CRFSlick @CRFSlick

Red Team Operator & Professional Hacker crfslick.codeberg.page In Your Network Joined January 2020

Tweets

1K
Followers

161
Following

121
Likes

2K

Panos Gkatziroulis 🦄 @netbiosX

23 hours ago

Relocatable - Write C-code that will be directly compiled into raw shellcode, which can be loaded into any process without the need for tools such as Donut or sRDI github.com/tijme/relocata…

0 34 123 7K 75

Micah Van Deusen @micahvandeusen

a month ago

Search 15M+ Microsoft 365 tenants by org name or domain and discover all known domains in the same tenant: micahvandeusen.com/tools/tenant-d…. Legacy methods like Autodiscover/GetFederationInfo no longer work (mc.merill.net/message/MC1081…).

7 75 302 29K 394

Download Image

Daniel @0x64616e

2 months ago

Onboard yourself - PaloAlto Global Protect edition: 1. Become local admin 2. Export device cert from original workstation 3. Import cert in your VM 4. Login with user creds 5. Enjoy EDR-free testing :)

12 104 745 59K 622

Download Image

Wietze @Wietze

3 months ago

#HuntingTipOfTheDay: explorer.exe /root,"c:/your/file.exe" will spawn your exe from the main explorer.exe, not a new one. This breaks normal process chains. Hunt for explorer.exe with "/root", as well as explorer spawning unusual children (e.g. rundll32, mshta, powershell).

4 71 353 32K 278

Download Image

Clandestine @akaclandestine

4 months ago

GitHub - sshuttle/sshuttle: Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling. github.com/sshuttle/sshut…

0 32 155 8K 102

Linux Handbook @LinuxHandbook

5 months ago

💡 Linux tip of the day Use brace expansion with mkdir -p to create multiple nested directories in one go! This oneliner $ mkdir -p projects/{frontend,backend}/{src,test,docs} will create 6 directories instantly 👇

10 134 1K 50K 486

Download Image

Panos Gkatziroulis 🦄 @netbiosX

5 months ago

Reforging Sliver: How Simple Code Edits Can Outmaneuver EDR fortbridge.co.uk/research/refor…

0 77 221 11K 131

Willem Melching @PD0WM

5 months ago

I created a small automotive themed CTF! The first person to solve all the challenges will get a free CAN Bus Throwing Star. Check it out at ctf-teaser.icanhack.nl

3 50 232 19K 142

Download Image

David @dmcxblue

6 months ago

CVE-2025-24071 happens since the file is trying to load a remote location, sending the NTLM hash when it's extracted, but it happens regardless if it's compressed in RAR or ZIP or not, @domchell wrote about this back in 2021 can I get a CVE??? #redteam mdsec.co.uk/2021/02/farmin…

3 4 49 3K 16

David @dmcxblue

6 months ago

A python script that builds a Malleable C2 Profile almost fully automated, use any URL and it's endpoints and it will parse it to build the requests and responses, some sites may not work since it requires to have a certain size of data, so it's a POC! 😅 github.com/dmcxblue/PyObs……

0 13 70 4K 35

TCM Security @TCMSecurity

6 months ago

Is Notepad really safe for sensitive information? Think again! Even if you don’t save it, Notepad can still reveal more than you’d expect. Watch Andrew Prince demonstrate how this simple tool can become a goldmine for #digitalforensics, and a powerful asset during your next…

10 125 618 35K 457

Download Video

Deedy @deedydas

7 months ago

JSON Crack is now the only tool I use to visualize long complex JSONs. Fully open source with an online editor: https://jsoncrack[.]com/editor

49 324 4K 326K 6K

Download Image

skull @brutecat

7 months ago

Leaking the email of any YouTube user for $10,000 brutecat.com/articles/leaki…

20 144 892 61K 410

Chocapikk 🤘🏻 @Chocapikk_

7 months ago

🚀 WPProbe is now live! Here: github.com/Chocapikk/wppr… I'm releasing WPProbe, a fast and modular WordPress scanner written in Go. Current features: - Plugin enumeration & CVE detection - Fast concurrent scanning - File output support This is an initial version, and some…

Chocapikk 🤘🏻 @Chocapikk_

7 months ago

35 238 2K 147K 1K

Download Image

12 138 608 45K 524

Aiden Bai @aidenybai

7 months ago

still can't believe .zip domains exist

122 450 9K 837K 2K

Download Image

Wietze @Wietze

7 months ago

🚀 Today I'm launching ArgFuscator: an open-source platform documenting command-line obfuscation tricks AND letting you generate your own 🔥 68 executables supported out of the box - use right away, make tweaks, or create your own 👉 Now available at argfuscator.net

21 186 683 60K 489

Download Video

Craig Rowland - Agentless Linux Security @CraigHRowland

7 months ago

I made this chart to show Linux password hash types. If you are worried about pw cracking, don't use any in red and avoid those in yellow. Bigger threat is just plaintext theft though. Also, obsolete hashes mean other problems are lurking on the box.

5 10 30 3K 22

Download Image

HackerSploit @HackerSploit

7 months ago

I just realized I have a large collection of notes taken during pentests, in-depth documentation on techniques and tradecraft, and a sizeable code repo. Considering sharing this in its written form. Probably time to use hackersploit.wiki. Lmk what you think

14 59 337 20K 249

iͥͥͥͥͥͥͥͥͥͥͥͥͥͥͥͥͥͥ ͤͬͦͬͬͤͬͦͬͬͬͦͬͬͤͬͦͬͬͤ☻ ̶̄͂ ̶ @user_UNUSED_

7 months ago

WOه҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈👍ه҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈҈__{@}H══ // !═_⃞{99~9 / 9 9 9/ -/ :{#𝙻̶̶̵̶̶̡̳̳̦̤̳̼͔̜̄͌̇͛̆͗͊̀̈́͛̄͗̈́͆ͅ1_!𝚔══_ 𝚎̵͑̄͂̃͝&̶̲̲𝚁̲¿(̲_(* DR-{Aw...}}{☀️}