=! @addContent

||Malloy|| #infosec Enthusiast addcontent.me Kenya Joined May 2012

Tweets

4K
Followers

206
Following

804
Likes

8K

Panos Gkatziroulis 🦄 @netbiosX

2 days ago

TTP-Threat-Feeds - a script-powered threat feed generator designed to extract adversarial TTPs and IOCs using AI github.com/bobby-tablez/T…

0 20 64 4K 39

John O. @johntroony

3 days ago

Cybersecurity is a mirror: it exposes flaws not just in systems, but in people. Those who lead as well as they secure are always a step ahead. You can set the standard, influence your team, and make every decision count. Someone on your team needs to hear this! Pass it along.

0 2 5 110 0

Print3M @Print3M_

4 days ago

DLL Sideloading for Initial Access – Red Team Operator's Guide 🔥 (new article) print3m.github.io/blog/dll-sidel… - finding software to backdoor - finding DLL and function to backdoor - legit software backdooring - OPSEC considerations #redteam #infosec #malware #security

1 95 330 17K 203

Download Image

The Bug Bounty Hunter @tbbhunter

2 weeks ago

Log4Shell (Log4J): Advanced Exploitation Guide intigriti.com/researchers/bl… @intigriti #bugbounty

0 9 50 2K 23

Logan Goins @_logangoins

2 weeks ago

I Just documented a cool way to authenticate proxied tooling to LDAP in an AD environment using C2 payload auth context, without stealing any tickets or hashes! Keep tooling execution off-host and away from EDR on your Red Team assessments! specterops.io/blog/2025/08/2…

4 117 398 30K 218

Remedy @xyz_remedy

3 weeks ago

This is how attackers legally hack crypto wallets. A 25-minute guide used by real pentesters to break into browser wallet extensions like MetaMask. Here’s how they do it:

2 76 443 27K 591

Download Image

Panos Gkatziroulis 🦄 @netbiosX

4 weeks ago

Fraud Tools, Tactics, and Techniques (FT3) is Stripe's adaptation of ATT&CK-style security frameworks, specifically designed to enhance our understanding of the tactics, techniques, and procedures (TTPs) used by actors in fraudulent activities github.com/stripe/ft3

0 56 214 13K 208

Michael Bargury @mbrg0

4 weeks ago

we hijacked microsoft's copilot studio agents and got them to spill out their private knowledge, reveal their tools and let us use them to dump full crm records these are autonomous agents.. no human in the loop #DEFCON #BHUSA @tamirishaysh

107 905 9K 1.2M 7K

Download Image

OS Dev @OSdev_

a month ago

Writing a WinDbg extension youtu.be/ly-nZjuLNkw?fe…

0 36 164 13K 95

sapir federovsky @sapirxfed

a month ago

This post is SO GOOD! I knew nothing about easy auth, It's so interesting! And the abuse ideas are so creative! It's not the first time i see how env variables on app lead to such things (See MI research by NetSpy). Go read it! dazesecurity.io/blog/abusingEa…

1 12 76 6K 43

Smukx.E @5mukx

a month ago

Introduction to COM Hijacking – Persistence pentestlab.blog/2020/05/20/per…

1 52 214 9K 124

Download Image

Panos Gkatziroulis 🦄 @netbiosX

2 months ago

LudusHound - a tool for red and blue teams that transforms BloodHound data into a fully functional, Active Directory replica environment via Ludus for controlled testing. github.com/bagelByt3s/Lud…

0 32 107 4K 75

S3cur3Th1sSh1t @ShitSecure

2 months ago

Feeling super bad right now for it but I was too hasty here. I'm 100% sure I got network SYSTEM auth for multiple triggers the last days but now all besides from one just lead to user auth. I'll take down the repo as the initial promise was wrong here, need to investigate more.🙄

S3cur3Th1sSh1t @ShitSecure

2 months ago

3 108 327 33K 202

Download Image

5 14 91 18K 31

SpecterOps @SpecterOps

2 months ago

SCCM’s Management Points can leak more than you’d expect. @unsigned_sh0rt shows how Network Access Accounts, Task Sequences, and Collection Settings can be stolen by relaying a remote Management Point to the site database. Check it out ⬇️ ghst.ly/4eNLaHU

1 80 167 13K 89

David @dmcxblue

2 months ago

OK, I'm glad I want back to read the SpecterOps blog on grabbing access tokens from ESTSAUTHPERSISTENT, thanks that it's already written in python a quick patch was it #redteam

1 1 41 3K 23

Download Image

John O. @johntroony

2 months ago

To any political party or formation serious about democratic change; I offer digital forensics, tech readiness & OpSec support. Bonus services included (free if needed) just to help see the end of this regime. If you’re organizing, I’m ready to help. Let’s talk.

0 7 4 398 2

Download Image

Gray Hats @the_yellow_fall

2 months ago

A critical NTFS vulnerability (CVE-2025-49689) allows local attackers to escalate to SYSTEM privileges in Windows 11 using a crafted VHD. Avoid untrusted VHDs! meterpreter.org/critical-ntfs-…

0 15 49 2K 26

TurboDiesel @alexmwanzo

2 months ago

One of the vendors of Alex Autocare gas over 240 nosecuts for sale for japanese cars 98% of them are sub 50k bwana gari za 2008 -2013 Same day delivery for orders made before 11 Alexautocare.com

0 8 40 4K 10

Download Video

Florian Hansemann @CyberWarship

2 months ago

''Offline Extraction of Symantec Account Connectivity Credentials (ACCs)'' #infosec #pentest #redteam #blueteam itm4n.github.io/offline-extrac…

0 8 25 2K 5

LuemmelSec @theluemmel

2 months ago

This is sick. Came up with yet another method to deploy the covert channel which is way faster and way stealthier than the original idea. It still has the ability to bypass restrictive PowerShell Execution Policies. Visibility of sus input is < 2 seconds. @mame82 @RoganDawes