Raph @_Raeph

Joined June 2017

Tweets

1K
Followers

53
Following

295
Likes

7K

watchTowr @watchtowrcyber

a week ago

"Teach a hacker to find vulnerabilities, and they might find a couple. Teach a hacker to steal warez from another idiot, and they will feast for eternity" Enjoy our analysis of CrushFTP's CVE-2025-54309, fueled by watchTowr's Attacker Eye labs.watchtowr.com/the-one-where-…

6 44 130 12K 40

James Kettle @albinowax

2 weeks ago

When I condense nine months of research discoveries into a 40-min talk, it can make it seem easy. For a taster of the true experience, watch my battle to solve the 0-CL @WebSecAcademy lab! Research is persistence. youtube.com/live/B7p8dIB7b…

4 44 289 22K 158

Steven @0xthirteen

2 weeks ago

I wanted to find out if you could start the WebClient service remotely, so I ended up digging into it specterops.io/blog/2025/08/1…

1 57 114 10K 50

joernchen @joernchen

3 weeks ago

Today I have a more serious topic than usual, please consider reposting for reach: My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/3]

3 112 68 30K 5

watchTowr @watchtowrcyber

3 weeks ago

Should security solutions be secure? We're beginning to feel wrong. Enjoy some unscheduled programming - our analysis of CVE-2025-25256, a pre-auth Command Injection in Fortinet's FortiSIEM labs.watchtowr.com/should-securit…

3 34 97 15K 31

SpecterOps @SpecterOps

3 weeks ago

The DSInternals PowerShell module just got an upgrade! 🔥 Updates include: ✅ Golden dMSA Attack ✅ Full LAPS support ✅ Trust password & BitLocker recovery key extraction ✅ Read-only domain controller database compatibility Read more from @MGrafnetter. ghst.ly/412rZ7F

0 40 106 7K 39

Matt Zorich @reprise_99

3 weeks ago

Been looking to start learning Kusto, or need brushing up on your skills? I have a couple of copies of the electronic version of 'The Definitive Guide to KQL' to give away! Repost or comment below and I will put you in the draw and in a couple of days I will draw out a couple of…

48 44 86 12K 24

Graham Helton (too much for zblock) @GrahamHelton3

3 weeks ago

@IceSolst No one can figure out how to download things from Broadcom so they stopped doing research

13 11 171 4K 5

@

56 years ago

0 0 0 0 0

hashcat @hashcat

4 weeks ago

Team Hashcat took first place in the Jabbercracky contest at #DEFCON33! Thanks to HashMob for putting up a great fight and congrats on 2nd place! We're looking forward to your write-up! Huge thanks to Jabbercracky, @Stealthsploit, and @PasswordVillage for organizing!

5 38 237 17K 34

Download Image

Garrett @unsigned_sh0rt

a month ago

I pushed updates to SCCMHunter as part of my Arsenal demo at #BHUSA today! New features include a relay module for TAKEOVER-5 and a community contribution to coerce client push from a *nix host for ELEVATE-2. github.com/garrettfoster1….

1 48 134 7K 27

Jared Atkinson @jaredcatkinson

a month ago

Your devs aren’t just writing code, they’re holding keys to your kingdom. BloodHound now supports GitHub identities, so you can visualize access and control in your org’s dev pipeline. Check it out at github.com/SpecterOps/Git…

2 40 217 15K 91

Download Image

SpecterOps @SpecterOps

a month ago

Entra Connect sync accounts can be exploited to hijack device userCertificate properties, enabling device impersonation and conditional access bypass. @hotnops explores cross-domain compromise tradecraft within the same tenant. Read more ⤵️ ghst.ly/3ISMGN9

2 59 119 9K 64

incendiumrocks @incendiumrockz

a month ago

I remember that I had to do some research online on how to make exploits for vulnerabilities over MS-RPC. With this blog, I hope to fill the gap on the lacking information available online on how to make these yourself. incendium.rocks/posts/Exploit-…

1 54 138 6K 78

SpecterOps @SpecterOps

a month ago

Get ready to better understand Windows Server Failover Cluster. @unsigned_sh0rt will break it down at #BHUSA next week presenting new techniques for extracting cluster credentials, manipulating Kerberos auth, & exploiting excessive cluster permissions. ➡️ ghst.ly/45cLv2m

1 5 19 3K 4

Download Image

Rich Warren @buffaloverflow

a month ago

Clearing out the research queue in time for DEFCON, and dropping some new NachoVPN updates! 🌮🔓 Part 1: Ivanti SYSTEM RCE/LPE: blog.amberwolf.com/blog/2025/july…

2 35 111 23K 34

Alex Plaskett @alexjplaskett

a month ago

pwn.college is an education platform for students (and other interested parties) to learn about, and practice, core cybersecurity concepts in a hands-on fashion. pwn.college

3 28 114 9K 79

Download Image

SpecterOps @SpecterOps

a month ago

.@_logangoins is dropping knowledge on ADWS exploitation. 🧠 Learn how attackers use the SOAP protocol for LDAP collection on Domain Controllers & dive into maximizing OPSEC-considerate collection workflows while exploring detection methods. ghst.ly/4lPodH4

0 34 132 5K 65

Dirk-jan @_dirkjan

a month ago

For those like me who prefer to stay in the terminal and want to call REST APIs like the Microsoft Graph without complicated commands or copy/pasting tokens: roadtx now has a graphrequest command to perform simple requests against these APIs and parse the JSON.