my AI agents) still need to grab some such as ha.ckers, gnucitizenm, etc when web archive becomes available again 😌
Manish Kishan Tanwar retweeted
Two new logical flaws in Kerberos just dropped at Black Hat. Low-privileged user to full domain takeover, including domain admins.
If you're doing Active Directory pentesting, Kerberos attacks, red teaming, identity security, or detection engineering, read this.
KerberLoss (CVE-2026-25177) and ResetNightmare (CVE-2026-27912). Both are logical bugs, not memory corruption. Described as surprisingly easy to exploit.
semperis.com/blog/identity-c…
#Infosec #RedTeam #DetectionEngineering
Manish Kishan Tanwar retweeted
From Stack Overflows to Modern Pool Grooming
📖 Step-by-step development of kernel primitives, from simple stack corruption to advanced heap grooming on modern Windows 11
sibouzitoun.tech/labs/from-s…
Manish Kishan Tanwar retweeted
Built an educational browser lab for buffer overflows with Grok.
• 10 labs
• IDA-style disasm + graph
• gdb (breakpoints, stepi, context)
• live stack
• from pwn import * in the browser
Crash it, step it, pwn it: hack.grok.me
QT article covers bof's + ROP.
Manish Kishan Tanwar retweeted
New blog
Spent way too much time reverse engineering CrowdStrike Falcon.
Somewhere along the way, I found a bug. It's low and not practically exploitable... but a bug is a bug :)
Publishing soon
0xdbgman.github.io/posts/ins…
Manish Kishan Tanwar retweeted
Compromise one node in a Windows Server Failover Cluster and you've compromised all of them.
@unsigned_sh0rt dug into why: shared credentials, forged tickets, and a full attack chain to own the cluster.
Check it out! ghst.ly/4wSZSoW
Manish Kishan Tanwar retweeted
YSoNet v2026.7.9 is out 🎉
31 → 50 gadgets
54 → 88 variants
118 → 235 gadget/serializer combinations across 17 serializers
🆕 NEW GADGETS WORTH KNOWING
▸ DataTable + DataTableTypeSpoof
Same-graph DataTable root carrier for RCE. No nested BinaryFormatter or extra binder boundary. TypeSpoof emits a real DataTable subclass, so blocking only the exact DataTable wire name may not prevent reconstruction.
▸ TypeConfuseDelegateFileOperations
Five delegate-confusion variants for writing, copying, moving and truncating files. No child process, compiler or WPF required.
▸ AssemblyInstallerLoad
Loads a specified DLL from a local or UNC path and instantiates [RunInstaller(true)] installer types. Supported by nine serializers.
▸ DynamicUpdateMapExtension
Passes x:XData to NetDataContractSerializer without a binder, allowing a XAML-only sink to carry an NDCS gadget.
🔧 NOTABLE UPDATES
▸ TypeConfuseDelegate now supports SortedDictionary and TreeSet roots, useful for testing blocklists that match only the exact SortedSet wire name.
▸ WindowsIdentity and WindowsClaimsIdentity can carry the inner BinaryFormatter graph through actor, bootstrapContext, claims or WIF’s _actor sink. Variant numbering is now aligned across both gadgets and all serializers.
🔗 github.com/irsdl/ysonet
ysonet.com | ysonet.net
#AppSec #YSoNet
Manish Kishan Tanwar retweeted
Did you know MSSQL databases can be exposed via Named pipes ? Welp using Impacket we can now connect to these github.com/fortra/impacket/p…
Working on the integration on NXC 👀
Manish Kishan Tanwar retweeted
Writing your OSCP / CPTS / PNPT report? Do it in VulnQuill — free.
Preloaded exam layouts, unlimited personal reports, zero setup, no card. The same engine pros ship client work with.
vulnquill.com
Manish Kishan Tanwar retweeted
Bypassing Windows authentication reflection mitigations for SYSTEM shells - Part 1
Read: synacktiv.com/publications/b…