Red Team for real, Security researcher, VoIP hacker, Ultra-trailer, Ambassador of Happiness and Healthy Living

Metaverse
Slides of our talk “Turning your BMC into a revolving door” are online airbus-seclab.github.io/ilo/… #Zeronights cc: Alex.G @0xf4b @ZeroNights @AirbusSecLab @Synacktiv
96
131
Sn0rkY retweeted
I'm thrilled to make Silverseal public!. It is among the first publicly available UEFI bootkit research frameworks for Linux-based systems to demonstrate an end-to-end path from GRUB to a running Rust kernel-module rootkit: github.com/Idov31/Silverseal 1/3
8
55
183
10,564
🚨 THE #OB12026 @offbyoneconf AGENDA HAS DROPPED! The talks are locked in. The research is coming. The countdown is on! 📅 14–15 September 2026 📍 Grand Copthorne Waterfront, Singapore 🔗 Check out the full agenda: offbyone.sg/programme 🎟️ Tickets: merch.starlabs.sg
4
22
2,266
Sn0rkY retweeted
Finally got around to implementing e2e shellcode unit tests; I *think* Sliver currently has the broadest shellcode/encoder/compression compatibility of any framework, from Linux shellcode + shikata_ga_nai to MacOS/arm64 + XOR encoders! github.com/BishopFox/sliver/…
2
13
78
3,972
Sn0rkY retweeted
Are you 40? If you are, it's time to finnally buy a WinRAR license! Thanks to @buraktuyan for creating this awesome video that no one asked for but that everyone needs! 🤣😎
Here's my 30-second spec ad for WinRAR (that nobody asked for). Okay, perhaps Rourke Heath did. He shared this fun brief with his GenHQ community last week, and I took it on. In this experimental project, I wanted to turn one of the internet's longest-running jokes into a subtle family drama about WinRAR's 40-day trial that somehow lasted almost three decades. Here's how I made it: After writing the script (the old school way), I worked with ChatGPT 5.6 Sol Max to turn it into a 14,000-character prompt for Seedance 2.5 (yes, Dreamina allows prompts that long). I used GPT Image 2 to create the reference image for WinRAR's trial screen, while Seed Audio 1.0 generated the audio reference for the full voiceover and dialogue. After 20+ Seedance 2.5 tests at 480p, with the prompt evolving throughout, I generated the final versions at 720p. I then lightly edited the video and upscaled it to 1080p with Topaz Labs Astra Starlight Precision 2.6. However, the screenshot text didn't survive the upscale (I should have used Astra's scene detection feature and selected a different model for that particular shot), so I recreated it using Seedance 2.0 at 1080p. (I also tried Hailuo H3 and Kling 3.0, but in this particular case, Seedance 2.0 gave me the best overall result in one go.) For the sound, I selected a solo-instrument soundtrack from Epidemic Sound and added extra sound effects to improve the overall sound design. And here's the result. I'm curious to hear what you think. Did this bring back memories, or is this genuinely your first time hearing about WinRAR? I’d love to know.
310
1,082
9,958
575,631
Sn0rkY retweeted
plugandpwn.com/ 👀👀👀
2
18
150
28,256
Sn0rkY retweeted
Published a writeup on CVE-2025-24169, a macOS vulnerability which allowed a malicious app to enumerate a user's saved account data in the Passwords app - contravening TCC protections. Example PoC + full details here: joshparnham.com/2026/07/acce…
1
12
78
10,899
How a SIM can (and will) hack you: Security analysis of SIMs, attacks, and tools for research. 👨🏻‍💻🎫📱🩻👾 More details on: LinkedIn: linkedin.com/posts/dlaskov_c… Substack: it4sec.substack.com/p/how-a-…
93
482
21,109
“Quand tu fais la croix rouge de la recherche pour Microsoft “ tu m’as régalé avec cette citation @lgandx 😂 réf: open.spotify.com/episode/6fr…
1
293
Do you watch Netflix in your free time? Try hackflix for security conference talks h4ckfl1x.com/ #cybersecurity #bugbounty
18
322
1,706
78,966
🚀 WE ARE OFFICIALLY BACK for our third edition! 📅 Dates: 14 to 15 September 2026 📍 Venue: Grand Copthorne Waterfront Hotel Singapore 👉🏻 Submit your CFP here: cfp.offbyone.sg/2026/cfp More to come! More details: linkedin.com/posts/off-by-on… #OB12026 #OffensiveSecurity #Singapore
18
53
17,793
🔐 Releasing LUKSbox: encrypted vaults that survive the next decade. Drop sensitive files on any cloud or USB. The provider gets one random-looking blob they can't read, even under subpoena. ✅ FIDO2 (YubiKey, Titan, Nitrokey, Windows Hello) ✅ TPM 2.0 keyslots ✅ Post-quantum hybrid (ML-KEM-768/1024 - FIPS 203) ✅ Detached header → zero metadata on the container ✅ Linux / macOS / Windows ✅ Rust, Apache-2.0, 30M+ fuzz iterations v0.1.0 is out! 👉 github.com/PentHertz/LUKSbox #infosec #encryption #postquantum #FIDO2 #rust #opensource #cryptography #penthertz
29
171
970
60,393
May the fourth be with you

ALT May The Fourth Be With You GIF

2,899
50,086
216,801
7,282,969
45 years old today so tomorrow let’s go for 40th Marathon Des Sables, 270km in the desert ! Will be AFK for a week 😁
5
14
666
Sn0rkY retweeted
Lands of Packets TTL exceeded. I would like to collect texts from the scene about FX in his memory. A collection of obituaries that will then be posted on phenoelit.de. If anyone would like to contribute, please contact me. Mail: joernchen@phenoelit.de Signal: jrn.07
1
26
38
6,629
Sn0rkY retweeted
An interesting wrap-up presentation from the security researcher who found the COROS watch security vulnerabilities last year. Worth a watch if you're into geekery: piped.video/watch?v=WmY9XBJE…
4
23
5,220
RIP my dear friend and thanks so much and you know why …
Everyone today is a hacker in a sense but there are very few OG hackers on which shoulders we stand Oh dude, Felix “FX” Lindner you were so much a hackers hacker and you will be missed RIP my friend and thank you
1
2
18
2,172
Is ESLogger or Mac Monitor your friend for dynamic malware analysis on macOS? Then i've got something that might come to use! An browser based ES/Mac Monitor log analyzer with a lot of neat features like story timelines, Sigma rule matching, an in-depth process tree analyzer and much more and the neat thing is, nothing is uploaded to any backend! I'm looking for feedback! Take a look at es.decompiler.dev #macos #malware #reverseengineering #re #ThreatHunting #dfir
4
11
46
6,666