wout @woetroe2

oscp crto crtl Joined April 2020

Tweets

476
Followers

43
Following

1K
Likes

3K

Tijme Gommers @tijme

19 hours ago

Exciting times. I'm publishing Dittobytes today after presenting it at @OrangeCon_nl ! Dittobytes is a true metamorphic cross-compiler aimed at evasion. Use Dittobytes to compile your malware. Each compilation produces unique, functional shellcode. github.com/tijme/dittobyt…

6 24 79 7K 36

Download Video

Prelude Research @PreludeResearch

a month ago

Announcing our whitepaper on the future of endpoint security. preludesecurity.com/runtime-memory…

6 86 286 51K 188

d3d aka dead (dead, мёртв, 死了) @deadvolvo

a month ago

blog.malicious.group/the-quiet-side… This is a living document at the moment, but here it is for now. 😅As mentioned in the paper, if you are a researcher and have questions after reading, just reach out to me and I will answer everything I can.

9 67 240 19K 197

winterknife 🌻 @_winterknife_

2 months ago

Wintel is coming for your SMEP bypasses! No more flipping the U/S bit in a PTE to mark a user-mode page as supervisor-mode on Intel Arrow Lake CPUs :) (note: this is meant for protection against speculative attacks, with the side effect of becoming SMEP 2.0)

0 7 30 3K 14

Download Image

Hacksparo 🥷👾 @hack_sparo

2 months ago

We’re cooked, guys. A new vulnerability has been discovered in sudo and you don’t even need to be in the sudo group to get root. I just tried it 👇

85 312 2K 241K 2K

Download Video

Ch40s 🏴‍☠️ @DrCh40s

2 months ago

Just wrapped up our talk at @reconmtl ! 🎤@t0nvi 🚀 My Emulation Goes to the Moon (Until FALSE_FLAG) is now also a blog post: 📖 retooling.io/blog/my-emulat… 🎥 cfp.recon.cx/recon-2025/tal… #recon2025 #reverseengineering #emulation

0 6 16 716 5

Nikolaj Schlej @NikolajSchlej

3 months ago

Published the third part of my blog series about Hydroph0bia (CVE-2025-4275) vulnerability, this one is about the fix as Insyde applied it, and my thoughts on improvements for it. coderush.me/hydroph0bia-pa…

3 36 73 9K 33

Ollie Whitehouse @ollieatnowhere

3 months ago

Weekly summary is out.. ctoatncsc.substack.com/p/cto-at-ncsc-…

0 3 7 3K 1

2OURC3 @2ourc3

3 months ago

Releasing this fun tool Golem based on @0xdea, LLVM, LLM and @semgrep Golem automates C/C++ vulnerability discovery by combining Semgrep rule scans, LLVM call-graph & CFG slicing, and AI-driven context analysis. Tool: github.com/20urc3/golem Article: bushido-sec.com/index.php/2025…

6 43 125 7K 69

Outflank @OutflankNL

3 months ago

Here's our new blog on hiding your implant in VTL1, where even an EDR's kernel sensor can't see it.🧑‍🦯 Post includes full operational details. Plus our OST offering has been updated with a Cobalt Strike sleep mask exploiting secure enclaves. Full read ➡️ outflank.nl/blog/2025/06/1…

3 85 185 15K 113

Elastic Security Labs @elasticseclabs

3 months ago

Dive deep into malware detection with the latest article by John Uhlmann: "Call Stacks: No More Free Passes for Malware." Discover how call stacks provide vital insights into malware behavior. Read more: go.es.io/4kDWjgr

1 43 128 10K 82

Zero Labs @ZeroNLabs

12 months ago

How #PreventionEngineering is used to stop #ADCS 𝐂𝐞𝐫𝐭𝐢𝐟𝐢𝐞𝐝 𝐏𝐫𝐞-𝐎𝐰𝐧𝐞𝐝 attacks? @SagieDulce demos how attacks via #Certify and other tools are mitigated with the #RPCFirewall, #LDAPFirewall and #NetworkSegmentation. Read more here: hubs.li/Q02PlSxC0

1 6 9 834 3

DawnSecurityLab @dawnseclab

3 months ago

New post: dawnslab.jd.com/%E4%B9%8B%E6%A… writeup for CVE-2025-22056, which we also found but collide with other researchers. A nice bug that can be stably exploited to get kernel privilege on Ubuntu.

0 8 30 3K 16

RedTeam Pentesting @RedTeamPT

3 months ago

🎉 It is finally time for a new blog post! 🎉 Join us on our deep dive into Windows Authentication Coercion and its current state in 2025, including some brand-new tooling ✨ #itsec #infosec #pentest #redteam blog.redteam-pentesting.de/2025/windows-c…

4 55 106 9K 65

ö @r0keb

3 months ago

Good morning! Just published a deep dive into PatchGuard internals: how it works, key internal functions, context init, and possible bypasses. r0keb.github.io/posts/PatchGua…

4 105 314 22K 191

secret club @the_secret_club

3 months ago

Hypervisors for Memory Introspection and Reverse Engineering by @memn0ps secret.club/2025/06/02/hyp…

2 127 342 31K 164

Orange Cyberdefense Switzerland @orangecyberch

3 months ago

🚨 New Blog Post Read the full post to understand the risks and how to protect your systems: ow.ly/608550VZPNB #Cybersecurity #WindowsSecurity #PrivilegeEscalation #Vulnerability #InfoSec

0 9 9 609 2

Download Image

InfoGuard Labs @InfoGuard_Labs

4 months ago

New blog post: Fuzzing Microsoft Defender's mpengine.dll using snapshot fuzzing (WTF, kAFL/NYX). We uncovered several out-of-bounds read & null dereference bugs that can crash the main Defender process on a file scan. Details -> labs.infoguard.ch/posts/attackin…

3 74 188 10K 92

/r/netsec @_r_netsec

4 months ago

Automating MS-RPC vulnerability research incendium.rocks/posts/Automati…

0 19 62 5K 39

Sean Heelan @seanhn

4 months ago

I wrote-up how I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation. Link to the blog post below 👇