Cyber security enthusiast. #InfoSec, #OSINT, #OffSec, #Python. Sometimes I have a stroke of brilliance, but most of the time just the symptoms of a stroke.

Cyber Space
Joined November 2017
We are proud and excited to release DeimosC2. A C2 built in Golang for cross-compatibility and a frontend built in Vue. This has been a year in the making. Great work from @CharlesDardaman, @paragonsec, @BlaiseBrignac, and the entire TeamARES team! github.com/DeimosC2/DeimosC2
Just released a post detailing a methodology for analyzing Windows drivers. My goal is to lower the barrier to entry for finding exploitable driver vulnerabilities through static reversing. posts.specterops.io/methodol…
1
313
9
727
VectorSEC retweeted
Thread highlights! Malware week. CIA Vault7 Hacking Team - Development tradecraft: greysec.net/showthread.php?t… Bypassing antivirus mechanics: greysec.net/showthread.php?t… Basics on Crypters & Binders: greysec.net/showthread.php?t… Malware-Mega thread by @Real__Vector : greysec.net/showthread.php?t…
4
7
This is a hugely under-looked issue, one of a few useful tools to surface out of the crime underground is MBA Sentry allowing for the mass-abuse of stolen accounts from one site to be re-used against others. There is a blossoming cybercrime economy for the stolen logins.
Infosecurity Magazine
@InfosecurityMag24 Jan 2020
#BSidesLeeds: Credential Stuffing Often Seen as “Volume” Cybercrime infosecurity-magazine.com/ne…
1
4
8
I don't usually do interviews unless they are released on some crazy awesome underground diskmag that runs in a DOSbox. NULL Magazine is an old style bbs/ansi scene emag or even better... a diskmag since fits in a 1.44MB floppy disk. Download at github.com/xqtr/null
5
51
3
167
Two C# RunPE's capable of x86 and x64 injections github.com/gigajew/WinXRunPE…
1
51
1
94
The idea was to use Masscan to scan a large number of hosts for open ports related to certain services. Save the results. Then use Nmap NSE scripts to look for vulnerabilities in said services. A vulnerability scanner type set up if you will.
Replying to @CryptoCypher
Valid might have been an unfortunate choice of words on my part. basically i mean to launch a hail Mary at 5000 IPs if they stick they stick. The problem is that Masscan generates millions of candidates.
VectorSEC retweeted
| ̄ ̄ ̄ ̄ ̄ ̄ ̄ ̄ ̄ ̄ ̄|               Hackers        You’re all awesome |___________|                 \ (•◡•) /                   \       /                     ---                     |   |
13
306
5
1,226
ML-driven recon/scan, target selection, exploitation, post-exploit, with QUINE and Simulation in development, all serving to get smiley his cookies. Complete with live reverse shell demo and acknowledgment of limitations and other great work in this space. Bravo!
2
2
AutoSploit v2.0 - Automated Mass Exploiter goo.gl/ig1MP5 #autosploit #Connections #Exploit
1
24
62
punk.sh -> services = shodan++ Advanced search services as well.
1
3
9
Yep, the whole thing is built on a REST-like API! It's not documented yet though so you'd have to use web dev tools to check out the xhr requests and such. We're working on the docs! OH and thanks for the kind words :)
2
1
1
New BlackArch Linux ISOs (2017.12.11) released! New version of installer (v0.6.2) addresses several bugs reported by users, kernel 4.14.4, and more! Get it whille it's hot: blackarch.org/downloads.html - blackarch.org/blog.html Please RT! #blackarch #linux #pentest #pentesting
One-click MS Access database code execution by @424f424f: rvrsh3ll.net/blog/phising/ph… 💥 Static VT detection at 0/59. I expect some dynamic engines will fail to launch this properly as well.
5
173
3
258
In case you're concerned that i may be an impostor you can check out my #Github page as it references this Twitter account. github.com/NullArray