Pascal @Pascal_0x90

Tweets

2K
Followers

514
Following

1K
Likes

8K

Fabio @degrigis

4 days ago

You are probably gonna hate me for the title of this blogpost, but, here is a quick peek into one of the most surprising components of our @DARPA AIxCC CRS: DiscoveryGuy. support.shellphish.net/blog/2025/09/0… (Planning to publish a few more of these "quick peek" into the system 👀)

3 28 69 7K 38

msuiche @msuiche

2 weeks ago

🚨 New blog post: ELEGANTBOUNCER - Catch iOS 0-click exploits without having the samples. Features iOS backup forensics & messaging app scanning for iMessage, WhatsApp, Signal, Telegram & Viber attachments. 🔗 Link -> msuiche.com/posts/elegantb…

8 63 199 35K 138

Thomas Rinsma @thomasrinsma

2 weeks ago

Great challenge in SekaiCTF by @qynln based on my WASM escape talk/article. I especially like the Symbol.toPrimitive trick for better function calling, also allowing for control over thisArg! github.com/project-sekai-…

1 5 49 3K 29

EMBA Firmware Analyzer @securefirmware

2 weeks ago

Need some good read for the weekend? Check the master thesis "An In-Depth Study of Smart Building Systems: Firmware Analysis and Device Emulation" here webthesis.biblio.polito.it/secure/36421/1… Beside the usage of EMBA I like the Kernel and GCC analysis in the paper. Good job and valuable feedback

4 21 63 4K 37

Download Image

Logan Goins @_logangoins

2 weeks ago

I Just documented a cool way to authenticate proxied tooling to LDAP in an AD environment using C2 payload auth context, without stealing any tickets or hashes! Keep tooling execution off-host and away from EDR on your Red Team assessments! specterops.io/blog/2025/08/2…

4 117 398 30K 220

SEKTOR7 Institute @SEKTOR7net

2 weeks ago

Secure enclaves in post-exploitation world. A strategy to exploit vulnerable enclave DLLs and transform ROP-based execution to hide implant memory during sleep. Fantastic post by Cedric Van Bockhaven (@c3c) of Outflank Team (@OutflankNL)! Source: outflank.nl/blog/2025/06/1……

1 29 108 6K 68

Download Image

Chetan Nayak (Brute Ratel C4 Author) @NinjaParanoid

3 weeks ago

I know a lot of people will hate me for saying this but it has to be said. I get a lot of DMs saying RT is getting harder everyday, traditional loaders dont work anymore, opensource tools tend to crash or get detected instantly. But wasnt that the whole point of Red team? Thats…

23 55 376 32K 81

itszn @itszn13

3 weeks ago

For my last year of DEF CON CTF with @Nautilus_CTF I created a deck-building card-game named Nautro, written entirely in ZIG Play cards to produce resource chains to increase your total energy Most easy vulns found during the game were patched, I challenge you to exploit it!⬇️

2 10 62 6K 19

Download Image

celesian @c3l3si4n

3 weeks ago

My article "High-Performance Network Scanning with AF_XDP" has been released on the 72th issue of Phrack. phrack.org/issues/72/3_md…

12 51 288 18K 101

Download Image

chompie @chompie1337

3 weeks ago

Tomorrow 7 PM PDT! Livestream w me and @MalwareTechBlog. We’ll look at this month’s Patch Tuesday, dissect a bindiff, and try to turn it into an exploit. I might also try to get him to solve the STILL UNSOLVED Windows Phrack CTF challenge 🤔 twitch.tv/malwaretechblog

10 53 228 32K 67

emma @carrot_c4k3

3 weeks ago

finally got around to writing up my windows exploit from pwn2own vancouver 2024! (plus some notes about using it on xbox) exploits.forsale/pwn2own-2024/

6 93 360 35K 149

Wil Gibbs @cl4sm

3 weeks ago

While playing @defcon CTF Finals with @shellphish I managed to solve the ICO challenge using LLMs (GPT5 + Cursor) and almost no human intervention. You can read how I did it here! wilgibbs.com/blog/defcon-fi…

5 108 370 50K 241

ZachXBT @zachxbt

4 weeks ago

1/ An unnamed source recently compromised a DPRK IT worker device which provided insights into how a small team of five ITWs operated 30+ fake identities with government IDs and purchased Upwork/LinkedIn accounts to obtain developer jobs at projects.

390 905 7K 954K 3K

Download Image

s1r1us @S1r1u5_

4 weeks ago

holy shii, someone from @pb_ctf x BlueWater used an background AI agent solve a LiveCTF challenge while that player was still working on it. youtu.be/TYn38VfmDRU?t=…

3 8 98 14K 39

Karsten Hahn @struppigel

4 weeks ago

🦔 📹 New Video: There is more than Clean and Malicious ➡️ 7 file analysis verdicts and what they mean #MalwareAnalysisForHedgehogs #Verdicts youtube.com/watch?v=XwT23X…

2 23 63 8K 18

vx-underground @vxunderground

a month ago

All of our artwork is now available for download. You can use this to produce merch, stickers, or whatever else you'd like. You're free to do whatever you want with it. However, if you make a profit, give us some money. If you don't... you're mean. vx-underground.org/Art

12 54 383 27K 94

GuidedHacking @GuidedHacking

a month ago

Going to DEFCON? Stop by the Game Hacking Village and find out why it's the most talked about new event in the past 2 years! 👉Learn More : gamehacking.gg