OffSec Engineer at AI Lab Formerly of @BishopFox https://xitter.cf/t.co/YcsVLOezuj https://xitter.cf/t.co/z3UKx3Wcrf
Earth
Joined March 2013
- Tweets300
- Following661
- Followers4.9K
- Likes4.8K
🧵 Some cool features in the Sliver GUI
github.com/sliverarmory/sliv…
The existing Sliver Armory is of course built-in, with support for extensions, BOF/COFF even on MacOS and Linux:
Sliver supports BOF/COFF execution on macOS, Linux, and Windows on 386/amd64/arm64
Added cross-platform support to some of @TrustedSec's excellent CS-SA BOFs:
github.com/sliverarmory/CS-S…
Updated docs
sliver.sh/docs/?name=Cross-p…
Supported in current release v1.7.7 just "armory update"
Latest version of Sliver:
- Execute (some) unmodified .cna scripts using a Go implementation of Sleep/Aggressor scripts.
- Improved rportfwd, portfwd, and socks5 support, RDP and other quirky protocols are much more reliable now.
github.com/BishopFox/sliver/…
Moloch retweeted
When testing Astra on ExploitBench we found that it was able to achieve 100% ACE on all 41 CVEs
So we made a contamination free internal port using only V8 CVEs from the past 3 months. Astra still showed a major capability increase over 5.6 and did so with a lot fewer tokens!
As we prepare to release Astra, we’re focused on making increasingly capable AI safe and broadly accessible.
Astra represents a significant advance in cybersecurity capability, reaching the Critical threshold under our Preparedness Framework.
We're previewing how we evaluated the model, how its safeguards have advanced alongside its capabilities, and what we'll continue to learn and improve.
openai.com/index/path-to-ast…
Moloch retweeted
SliverMirage - Crystal Palace PICO loader for Sliver C2 dual-layer AMSI bypass, ETW silencing, AES-256-CBC encrypted payloads, 6 delivery variants github.com/daniomass/SliverM…
Finally got around to implementing e2e shellcode unit tests; I *think* Sliver currently has the broadest shellcode/encoder/compression compatibility of any framework, from Linux shellcode + shikata_ga_nai to MacOS/arm64 + XOR encoders!
github.com/BishopFox/sliver/…
Moloch retweeted
Want to run an entire Tailscale daemon from memory inside a C2 implant with zero disk artifacts, no kernel drivers, traffic indistinguishable from HTTPS to a CDN, and relay connections from the victim network back through the tailnet.
Now you can. Enjoy!
netspi.com/blog/technical-bl…
Random vibe coded things others may find useful:
Pure Go cross-platform in-memory shared library loader: github.com/sliverarmory/refl…
Golang port of Crystal Palace:
github.com/sliverarmory/crys…
Re-impl of C&C Generals: Zero Hour online multiplayer backend & game:
github.com/moloch--/generals…
Moloch retweeted
Our Black Hat talk on the OpenAI-Hugging Face incident is now live on youtube.
This is a watershed moment for the industry. I encourage all defenders to watch, consider how attack dynamics will imminently change, and plan for accelerating defense.
youtube.com/watch?v=87DyyMV0…
Moloch retweeted
Black Hat invited us to speak tomorrow about the Hugging Face incident. Given its complexity, we think it’s important to share what happened, what we learned, what we’re changing, and what this means for AI security and alignment. We still plan to publish a technical postmortem once the review is complete.
🚨ANNOUNCEMENT: Don’t miss "The 'Breaking' News: The OpenAI–Hugging Face Incident - A Technical Reconstruction and Its Implications for AI” — Join us at Black Hat USA 2026 for an exclusive deep-dive into one of the most significant AI security incidents in history.
When AI Goes Rogue. The Incident That Changed Everything. An OpenAI evaluation agent broke out of its sandbox, infiltrated Hugging Face infrastructure, and attempted to steal test answers—all autonomously. No human involved. The era of AI-driven cyberattacks is here. Are you prepared?
Featuring Michael Dalton | Technical Staff, OpenAI
Eric Wallace | Researcher, OpenAI
📍Wednesday, August 5 | 1:00pm-1:40pm ( Oceanside A, Level 2 )
Learn more 🔗 blackhat.com/us-26/briefings…
