- Tweets 150
- Following 294
- Followers 54
- Likes 364
I've noticed that @bunjavascript has been gaining a lot of traction lately, so I thought it might be interesting to take a look at its offensive potential 🕵️
The game is evolving and we have now entered a new post-exploitation era made of Virtual Machines and Interpreters. Let's revive some old techniques using modern tools ♻️
blog.atsika.ninja/posts/byoi…
24
51
4,557
Recent supply chain attacks have demonstrated that the most valuable targets are developers 🧑💻
In this new blog post, I'll walk you through the full setup of a phishing attack 🎣 (ab)using GitHub OAuth App to gain control over an account! Trusted domains, free infrastructure, social engineering tricks, ...
🌐 blog.atsika.ninja/posts/the-…
P.S: I've updated the blog design ✨, hope you enjoy it
4
19
51
6,204
leco retweeted
One bit flip to corrupt it all:
Exploitation of an old Linux kernel vulnerability using PageJack, a modern technique to create Use After Free bugs.
Here @AzazheI shows you how
blog.quarkslab.com/pagejack-…
ALT what if I flip this little thing?
42
170
10,131
#Zer0Con2026 - SPEAKER 🌐
Mathieu Farrell(@Coiffeur0x90) from Quarkslab - “Breaking the Backbone of Global ISP Networks”
For more: zer0con.org
4
21
1,947
leco retweeted
Another antivirus 🛡️, another unfulfilled promise 😣. @kaluche_ turns Avira's protection into a privilege escalation playground. 3 LPE vectors via symlink abuse (CVE-2026-27748, CVE-2026-27750) and unsafe deserialization (CVE-2026-27749).
Find out more: blog.quarkslab.com/avira-des…
3
38
130
10,233
Excellent research on why macOS antivirus solutions should not blindly trust Process IDs.
👉 blog.quarkslab.com/intego_lp…
Shoutout to the Mathieu Farrell for the solid work.
1
3
41
🔥🔥🔥
🥳 ProxyBlob V2 is now available 🎉
As promised, here is the new version of ProxyBlob, boosted with aznet. Az-what 🤔?
This version introduces a new Go module called aznet that allows you to use Azure storage services (not just blobs 😏) as a direct replacement for net.Conn!
🏎️github.com/Atsika/aznet
🌐github.com/quarkslab/proxybl…
Complete documentation is available in the aznet repo to understand how it works 📚
1
71
leco retweeted
Here is the associated blog post ⤵️
synacktiv.com/en/publication…
Stop wasting your time on Netflix, @OrangeCon_nl 🍊 has released this year’s talks. I’d recommend watching @pop_rbx research on remote and silent installation of extensions in Chromium browsers 🔥 LSASS is dead, long live the browsers !
piped.video/DquDszi72EU
1
1
218
leco retweeted
BYOVD is a well-known technique commonly used by threat actors to kill EDR 🔪
However, with the right primitives, you can do much more.
Find out how Luis Casvella found and exploited 4 vulns (CVE-2025-8061) in a signed Lenovo driver.
👇
blog.quarkslab.com/exploitin…
ALT RW physical memory pages with a side of LSTAR MSR overwrite? YOLO!
2
56
160
12,414
leco retweeted
🚨 Open to work — AI Security/ red team / adversary sim
8+ yrs in offensive sec, ex-Cobalt Strike, SANS instructor (12 w/y)
Looking for flexible, senior/principal roles w/ impact > hours
DMs open or connect via: linkedin.com/in/jean-francoi…
1
22
62
15,784
leco retweeted
ProxyBlob is alive ! We’ve open-sourced our stealthy reverse SOCKS proxy over Azure Blob Storage that can help you operate in restricted environments 🔒
🌐 github.com/quarkslab/proxybl…
Blog post for more details right below ⬇️
Look at those cute little blobs in your internal network. They look harmless, but how about the one carrying SOCKS? It's ProxyBlob, a reverse proxy over Azure.
Check out @_atsika's article on how it came to exist after an assumed breach mission ⤵️
👉 blog.quarkslab.com/proxyblob…
ALT Proxybloby is the red teamer's mascot. Be careful, if left alone in you network it will byte your SOCKS
3
45
112
9,186
leco retweeted
From classic HTML pages to advanced MFA bypasses, dive in with @_atsika in an exploration of phishing techniques 🎣.
Learn some infrastructure tricks and delivery methods to bypass common detection.
👉blog.quarkslab.com/technical…
(promise this one is legit 👀)
ALT phishing in the cloud with diamonds
63
173
25,127
leco retweeted
I’m giving away 10 FREE signed copies of our new book, Black Hat Bash! 🎉 Want one? Repost for a chance to win. #BlackHatBash #free #Giveaway
139
1,047
1,236
116,278
leco retweeted
Say hi to Docs: end-to-end encrypted collaborative document editing in Proton Drive
✍️ Create, edit, and share documents securely
🤝 Collaborate in real-time with live cursors, presence indicators, and comments
↕️ Import/export with ease
1 / 2
ALT Screenshot of the Docs in Proton Drive, showing the collaboration between two people called Ryan Fire and Marry Smith on the text called "What is encryption".
142
258
1,746
199,200
leco retweeted
POC for #SilverPotato utilizing Kerberos relay vs SMB ;) Starting from @cube0x0 great krbrelay tool with extra layer of complexity to get the SilverPotato beast working.. Still in the rough but will publish soon :-)
4
75
285
27,051
🔥🔥🔥
xrombar/flower: a modified CONTEXT based ropchain to circumvent CFG-FindHiddenShellcode and EtwTi-FluctuationMonitor github.com/xrombar/flower
1
7
655
leco retweeted
Before we wrap up the year, it’s time to get out one last Kali release for 2023.
Announcing Kali 2023.4! kali.org/blog/kali-linux-202… for a focus on the addition of Hyper-V support to Vagrant, ARM64 Cloud images, support for the Pi 5, and an update to Gnome 45. Check it out!
20
299
1,365
302,092
leco retweeted
.net app can be used to load dll using .config file. Here is a list of signed Microsoft exe that can be used to get your code executed within a signed binary.
github.com/Mr-Un1k0d3r/.NetC…
Nothing new but quite useful against EDRs.
#redteam
2
144
406
54,373