@RedByte1337

Offensive Security Lead @ Spotit. Creator of GraphSpy

 Belgium
linkedin.com/in/keanunys/
Joined August 2014
  • Tweets125
  • Following84
  • Followers1.3K
26Media
Early Bird Offer for Q2 Bootcamps 2026 is ending soon. Save 15% on our upcoming Red Team live bootcamps across Azure and Active Directory. Use code EARLYBIRD15. Offer valid till April 10, 2026. June 5 - CARTP® Bootcamp June 6 - CRTP® Bootcamp June 27 - CARTE® Bootcamp Secure your seat: alteredsecurity.com/bootcamp… #CyberSecurity #RedTeaming #CloudSecurity #InfoSec
2
1
12
1,932
Keanu Nys retweeted
Nikhil Mittal
@nikhil_mittApr 7
Join @RedByte1337 and me for the June 2026 bootcamps as we take you through the on-prem and Azure Red team. Very practical and hands-on labs with fantastic learning aids. Bonus - dad jokes and insight (read rant) on state of identity security.
Altered Security
@AlteredSecurityApr 7
Early Bird Offer for Q2 Bootcamps 2026 is ending soon. Save 15% on our upcoming Red Team live bootcamps across Azure and Active Directory. Use code EARLYBIRD15. Offer valid till April 10, 2026. June 5 - CARTP® Bootcamp June 6 - CRTP® Bootcamp June 27 - CARTE® Bootcamp Secure your seat: alteredsecurity.com/bootcamp… #CyberSecurity #RedTeaming #CloudSecurity #InfoSec
1
9
1,133
Keanu Nys retweeted
Kuba Gretzky
@mrgretzkyMar 27
It was an honour to share what I've been working on on the stream! It was a blast! 🪝🐟 The demo gods were thankfully kind to me. 🙏 P.S. To anyone copying the session cookies character-by-character from the video feed - all the sessions have been invalidated. 🥲
Stephen Sims
@Steph3nSimsMar 27
Big thanks to @mrgretzky for a great stream on the latest in MFA bypass attacks with Evilginx and Phishlets 2.0! Each time web developers come up with new ways to secure things, Kuba is right there to find a workaround! You can watch the recording here: youtube.com/live/eeauoOYUwoM…

Evilginx MFA Phishing Evolution With Phishlets 2.0 with Kuba Gretzky

In this webcast, Kuba Gretzky demonstrates how modern adversary-in-...

youtube.com
3
9
46
4,334
Keanu Nys retweeted
Wietze@Wietze12 Aug 2025
A special shoutout to the many 🇪🇺European cyber researchers presenting their work at #DEFCON, you were awesome. 🇳🇱@_dirkjan @John_Fokker 🇮🇹@Van1sh_BSidesIT 🇫🇷@christophetd @fr0gger_ @kalimer0x00 🇧🇪@RedByte1337 🇨🇿@marektoth 🇬🇧@_mattmuir @johnnyspandex @buffaloverflow +many others
3
5
33
7,657
Grab a seat for one of @AlteredSecurity's three popular Red Team classes at @BlackHatEvents Azure Attacks Advanced (In-Person) - Break an Azure environment with focus on evasion and opsec. AD Attacks Advanced (Virtual) - Learn to break an enterprise environment with all Server 2025 machines. Azure Attacks Beginner (Virtual) - Get started with Cloud Red Team for Azure. alteredsecurity.com/training…
7
11
6,924
ProxyBlobing (@_atsika), SonicWall n-days (@SinSinology), Drag and Pwnd (@d4d89704243), Loki C2 2.0 (@0xBoku), and more! blog.badsectorlabs.com/last-…

Last Week in Security (LWiS) - 2025-05-05

ProxyBlobing (@_atsika), SonicWall n-days (@SinSinology), Drag and Pwnd (@d4d89704243), Loki C2 2.0 (@0xBoku), GraphSpy 1.5.0 (@RedByte1337), and more!

blog.badsectorlabs.com
8
1
23
3,025
💡Learn how to restrict device code flow in Entra ID! janbakker.tech/how-to-restri…

How to restrict Device Code Flow in Entra ID

For good reasons, device code flow in Entra ID is getting a lot of attention. Attackers heavily use it to get access to Microsoft 365 accounts and data. Device…

janbakker.tech
5
23
1,386
I just published this week's Entra newsletter! Featuring @12Knocksinna, @alitajran, @Christian_Frohn, @Ciraltos, @DanielatOCN, @mariussmellum, @NTFAQGuy, @Shehanperera85, @RedByte1337, @TheImmaturedad, @fabian_bader, @Thomas_Live, @cbrhh Read at ➡️ entra.news/p/entra-news-80-t…
3
12
28
2,715
Defenders use cross-origin requests through CSS url() or injected JS to leak your phishing URL in the HTTP Referer header. Today, I've been reminded about the excellent post by Keanu Nys @RedByte1337, which contains a lot of great evasion ideas! insights.spotit.be/2024/06/0…
1
35
1
112
10,884
Enrollment is open for October 2024 batches for three of @AlteredSecurity's popular bootcamps. Learn on-prem and Azure red teaming with us. Join @RedByte1337 and me for these hands-on live classes. alteredsecurity.com/bootcamp… #RedTeam #Pentesting #Azure
Altered Security bootcamps

ALT Altered Security bootcamps

9
15
5,242
Normal users are not anymore able to create Bulk AAD join tokens! That enabled DoS attacks against users' home tenants as they could exhaust Entra ID by filling it with user objects: aadinternals.com/post/dosing… Thanks to @RedByte1337 for noticing and bringing this up!
2
16
49
6,511
Keanu is releasing amazing things lately. Check out the new tool he has just released! 🔥
Keanu Nys@RedByte13375 Apr 2024
🚀I'm finally releasing GraphSpy to the public!🕵️ A powerful offensive security tool focused on making initial access and post-compromise enumeration in Microsoft Entra and M365 much more convenient during penetration tests and red team assessments! github.com/RedByte1337/Graph…

GitHub - RedByte1337/GraphSpy: Initial Access and Post-Exploitation Tool for Entra ID and M365 with...

Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI - RedByte1337/GraphSpy

github.com
1
1
20
3,709
My team just released a new tool called GraphSpy. Useful for testing M365 and Entra! insights.spotit.be/2024/04/0…
17
34
4,900
Great write-up on the recently patched Evilginx bug by Keanu Nys @RedByte1337 who found and reported the issue. insights.spotit.be/2024/03/0…
18
49
8,070
BUGFIX 🐛: Fixed a pretty serious flaw in Evilginx, which allowed scanners to detect phishing pages, bypassing the unauthorized requests protection and blacklist rules. Pull from master and enjoy! 🥳 Big thanks to Keanu Nys for finding this. 💗 github.com/kgretzky/evilginx…

fixed: unauthorized requests now properly handled for `proxy_hosts` w… · kgretzky/evilginx2@d8f7d44

…ithout `session` set to `true`, preventing proxy detection by scanners

github.com
5
21
91
11,967
Load more