@espreto

| Co-founder & Director at Thallium Security | Founder at Velliq Aerospace | I break and fix many things | My tweets are my own |

Joined October 2009
  • Tweets3.7K
  • Following669
  • Followers1.1K
150Media
Roberto Soares retweeted
Rodrigo Branco
@bsdaemonJul 20
Our team (Platform Security Engineering) at @AnthropicAI is hiring for a few different positions/responsibilities: Offensive (job-boards.greenhouse.io/ant…), Architecture (job-boards.greenhouse.io/ant…), OS Kernel (job-boards.greenhouse.io/ant…) and BMC (job-boards.greenhouse.io/ant…). Come join @matrosov , myself and other awesome folks. Reach out if you have questions.

Anthropic

job-boards.greenhouse.io
3
31
2
178
20,902
I recently reported two vulnerabilities in @Canonical Multipass for macOS, and both were fixed in version 1.16.3. CVE-2026-49237 (HIGH: 7.8): Local privilege escalation to root. CVE-2026-49238 (HIGH: 8.4): VM escape through the Multipass SFTP server. Thanks to the Canonical Multipass team for the quick fixes. 🚀
2
2
10
2,105
It was amazing. Thank you, @SecureAerospace, for the support. 🚀
Aerospace Village@SecureAerospaceMay 22
Don't worry, there's still time to join us at @ekoparty. The team can't wait to meet you! #AerospaceVillage #Ekoparty #AerospaceSecurity #Cybersecurity #HandsOn
1
141
🔥 Old Tactics, New Weapons: Abusing Modern Software Stacks for Reliable Shell Access – @espreto teaches how to craft reverse & bind shells with modern runtimes like Clojure, Bun & Crystal when classic tools fail. Hands-on at @redteamvillage_ during @defcon 33! 🚀
1
3
940
Roberto Soares retweeted
InfoSecMap@InfoSecMap25 Aug 2025
Replying to @InfoSecMap @RedTeamVillage_ @NahamSec @0dayCTF @InsiderPhD @santosomar @hAPI_hacker @MeganSquire0 @GrahamHelton3 @defcon
The @RedTeamVillage_ at #DEFCON33 also featured @cwolff411, @NopResearcher, @lazzslayer, @FilipiPires, @crd0x49, @Alevsk, @mosesrenegade, @GuhnooPlusLinux, @rxerium, @MikeHacksThings, @espreto, and @Camelotinv. Explore all @DEFCON villages! ➡️ infosecmap.com/event/def-con… #InfoSec

DEF CON 33

Title: DEF CON 33 Description:  "Access Everywhere." This year we're thinking about how to make information and services available to everyone. Available wherever you are, whoever you are, and usable...

infosecmap.com
1
4
11
667
Roberto Soares retweeted
c0c0n2026
@_c0c0n_18 Jun 2025
Welcome @espreto , Co-founder @thalliuminfosec ! ▪ 15+ yrs in offensive security ▪ Apple vuln research ▪ Red team tools ▪ Ex-EY/Nubank | Conf speaker | OSMR holder c0c0n.org #c0c0n #VulnerabilityResearch #CyberSecurity #InfoSec #ThalliumSec
4
7
455
💡Linkook: An OSINT Tool for Uncovering Linked Social Accounts and Emails from a Single Username github.com/JackJuly/linkook
8
152
3
846
67,524
Roberto Soares retweeted
Binni Shah
@binitamshah1 Feb 2025
Your laptop was stolen. It’s running Windows 11, fully up-to-date, device encryption (BitLocker) and Secure Boot enabled. Your data is safe, right? Think again! This software-only attack grabs your encryption key : neodyme.io/en/blog/bitlocker… credits @Neodyme
7
159
8
598
60,998
Roberto Soares retweeted
0xor0ne
@0xor0ne1 Feb 2025
Collection of write-ups, blog posts and papers related to cybersecurity, reverse engineering and exploitation github.com/0xor0ne/awesome-l… #infosec #cybersecurity
88
2
461
26,115
2001: The documentary film "The Secret History of Hacking" had its TV premiere. Covering computer hacking, phreaking, and social engineering, the film featured Steve Wozniak, Captain Crunch, and Kevin Mitnick. Watch the 50 minute film: archive.org/details/The_Secr…
1
52
3
151
10,804
🍲🔍 Get ready for a treat! Join us in RTV for @espreto’s talk, "Mac-n-Cheese: How to Cook Up Delicious Electron Techniques for Red Teamers” during @defcon 32. 🍴💻 Dive into the secrets of exploiting Electron apps and more! 📅 9Aug 2024, 4:00 PM 📍 Haven (Track 1)
2
9
1,168
Do you know the biggest hacker conference in the world? @defcon . I was pleased to have my talk accepted at @RedTeamVillage_ . Let’s cook something delicious there. 🤤 Thanks for the opportunity. #redteam #defcon32
1
5
24
6,493
Stoked to announce "Objective by the Sea" v7.0: objectivebythesea.org/v7/ind… #OBTS v7: 📍 Maui, Hawai'i 🗓️ Dec. 2nd - 6th '24 ...hope to see you all there! 🌞🌴

Objective by the Sea v7.0

The 🍏-security conference

objectivebythesea.org
5
40
7
126
45,941
Roberto Soares retweeted
Csaba Fitzl
@theevilbit19 Mar 2024
🆕🍎My new blogpost @KandjiMDM about how Apple attempts to mitigate some installer script vulnerabilities using "Install Script Actions" and "Install Script Mutations" in the PackageKit framework. blog.kandji.io/apple-mitigat…
2
30
3
92
14,575
Roberto Soares retweeted
Andy Gill
@ZephrFish7 Jul 2023
Ahead of our workshop and first day of @Steel_Con, the first tool to be released is SlinkyCat, @myexploit2600 and I will be demoing it in our talk and workshop labs.lares.com/introducing-s… check it out on @Lares_ Labs #purpleteam #redteam #pentest
1
11
1
32
7,132
Roberto Soares retweeted
mpgn@mpgn_x6426 Jun 2023
3, 2, 1 CrackMapExec 6.0.0 is now public ! 🎉 So much new features and fix that I've made a blogpost for it ▶️ wiki.porchetta.industries/ne… Special thanks to @_zblurx @MJHallenbeck & @al3x_n3ff for their indefectible support & contributions ! 🍻
12
195
4
560
49,091
Now there's (a more detailed) blog post on this all! Just posted: "Ironing out (the macOS details) of a Smooth Operator" objective-see.org/blog/blog_…

Ironing out (the macOS) details of a Smooth Operator (Part I)

The 3CX supply chain attack, gives us an opportunity to analyze a trojanized macOS application

objective-see.org
2
26
1
81
9,568
Roberto Soares retweeted
Felix Wilhelm
@_fel1x2 Nov 2022
Gregor Samsa: Exploiting Java's XML Signature Verification googleprojectzero.blogspot.c…

Gregor Samsa: Exploiting Java's XML Signature Verification

By Felix Wilhelm, Project ZeroEarlier this year, I discovered a surprising attack surface hidden ...

projectzero.google
2
63
3
117
Roberto Soares retweeted
mpgn@mpgn_x6431 Oct 2022
We worked together with @_zblurx to pull this new feature on CME ! CrackMapExec can now authenticate using kerberos with login/pass/nthash/aeskey without the need of a KRB5CCNAME ticket env 🚀 But wait there is more! by adding this feature we can now mimic kerbrute features 🔥🫡
7
129
7
431
Token Access Manipulation, by @RET2_pwn Part (1) xret2pwn.github.io/Access-To… Part (2) xret2pwn.github.io/Building-…

Access Token Manipulation Part 0x01

Introduction

xret2pwn.github.io
3
9
Load more