Flork @florkfork

Joined April 2022

Tweets

98
Followers

5
Following

86
Likes

226

Gabriel Landau @GabrielLandau

a year ago

Are you tired of being stuck in userland? Come to @reconmtl where I'll show you how to fast-talk your way into the Windows kernel. Coffee and exploits provided. Come for the pwnage. Stay for the knowledge. cfp.recon.cx/recon2024/talk…

4 15 98 15K 19

Download Image

Filip Dragovic @filip_dragovic

2 years ago

So MSRC first say that they cannot reproduce ,now say that no security boundary is crossed. Tested this on few different machines and it was successful on all of them. This is bug in GamingServices , non default service so impact is not high. github.com/Wh04m1001/Gami…

13 110 410 98K 120

Download Video

alden @birchb0y

2 years ago

been spending a lot of time looking at macOS security internals recently found that XPR binaries contain ~75 of apple's spiciest YARA rules looking for malware like SimpleTea and TriangleDB 🥵 as always, binja made the whole process super easy :) alden.io/posts/secrets-…

5 49 176 26K 58

eversinc33 🤍🔪⋆｡˚ ⋆ @eversinc33

2 years ago

@offbeat @kaganisildak @vxunderground Yea yea, EDR bypass this, VEH that, but have you every ran mimikatz while surfing in 1.6.? 😎😎

6 64 316 27K 35

Download Video

vx-underground @vxunderground

2 years ago

Giveaway #??? Our friend @flopyash hooked us up with 5 tickets for the Certified Purple Team Analyst course. Comment below for a chance to win:) Course details: cyberwarfare.live/product/purple…

480 31 285 45K 18

Hyp3rlinx @hyp3rlinx

2 years ago

Microsoft Defender Anti-Malware PowerShell API -Arbitrary Code Execution hyp3rlinx.altervista.org/advisories/MIC…

1 7 20 4K 11

vx-underground @vxunderground

2 years ago

Are you new to cyber security and want to go into Digital Forensics and Incident Response? That's cool because we're doing a giveaway for that! Our friend @binaryz0ne hooked us up with 20 tickets for his DFIR course and exam for the C5W cert. Comment below for a chance to win!

827 118 694 107K 83

vx-underground @vxunderground

2 years ago

Hello, are you a nerd who likes malware? Us too! Our sponsor @MalDevAcademy has hooked us up with 3 lifetime licenses to their courses. Thank you to @mrd0x for the gifts! Leave a comment below for a chance to win!

756 52 643 87K 33

Florian Roth ⚡️ @cyb3rops

2 years ago

If you're an attacker with local admin privs, consider storing your malicious files in C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection MS tends to store noisy and shady scripts there, leading many security vendors to eventually exclude that folder

22 335 2K 254K 664

Grzegorz Tworek @0gtweet

2 years ago

It's only me seeing nasty scenarios here? 😈 "When such a path is used to create a link, the contents of the path are hidden while the contents of the backing path become visible at the path." Tweeps, please join me in welcoming Bindlink - learn.microsoft.com/en-us/windows/…

6 3 42 8K 10

vx-underground @vxunderground

2 years ago

VX-UNDERGROUND JUST SCORED PERFECT ON OUR MITRE Engenuity ATT&CK® EVALUATIONS. WE ARE THE BEST IN THE WORLD - 420% PROTECTION - 1337% DETECTION - 9001% VISIBILITY - 6969% TECHNIQUE COVERAGE - ∞% REAL TIME DETECTION - 8,446,744,073,709,551,615% OUT OF THE BOX

51 139 1K 158K 40

Gabriel Landau @GabrielLandau

2 years ago

Forget vulnerable drivers - Admin is all you need Article 👉 elastic.co/security-labs/… 👇 Demo - enable sound 🔊

13 142 372 96K 119

Download Video

ACE Responder @ACEResponder

2 years ago

Introducing RogueSliver. A tool to disrupt offensive campaigns that use the Sliver C2 framework. • Hijack beacons • Send memes to the attacker • Flood C2 servers #DFIR #RedTeam github.com/ACE-Responder/…

10 239 750 156K 211

Nick Aleks @Nick_Aleks

2 years ago

Free Black Hat GraphQL Book Giveaway! Retweet for your chance to win! #graphql #api #hacking #book #giveaway (10 signed books)

100 813 870 219K 119

Download Image

vx-underground @vxunderground

3 years ago

4 23 346 45K 34

Download Image

Yarden Shafir @yarden_shafir

3 years ago

PPLs (aka "not a security boundary") are getting some new protections in Windows 11. One of them fixes a technique documented by @elastic last year where they "sandbox" Windows Defender by modifying its token: elastic.co/security-labs/…

5 70 164 48K 54

vx-underground @vxunderground

3 years ago

February 8th @Avast announced the discovery of a Threat Actor targeting users through @DOTA2. DOTA contained an outdated build of V8 which the Threat Actor exploited through malicious game mods. V8 was not sandboxed. Incredible read here: decoded.avast.io/janvojtesek/do…

2 58 220 42K 37

blasty @bl4sty

3 years ago

Which CTF will the the first to have a FoReNSiCs challenge that employs this one little trick?

ONEKEY Research Labs @onekey_rl

3 years ago

Which CTF will the the first to have a FoReNSiCs challenge that employs this one little trick? https://t.co/6ua7o2VTQx

0 15 63 28K 9

2 7 92 20K 27

Download Image

Ahmed NB @nu11charb

3 years ago

#Giveaway time! I am giving away a voucher of my malware analysis course (tinyurl.com/2p9ap536) to one person who likes and follows. One who shares why they are interested in Malware Analysis, and one who RT this tweet.

19 97 245 23K 37

vx-underground @vxunderground

3 years ago

Lockbit ransomware group has informed us they have acquired a 3rd ransomware variant. - Lockbit Red - Lockbit Black - Lockbit Green They also have modified their ESXI ransomware variant. Yes, they actually wrote "TLP:RED" in the image.