@thenopcode

professional binary breaker | Red Teamer @ MTD | BSODs are my daily routine

nop-blog.tech/
Joined November 2020
  • Tweets329
  • Following345
  • Followers1K
21Media
Around one month ago I started my OSED journey. If you want to get into binexp as well, feel free to check out my OSED GitHub repository containing lots of resources & practice binaries: github.com/nop-tech/OSED/

GitHub - nop-tech/OSED: Containing my notes, practice binaries + solutions, blog posts, etc. for...

Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301) - nop-tech/OSED

github.com
8
111
2
389
well...
4
1
1
78
6,623
There goes the fun for #flareon13
3
1,210
The @x33fcon conference was once again a complete success! I wanted to share the slides and demo videos from the "Downgrading FIDO MFA With AI Slop" talk I gave on the second day (the next day after the pirate ship party... ugh). 😵‍💫 Slides: github.com/kgretzky/talks/tr… Feel free to reuse the images and demo videos from the talk in your own presentations. Extremely happy to have had a chance to hang out with old friends and meet new faces from the Evilginx community. See you most definitely next year in Gdynia! 💗 Doxing people from the pirate ship photo: Front: @bongoalex @BigM1ke_oNe @thenopcode Back: @Jean_Maes_1994 @TimMedin
4
7
62
4,354
I'll be @BSidesVienna next week to talk about uhhh things. There probably will be: assembly, bugs, exploits, AI obviously.... actually, we will see about those details when I find the time to create the slides, so most likely ~5 hours before the con Anyways, see you there!
1
3
238
After more than 3 years, I finally found the time to update my blog and write something new. So here is a short post about a simple WinDbg extension I wrote to find code caves (definitely an improvement from the messy Python code I wrote back then): nop-blog.tech/posts/codecave…
2
14
121
5,550
Our newest blog post for CVE-2026-22601, CVE-2026-22602, CVE-2026-22603 and CVE-2026-22604 is live: mantodeasecurity.de/en/2026/… @kingcope_MTD found some nice vulnerabilities in OpenProject. Great work! 💪
5
5
583
„Generative AI in the Crosshairs - Angriffe auf KI & LLMs“ - @thenopcode hat einen interessanten Talk im Rahmen der heutigen #AlmatoDevCon gehalten! 😎
2
6
523
Back to reality after another amazing edition of @offensive_con Thank you to everyone that made this conference and the parties as great as usual and see you again next time!
11
795
On my way to @offensive_con 🔥
2
16
646
#SAFACon2025 is over. This edition was even more special than we could’ve imagined. Thank you all for coming, your wonderful energy and smiles are truly unforgettable. Already missing more time together 🤗 @SAFATeamGmbH
2
4
1
34
4,394
This concludes my first #0x41con and #SAFAcon Thank you very much @xerub & @justandrijana for those outstanding conferences and great talks! And also a big thank you to all the people who made the events so incredible 😄
1
22
1,101
Epic venue designed only for you! @0x41con @SAFATeamGmbH #SafaCon2025
2
9
31
4,172
This will make a fine addition to my collection #flareon11
17
704
#Offensivecon25 Let’s go!
3
37
1
99
13,840
/me sighs I said we were declining more giveaways, but I've made an exception and I've accepted 1 more. After this addition, NO MORE GIVEAWAYS will be accepted. Okay? New giveaway added to queue (this isn't the official giveaway yet, please don't spam the comment section) Our friends at @vulnlab_eu hooked us up with a 10 90 day vouchers to all of their Red Team labs. This includes (Full Lab access for 90 days (x10)) - Standalone machines (specific vulnerabilities) - Active Directory Chains (practice chaining stuff) - Advanced Red Team scenarios with 4 different difficulty settings ranging from easy, medium, hard, and insane. This lab is usually for full-blown Red Team's, it's pretty cool stuff. I think some people will love the chance to try out this virtual shooting range Thanks, smelly smellington
103
17
3
358
31,543
🚀 The Flare-On Challenge is officially wrapped up! This year, we had 5,324 participants, but only 275 made it to the finish line! Check out our blog post for the solutions, winner stats, and a shoutout to our challenge authors! bit.ly/4fvzfh8
74
3
206
19,485
Also, I am finally free #flareon11
19
1,229
Join me and @Steph3nSims for the next Off By One Security stream!
Stephen Sims
@Steph3nSims2 Oct 2024
Join me this Friday (4-Oct) at 11AM PT for the next Off By One Security stream with guest @thenopcode for a stream on the impact the Control Flow Guard (CFG) mitigation has on Windows Exploits! youtube.com/watch?v=A-vtsqhX… discord.gg/offbyonesecurity @offby1security
2
7
1
55
3,933
Upcoming Off By One Security Streams! More details coming soon. Tomorrow, I'm doing a private stream for YouTube members on Software Cracking via Discord. @offby1security discord.gg/offbyonesecurity youtube.com/@OffByOneSecurit…
9
36
2,373
Created a blog post explaining physical memory primitives, how they can be exploited and how we can abuse the address translation mechanism to access any memory on a system as well as inject code into any process. 0dr3f.github.io/Demystifying…

Demystifying Physical Memory Primitive Exploitation on Windows

In this blog post, we dive in the world of physical memory primitives and how the right primitives can be abused to access process memory as well as inject code, all without opening handles.

0dr3f.github.io
2
81
229
20,770
Load more