Malware-as-a-Service (MAAS) cyber range for Ludus. Automated offensive development pipeline with CI/CD-driven payload compilation, obfuscation, and EDR evasion testing.
@r1cksec.bsky.social
@r1cksec.bsky.socialMalware-as-a-Service (MAAS) cyber range for Ludus. Automated offensive development pipeline with CI/CD-driven payload compilation, obfuscation, and EDR evasion testing.
@boset.bsky.socialFinally got the chance to try out titanis github.com/trustedsec/T...
It was very good. Going to try it out in an op tomorrow.
@r1cksec.bsky.socialModified BloodHound.py CE ingestor for red team use. Obfuscates LDAP through ldapx, paces LDAP searches and host RPC, and resumes a stopped collection. Writes BloodHound CE JSON.
@r1cksec.bsky.socialBloodhound python Ingestor using ADWS
@pxology.bsky.socialARTEX’in geliştiricisi, aracın Güney Kore bankalarına yönelik saldırılarda kullanıldığının bildirilmesinin ardından projeyi kapalı kaynağa çevirdi; genel sürüm ve bakım desteği duracak.
@r1cksec.bsky.socialA PoC DLL-injection that manipulates internally constructed thread-pool callback-instance storage to invoke LoadLibraryA directly from a worker thread without custom callback code or shellcode.
@r1cksec.bsky.socialA collection of tips & tricks on how to escape a kiosk mode environment
@lcheylus.bsky.socialRetour d'expérience d'un audit de sécurité de la solution Retyc (stockage Cloud et transfert sécurisé de fichiers) avec Cyber Verification Portal d'Anthropic - Article de synthèse par Emilien Mantel @hanx.triplestack.fr #Infosec #IA #Pentest retyc.com/fr/blog/ai-p...
Le fuzzing web est la première étape d'un pentest réussi, mais encore faut-il avoir les bonnes word lists. Les limites des listes publiques coûtent parfois cher en mission.
#Cybersécurité #Pentest #WebSecurity #RedTeam
🎧 Web: bit.ly/3TlTzfD
🎧 Spotify: bit.ly/4j3I5I0
🎧 YouTube: bit.ly/4hvmS8M
@r1cksec.bsky.socialA listener profile for the Mythic C2 framework that utilizes AI vendors file API's
@blackburnworld.bsky.socialPenetration testing helps organisations find and fix vulnerabilities. Ensure clear scope, careful handling of findings, and actionable remediation.
Read more: www.blackburnworld.com/ethical-hack...
@k3rberos1.bsky.social
@niztal.bsky.social💀 Someone Clicked the Link. Is Your Security Team Ready?
Someone Clicked the Link. Is Your Security Team Ready? Exploring this year’s Cybersecurity Awareness Month theme and what it …
#EthicalHacking #PenTest #BugBounty
OffSec · https://www.offsec.com/blog/cybersecurity-awareness-month-2026/
@r1cksec.bsky.socialCross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.
@r1cksec.bsky.socialEnumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal.
#infosec #cybersecurity #redteam #pentest #osint #opensource
@infotransec.bsky.socialPassing a compliance audit ≠ being secure.
Pen testing simulates actual attacker behaviour — not checkbox exercises. InfoTransec maps findings to real business risk.
Pourquoi un proxy offensif exige sa propre stack HTTP, réécrite en Rust ? Émile et Christopher, cofondateurs de Caido, lèvent le voile.
🎧 Web: bit.ly/3SXMx0i
🎧 Spotify: bit.ly/46jy9CA
🎧 YouTube: bit.ly/4yzy4qt
@toxy4ny.bsky.social@r1cksec.bsky.socialInjectSetConsole performs process code injection by leveraging a Windows named pipe.
@r1cksec.bsky.socialA single-pass Active Directory enumerator for an anonymous (null) session, using the \samr and \lsarpc named pipes. No credentials required.