@ShitSecure

Pentesting, scripting, pwning!

 127.0.0.1
Joined January 2019
  • Tweets3.1K
  • Following344
  • Followers29.3K
334Media
Input payload obfuscation is a real game changer here. No AMSI or ETW bypass needed and memory scanner evasion 👀
MSec Operations
@MSecOpsOct 9
RustPack Release 1.8.0 was shipped to our customers recently. Short Blogpost with the most relevant new features for everyone here 🔥🔥 msecops.de/blog/posts/rustpa… #RedTeam #OST #Pentest #Maldev
2
28
161
9,587
S3cur3Th1sSh1t retweeted
RedTeam Pentesting@RedTeamPT9h
🦛🦛🦛Microsoft patched PetitPotam this October: EFSR now only resolves local paths. This means WebDAV to LDAP Coercion is fixed! Remaining methods for clients are WSP (coercing SMB) and PrinterBug (coercing RPC), but both cannot be relayed to LDAP 💀💀💀
7
56
2
173
9,048
S3cur3Th1sSh1t retweeted
MSec Operations
@MSecOpsOct 9
RustPack Release 1.8.0 was shipped to our customers recently. Short Blogpost with the most relevant new features for everyone here 🔥🔥 msecops.de/blog/posts/rustpa… #RedTeam #OST #Pentest #Maldev
14
1
76
11,523
When your only authorization is JavaScript client side. And you can make yourself admin in 20 minutes. Than you know this was vibe coded. What is happening in 2026? 🤣
S3cur3Th1sSh1t@ShitSecureOct 6
Doing an WebApp Pentest today. And this WebApp is 95% likely fully vibe coded. Authorization issues everywhere. Logical issues everywhere. Its like an CTF. And big consulting company likely won a tender because of lowest price. Happy birthday the next years will be great! 🫡🤪
10
9
162
13,029
Doing an WebApp Pentest today. And this WebApp is 95% likely fully vibe coded. Authorization issues everywhere. Logical issues everywhere. Its like an CTF. And big consulting company likely won a tender because of lowest price. Happy birthday the next years will be great! 🫡🤪
13
5
3
228
24,306
1.5 days later Qwen 3.8 Flash Next finished the first exemplary driver exploit PoC for PPL disable. Not listed on loldrivers not on the MS Blacklist. I guess many more to follow. GLM 5.3 Flash was not needed for this one 🧐
12
18
3
221
19,334
S3cur3Th1sSh1t retweeted
Kuba Gretzky
@mrgretzkySep 30
The TL;DR of what Anthropic just said: 1.) GLM-5.3 is as good as Mythos for exploit development. 2.) Unlike Claude, GLM-5.3 gives you the results you pay for. 3.) Governments should ban AI models which are as good as theirs but are not made by them. The funniest part is how Anthropic admitted self-reflectively that the lack of guardrails may actually be benefiting the defenders working to secure their systems. 🤪 Something they never wanted to allow, because of possible misuse. I don't get it, but I feel Anthropic should at least put a note at the very bottom if they are doing paid advertising to promote GLM-5.3. 😜 Source: anthropic.com/research/glm-5…
37
172
12
1,398
56,155
Qwen 3.8 Flash is decompiling thousands of drivers 24x7 searching for vulnerabilities while in parallel trying to build PoC exploits for some found vulns. Partially reaching 160 tok/s on two Sparks. No limit, no guardrails. This is what local AI can be used for perfectly fine! 🔥
21
76
7
1,062
54,080
Group3r from @mikeloss also ported to Python now with a beautiful HTML report for easy review: github.com/S3cur3Th1sSh1t/Py…
3
10
3
83
7,370
Anyone likes Snaffler? Want to run it from Linux with a nice HTML report and filtering options? Now you can: github.com/S3cur3Th1sSh1t/Sn…
6
43
1
205
12,410
Opus 4.8 says no because of cyber. Ok than let Opus 5.0 do it 🤣
5
7
137
14,828
While on the train I was wondering how Claude Code is sending messages from one session to another. This is how and you can manually inject "teammate" messages yourself: github.com/S3cur3Th1sSh1t/cl…
2
5
45
5,486
S3cur3Th1sSh1t retweeted
MSec Operations
@MSecOpsAug 2
New Blogpost regarding to "Backdooring Open-Weight Models" just published by @ShitSecure: msecops.de/blog/posts/backdo…
22
1
74
12,109
First offensive talk today from Karan Raheja and @IndiShell1046 about weaponising IIS for Active Directory Post Exploitation. 🙌 @MCTTP_Con
2
5
1
23
3,771
S3cur3Th1sSh1t retweeted
Enno Rey@Enno_InsinuatorSep 17
.@ShitSecure & @KlezVirus sharing the work in their – really great – @MCTTP_Con talk ;-)
3
6
13
2,718
S3cur3Th1sSh1t retweeted
Wietze@WietzeFeb 12
Can LNK files ever be trusted? ⚡ My latest blog post demonstrates several new LNK abuse methods, allowing you to fully spoof the target shown in Explorer. It also introduces tools to create your own LNKs, and detected spoofed ones yourself. 🐬 wietzebeukema.nl/blog/trust-…
11
232
7
1,005
145,420
Some new LNK abuse techniques from @Wietze at @MCTTP_Con 🔥
4
19
87
6,075
And another DCOM Lateral Movement technique released @MCTTP_Con by Shebin Mathew 🔥
2
30
138
7,553
S3cur3Th1sSh1t retweeted
spencer
@techspenceSep 16
I’m not worried about the future of pentesting and here’s why. The automated pentesting trend is following a similar trajectory as vulnerability scanning. Organizations only interested in compliance or those who have very small environments or budget will just go the automated route. Those who truly want to improve and who want expert guidance and consulting will go the manual or human-led route. The good thing is the automated route has gotten better and will continue to. But so will manual/human-led. There’s plenty of organizations to serve and to help in both categories. 🫡
12
9
1
54
5,699
S3cur3Th1sSh1t retweeted
klez
@KlezVirusSep 16
[TALK] Tomorrow, Fabian and I will be presenting some of our latest research on device emulation and exploitation on Windows. Come say hi if you’re around! mcttp.de/2026-mosch-und-magn… – at Garching bei München, Deutschland

MCTTP – Munich Cyber Tactics Techniques and Procedures

Eine brandneue Konferenz für zukunftsfähige Cybersecurity in Unternehmen und Behörden.

mcttp.de
7
55
3,648
Load more