Offensive research dude.
Joined July 2016
- Tweets3K
- Following1.7K
- Followers1.8K
- Likes1.8K
Realistically, one for @ctfradiooo. I'm not paying for this platform for premium, so I can't edit. My apologies for a possible double-at.
sinusoid retweeted
There's a lot of misinformation and panic going around about the Windows GDID (Global Device ID), let's talk about what it actually is. 🧵
> Peter Stokes
> Scattered Spider guy
> Arrested
> Microsoft helps FBI
> Read court documents
> Page 12
> Microsoft tracks Stokes from GDID
> Microsoft Global Device Identifier (GDID)
> Stokes used Windows
> Page 34
> GDID assigned to each OS install
> GDID unique to each device
> GDID only change if OS wiped
> Stokes GDID 6755467234350028
> GDID reported internet activity to Microsoft
> GDID showed Stokes using Ngrok
> GDID reported Stokes IP address
> GDID showed Stokes web activity
> GDID showed timestamps of web activity
> GDID mapped with video game activity
> GDID showed games played
> GDID undocumented
> GDID only mentioned in one MSDN document
> Azure UCDOStatus
> Azure Monitor Logging
sinusoid retweeted
I found a Linux 0day vuln with @rqda_A, and $80,000+ rewarded for it by Google kernelCTF!
The vuln has been surprisingly hidden for about 19 years.
We've published an English version of the blog post!
gmo-cybersecurity.com/blog/1…
Linux kernelで19年以上見過ごされていた0-day脆弱性を報告しました
悪用されると一般ユーザーからの権限昇格が可能になる脆弱性です
詳しくはこちら
gmo-cybersecurity.com/blog/1…
Was just thinking of how much I've enjoyed @zwad3's retrospectives over the years, and curious if some of the gang at BBB are intending to do one? Would love to read the reflections of the team once finals are done (@zaratec4, @thebluepichu, @nneonneo, etc.)!
sinusoid retweeted
I'm pleased to announce @HyperDbg v0.19.
This release introduces a new module, HyperTrace, which brings hypervisor-level integration w/ tracing technologies such as Last Branch Record (LBR) & Processor Trace (PT).
LBR is now available, with more coming.
github.com/HyperDbg/HyperDbg…
sinusoid retweeted
We think of WASM as a mechanism to run compiled code in your browser, but what if we shimmed in all the host APIs necessary to run full implants with ALL logic entirely in the WASM VM? This post walks through what that looks like.
praetorian.com/blog/wasmforg…
#wasm #malware #sliver
sinusoid retweeted
In macOS Tahoe 26.4 Apple added a new security feature to Terminal that warns users of potentially malicious pastes with a "Possible malware, Paste blocked" prompt. Here how it actually works 🧵
sinusoid retweeted
New blog: Using LLMs the right way for malware analysis
💡Tips for building an autonomous AI analysis lab on a 12 yo laptop and getting stuff done faster without loss of accuracy.
blog.gdatasoftware.com/2026/…
DEMOSCENE > all.
Realtime code, handmade ascii animations and raw tracker music. The demo ’CMOS Cosmos’ by Razor 1911 in 2025 #demoscene #ascii #msdos
sinusoid retweeted
Update:
Thanks to @RedTeamPT, I created a pull request for ntlmrelayx to reflect the new requirements:
github.com/fortra/impacket/p…
Now Shadow Creds are working again 😀
sinusoid retweeted
Two new roles for @badsectorlabs ludus:
ludus_splunk: github.com/curi0usJack/ludus…
ludus_splunk_universalforwarder: github.com/curi0usJack/ludus…
sinusoid retweeted
I've tried something new! I have streamed some unfiltered coding, writing a module to detect malicious bytes in a shellcode injection scenario for an EDR that would use the System Call Integrity Layer project: youtube.com/watch?v=gK4OXh6l…
If this content is useful, or you like it, please let me know and give me some ideas what you would want to see! I want to grow in myself and help produce content that would be beneficial for our amazing cyber community!
#blueteam #cybersecurity #redteam #driver #rust #rustlang #infosec #rustdriver #soc #cyber #cti #informationsecurity #infosec