Jeff Barron @_jeffaf

Offsec engineer | Nim/C/Python | https://t.co/nrOLU7oWlt I break things so others stay safe. jeffaf.github.io Woodstock, GA Joined March 2007

Tweets

2K
Followers

297
Following

899
Likes

2K

vx-underground @vxunderground

5 days ago

STOP CALLING IT VISHING AND SMISHING YOU SOUND LIKE A FUCKING TODDLER BABBLING NONSENSE ITS PHISHING OR SOCIAL ENGINEERING REEEEEEEEE

124 155 2K 75K 79

👀Turns out MS-EVEN can do a lot more than NULL auth: In addition to leaking environment variables, it is possible to coerce authentication from arbitrary logged on users* 🤯 *If you are willing to trigger Windows Defender.

1 45 165 18K 99

Justin Elze @HackingLZ

4 weeks ago

Zero Cool day!

16 128 621 42K 50

Download Image

Joe Rozner @jrozner

a month ago

Saw the XBOW demo at blackhat and then got kicked out of the booth when I tried to actually read the reports and look through the findings. Apparently you’re now allowed to go off the demo rails

8 15 326 32K 43

The Hacker News @TheHackersNews

a month ago

🚨 Microsoft just warned: CVE-2025-53786 lets hackers silently escalate privileges from on-prem Exchange to the cloud. No logs. No easy traces. Your hybrid setup could be a silent breach vector. Full details + fixes → thehackernews.com/2025/08/micros…

5 137 370 72K 137

Nick VanGilder @nickvangilder

2 months ago

4 44 200 13K 48

Download Video

Nick VanGilder @nickvangilder

2 months ago

4 21 146 12K 11

Download Image

Tib3rius @0xTib3rius

2 months ago

Inspired by @bettersafetynet. I pronounce "JWT" ...

15 7 24 42K 2

vx-underground @vxunderground

2 months ago

Just got done watching Mr Robot while wearing a Guy Fawkes mask and surrounding myself in vendor merch from DEFCON Nobody understands how elite I am. I use Kali Linux and I've literally never felt the touch of a woman Hack the planet, hackers. 31337 f023v32

92 106 2K 79K 129

Kai Fall @kai_fall

2 months ago

the rust mind virus

40 155 3K 122K 256

Download Image

Jeff Barron @_jeffaf

3 months ago

Nope, no, sorry ChatGPT but you're wrong. OneDrive IS ransomware.

0 0 0 27 0

Gray Hats @the_yellow_fall

3 months ago

Critical 0-Day (CVSS 9.8) in Fortinet Products Actively Exploited A critical Fortinet zero-day (CVE-2025-32756, CVSS 9.8) is being actively exploited, allowing unauthenticated RCE. PoC available, patch immediately. securityexpress.info/critical-0-day…

3 133 383 34K 171

Dirk-jan @_dirkjan

4 months ago

ESC1 via the cloud over Intune 😬

15 33 186 24K 51

Yuval Gordon @YuG0rd

4 months ago

🚀 We just released my research on BadSuccessor - a new unpatched Active Directory privilege escalation vulnerability It allows compromising any user in AD, it works with the default config, and.. Microsoft currently won't fix it 🤷‍♂️ Read Here - akamai.com/blog/security-…

22 374 867 158K 453

Download Image

Jeff Barron @_jeffaf

4 months ago

APIs need authentication. I don't understand why this is so hard for developers.

0 0 1 11 0

Nick VanGilder @nickvangilder

4 months ago

13 51 417 43K 129

Download Video

rekdt @rekdt

4 months ago

100 men vs 1 vulnerability management SLA

6 11 103 5K 1

UwU Underground @uwu_underground

4 months ago

Ayo @Fortinet @GoIvanti since both of y’all struttin through SF like you ain’t cooked half the industry. Settle it. Worst Zero Trust vendor LFG!

8 7 50 3K 3

Download Image

UwU Underground @uwu_underground

4 months ago

Zero Trust and EDR Tier list rated by nation-state funded AI catgirls. ranked by amount of snake oil in product

63 92 919 114K 389

Download Image

Radek Sienkiewicz @velvet_shark

5 months ago

Welcome to the 'Butthole Era' of AI logos. 🍑 You CANNOT unsee this collection once you notice the pattern. Especially Claude in the center - it's basically IDENTICAL to an asterisk/anus drawing by Kurt Vonnegut! 🤯 My investigation into why tech design went full sphincter.