🇪🇸Cybersecurity consultant | Skullnet 💀
Joined September 2019
- Tweets797
- Following251
- Followers90
- Likes3.7K
Pinned Tweet
🌩️ Weaponizing AWS CLI for Persistence 🌩️
👋 I just published a new post where I walk through a technique I discovered to abuse the AWS CLI alias feature to establish persistence.
😎 Whether you’re a red teamer or a blue teamer, this one’s for you.
slayer0x.github.io/awscli/
Slayer0x retweeted
New CloudPEASS release! K8s-PEAS is the new Red Team k8s script from github.com/peass-ng/CloudPEA…. Use it to find the permissions of a compromised principal in a kubernetes cluster during a Red Team.
If you want to learn kubernetes Red Teaming check: hacktricks-training.com/cour…
Slayer0x retweeted
“Security researchers are doomed because of AI.”
I kept hearing versions of this, so I went back through 500 years of people saying the same thing every time a machine learned a human skill.
Some were idiots.
Some were right.
Here’s where I landed.
Slayer0x retweeted
Trains billion-parameter LLMs from scratch on a single GPU
github.com/FareedKhan-dev/tr…
😆I recently noticed that one of the vulnerabilities I reported last year has been approved and published.
I would like to thank INCIBE for managing the entire process.
This Post is from an account that no longer exists. Learn more
Slayer0x retweeted
🚨THE GEMMA 4 JAILBREAK WE’VE ALL BEEN WAITING FOR JUST DROPPED
Gemma-4-31B is now fully CRACKED and abliterated
Gemma-4-31B-JANG_4M-CRACK
🚀93.7% HarmBench compliance (149/159)
🏆Super clean base model
🤖18GB mixed-precision MLX quant for Apple Silicon
👀Vision/multimodal support included
This is the cleanest, most powerful uncensored 31B local model yet.
Perfect for research, coding, , and zero limits.
Check it out 👇🏻
huggingface.co/dealignai/Gem…
Slayer0x retweeted
Meet the Cybersecurity Baron: a specialized LLM fine-tuned for offensive security. This isn't your average chatbot. It's a quantized, 6-bit GGUF model built on Llama 3.1 Instruct, designed to think like a penetration tester. Perfect for ethical hackers and security researchers.
Slayer0x retweeted
Stealthy WMI lateral movement - StealthyWMIExec.py
ghaleb0x317374.github.io/202…
Thanks to my latest PR AzureAppsSweep now also supports PRT authentication, in case you need it you can give it a try:
github.com/carlospolop/Azure…
Slayer0x retweeted
Alguien de @LaLiga va a tener que ir a la cárcel por esto cuando empiecen a caer las hostias, porque ya lo que faltaba es amenazar a ciudadanos que tienen UN BLOG DE LINUX.
@mintradigital ¿podéis pronunciaros al menos? Es un atropello constante.
🔍 I've built an improved set of queries for BloodHound Community Edition focused on on-prem -> Entra/Azure.
Quickly match compromised onprem users with Azure/Entra identities for privilege escalation or lateral movement.
Owned objects are always our top priority when querying.
Espero que lo disfrutéis 🫡🫶
¡Nuevo artículo en Deep Hacking! 🔥
Hoy contamos con @_Slayer0x, que nos habla sobre la nube de Microsoft, y en concreto, sobre AzRTE, la certificación ofensiva de Azure desarrollada por @hacktricks_live.
En este artículo, Héctor profundiza en:
- 🧠 Contexto
- 🧪 Curso y Laboratorio
- 🧾 Examen
- 🌩️ AzRTA - AzRTE Lite
- 💸 ¡Y además, incluye un pequeño descuento para la certificación!
Una lectura muy recomendable si te interesa la ofensiva en entornos cloud, especialmente en Azure.
👉 ¡Esperamos que os guste! Dicho esto, Happy Hacking!!!
deephacking.tech/hacktricks-…
👽Thanks everyone for the support is having the release of Cloud Detective ☁️, my new cloud subdomain identification tool:
github.com/Slayer0x/Cloud-De…
🔥 CloudPEASS is here! 🔥
The ultimate fusion of PEASS scripts, focused on cloud, and HackTricks AI, taking cloud exploitation to the next level. 🚀
✨Try it once, and there’s no turning back.
🚀 To celebrate the upcoming Azure Red Team Expert cert, we're launching the first Cloud PEASS: Azure PEASS!
🔎 It gets Azure/Entra tokens, finds all your permissions, highlights sensitive ones HackTricksAI and tells you how to privesc!
👉 github.com/carlospolop/cloud…
#hacktricks
Slayer0x retweeted
🎁Monthly Giveaway🎁
Hack The Box 1-year VIP+ & 3-month Prolab
- Follow, Like, and Retweet to join!
- Winners will be picked randomly on 18 Mar.
#hackthebox #giveaway #projectsekaictf
Slayer0x retweeted
Exciting news: AzRTE (Azure Red Team Expert) is now in pre-release with an early bird discount! Don't miss your chance to get it at the best price.
Prepare to boost your Azure & EntraID hacking skills! Check: training.hacktricks.xyz/cour…
#hacktricks #training #azure #entraid #hacking
