
Father of two sons and ARIS fan. Named NOT A UNICORN!🦄 IDOR as a service. @_ifigeneia husband Never ethical , mostly legal...
Thessaloniki
Joined December 2009
- Tweets5.8K
- Following391
- Followers3.2K
- Likes15K
Vangelis tix Stykas retweeted
Replying to @jan_murray
Thanks for your critique, Janet. We actually tried a couple of episodes where House (Hugh Laurie) (please put the brackets in the right place) gets it right first time, but they were only 6 minutes long. NBC weren’t happy. Then we tried some where House never gets it right and the patient dies. The audience wasn’t happy.
One could apply your trenchant analysis to other art forms: JS Bach wrote 30 Goldberg variations on the same chord structure; Frida Kahlo painted 50 portraits of herself; Henry Moore, what??
The point is, or was, variations on a theme; if all you see is hospital, medical blah blah, then it wasn’t meant for you.
Nonetheless, I look forward to your first novel!
Vangelis tix Stykas retweeted
Hey everyone, just a reminder that our @MalwareVillage CFP for @defcon 34 is open until midnight on the 31st May!
We've got some absolutely fantastic talks already lined up, and we want to see YOURS! Time to think about submitting!
Closes in Newfoundland Daylight Time (UTC-02:30).
Vangelis tix Stykas retweeted
🚨 Part 2 of RCE on the Shenzhen Aitemi M300 Wi-Fi Repeater (model MT02) is live!
🔗 chocapikk.com/posts/2025/whe…
Discovered 5 new CVEs, including the rock-solid CVE-2025-34152.
Metasploit module PR ➡️ github.com/rapid7/metasploit…
Vangelis tix Stykas retweeted
Just finished my Initial Analysis on #Medusa #Ransomware Leak from #RansomedVC Group this morning!!! :-)
theravenfile.com/2025/07/10/…
@BleepinComputer @TheHackersNews #hack #darkweb #deepweb #infosecurity #cybersecurity #threatintelligence #threatintel #netsec #TOR #exploit
Vangelis tix Stykas retweeted
Router RCE via the public WLAN interface *which cannot be disabled on your own router without calling the ISP* w/ bonus fault injection via HDD vibrations 🤠
👑King showing by @_r0ny and a shit show by @MEOpt
r0ny.net/FiberGateway-GR241A…
Vangelis tix Stykas retweeted
I just saw the news about the layoffs and if anyone is interested in pivoting info offensive security please feel free to hit me up. My DMs are temporarily open 🖤
Vangelis tix Stykas retweeted
I spoke about the initial credential guard vulnerability at #SOCON2025, but I left out the part where the fix could be bypassed. Both bypasses have now been fixed which I cover in my blog post along with some juicy technical details. Enjoy.
Microsoft patched critical vulnerabilities (CVE-2025-21299, CVE-2025-29809) in Q1 2025.
NetSPI research reveals Kerberos canonicalization bypasses Hyper-V isolation of credentials, compromising Windows security.
Read the full article: ow.ly/WcuW50VAOTg
Vangelis tix Stykas retweeted
ℹ️ New information about DreamC2
After checking the ssh fingerprint of my previous post (xitter.cf/redrabytes/status/1905…), I found a server that uses the domain name “dreamproxy[.]ru”.
Abrissy (one of the owners of Dream C2) is from Poland and is 16 years old.
DreamC2 - A Telegram bot to automatically buy API/C2 plans to send #DDOS attacks has been "#compromised".
In an open-dir I found a file called `bot.js`, after reading it I understand that this is the code of a bot from #Telegram to buy plans on their #C2/API.
⬇️
Vangelis tix Stykas retweeted
It's also interesting to consider our #HackersAlmanack @evstykas findings on defeating ransomware actors, as new prominent threats pop up across the globe. #TheHackersAlmanack #CyberCivilDefense #Take9
ICYMI: 🚨 Learn how to #StopRansomware in our joint guide with @FBI and @CISecurity (MS-ISAC). Review the latest #IOCs, #TTPs & mitigations to prevent Medusa ransomware actors from gaining network access. cisa.gov/news-events/cyberse…
Vangelis tix Stykas retweeted
Today, @d0tslash and I released our write-up about a pre-installed tunnel service on @UnitreeRobotics Go1 robot dogs from China.
This tunnel service enables Unitree (and anyone else with the API key) to remotely control the robot dogs or even log in to their Raspberry Pi via SSH and look around your local network.
We found a total of 1,919 devices that were connected to the network at one point in time, including many universities as well as some corporate networks.
Attached to this post is a Proof of Concept video, where I use the tunnel service to connect to@d0tslash's robot dog and control it remotely.
Find the link to download the write-up in the first reply.
Vangelis tix Stykas retweeted
A little while ago I tweeted about a potential BOF-PE design. So here it is, a new design that includes a fully linked PE, C++ exceptions and use of the STL template library.
Beacon Object Files (BOFs) in C2 platforms limit developers. ow.ly/rQ2e50VjZBU
Read NetSPI's blog post to explore a reference design for a new BOF portable executable (PE) concept that bridges the gap between modern C++ development and memory-executable C2 integration.
Vangelis tix Stykas retweeted
📣🚨 BAT SIGNAL: A law in France that would mandate a backdoor in end to end encrypted communications is set for a vote within the next day, after some start-stop skirmishes.
The French Narcotraffic law would require encrypted communications providers—like Signal—create a backdoor by giving the government the ability to add themselves to any group or chat they like. In the name of (checks notes) fighting drug trafficking.
While those hyping this bad law have rushed to assure French politicians that the proposal isn’t’ ‘breaking encryption’ their arguments are as tedious as they are stale as they are laughable. For those catching up, let’s review the basics: end to end encryption must only have two ‘ends’—sender and recipient(s). Otherwise, it is backdoored. Whatever method is devised to add a ‘third end’ —from a perverted PRNG in a cryptographic protocol, to vendor-provided government software grafted onto the side of secure communications that allow said government to add themselves to your chats—it rips a hole in the hull of private communications and is a backdoor.
Indeed, the ghost participant proposal was roundly rebuked (humiliated, even) when it was first proposed in 2019 in the UK. The technical community was united, and it was never implemented in law or otherwise.
We cannot accept any backdoor, however it’s dressed up. Communications don’t stay within jurisdictional boundaries. Which means a hole created in France becomes a vector for anyone wanting to undermine Signal’s robust privacy guarantees, anywhere. Instead of contending with unbreakable math, they only have to compromise a French government employee, or the vendor-provided software used to sideload government operatives into your private chats.
This is why, as always, Signal would exit the French market before it would comply with this law as written. At this moment especially, there is simply too much riding on Signal, on our being able to forge a future in which private communication persists, to allow such pernicious undermining.
We hope—WE HOPE—that this callow, dishonest attack will fail, and will be the last. We would love to get back to the work of maintaining and improving our core technologies, instead of fighting legislation which is distinguished in nothing as much as its refusal to listen to decades of expert consensus in its drive to imperil global cybersecurity and the human right of privacy.
Vangelis tix Stykas retweeted
If you think AI Agents will be a boon to our lives then just stop and think a moment about what the AI Agent has to have access to. The security/privacy implications are profound. Description of the problem very nicely put here by @mer__edith
Vangelis tix Stykas retweeted
We just launched our new AI-powered personal dining assistant on @ProductHunt 🥹 It's been a long road to get here!! Would love your support, upvotes, comments, and feedback! producthunt.com/posts/velada…
Vangelis tix Stykas retweeted
I missed seeing this at @BSidesLondon. Finally got round to catching up. Proper interesting talk on Phone snatching, how criminals use stolen phones for profit and how @evstykas and @s0lfer compromised the criminals infrastructure.
youtu.be/HgqWUBSDs_w?si=qETN…
Vangelis tix Stykas retweeted
Stop taking life so seriously. You're not getting out alive anyways.
Call your friends. Call your parents. Overuse I love you. Get drunk. Get high. Pick the choice that makes a good story. And NEVER give up.
You got this, I believe in you.
Vangelis tix Stykas retweeted
I'll be speaking at #SOCON2025 for the first time where I will be presenting my research on a credential guard bypass that has been fixed in this month's patch Tuesday under CVE-2025-21299. Hope to see you there!
Vangelis tix Stykas retweeted
Pluralsight decided to redefine what "lifetime" means. Bye Pluralsight. For a lifetime.
Vangelis tix Stykas retweeted
Tips to enhance productivity and efficiency at work
void.gr/kargig/blog/2024/12/…
Some tips around Slack, Gmail, github, zoom, jira and meetings in general































