I mean you need to be careful. Agents will cheat however possible to achieve goal. Like they will find a random log file that contains some leaked heap pointers and then claim to have defeated ASLR or in case of iOS they will just hardcode the current boot‘s DSC slide.

Das Datenleak der AfD offenbart mutmaßlich die interne Kommunikation der Partei. Besonders deutlich wurde es, wenn der Absender „Alice Weidel“ lautete. trib.al/2iG2L5D

As promised I'm releasing 2 new Wii exploits: Another Pwn & The Haxx Bearers They both come with source code, prebuilt exploits and full, technical writeups! All links are available in the comments, enjoy! github.com/ioncodes/wii-expl…

wheresryan22/anatomy: An agent skill for creating detailed, interactive isometric illustrations of real-world machines and complex systems. Generates polished SVGs with optional WebGL shaders and 3D effects. github.com/wheresryan22/anat…

‼️ An encrypted USB drive from SecZure has a backdoor that opens its files without the user's password. Two built-in accounts with fixed passwords decrypt them, Binary Ninja's Xusheng Li found. OpenAI's Codex broke Netac's FileLock in 7 minutes and saw it logging passwords.

GPU tensor unlock source for RTX 4090 and experimental RTX 4070 Ti SUPER; firmware generated locally github.com/JustAResearcher/g… Unlock FP/BF16 instruction issue rate on Nvidia 3000's cards to their professional equivalents github.com/Zagitta/gpu-unloc…

roothide Dopamine 3 is now open source on github for everyone: github.com/roothide/Dopamine…

Universal exploit for #php2shell is rather impossible, but specialized exploits for known environments are coming. I tried my luck with pfSense 2.7.2 - PHP 8.2.11, FPM, 512M limit. Variant with session file write to a crafted path. Almost entirely written by an open-weights LLM.

chryzsh/redteam-bofs: Repository for various Beacon Object Files (BOFs) github.com/chryzsh/redteam-b…

aicodeking/leanrea: One 8 KB skill that replaces REA (Reverse Engineer Anything): plain CLI tools, no MCP. Benchmarked: 38% faster, 35% cheaper. github.com/aicodeking/leanre…

Adds protected Active Directory binds to synchronous ldap3 connections. It uses: ✅ Impacket for Kerberos and NTLM authentication and leaves LDAP queries, entries, controls, and binary values with ldap3. ✅ It does not require a native GSSAPI library or an ldap3 fork. github.com/dirkjanm/ldap3-ad…

Syswhispers4 github.com/JoasASantos/SysWh…

Field Notes: Reconstructing an Attacker’s Workflow dfir.ch/posts/field_note_att…

TornadoC2 - A pull-based C2 with ten native transports, concurrent multi-profile handlers, and an honest threat model. The agent is a single Go binary with every behavioural property baked in at build time no runtime config file, no environment variable, no command-line arguments. github.com/kamalx06/TornadoC…

SharePoint CVE-2026-65660: From Anonymous Access to Pre-Auth RCE via EditingPageParser Type-Check Bypass - khoadha blog.viettelcybersecurity.co…

One map. Many collective truths. Explore Quorumz by geography, then drill from topic to opinion to the evidence beneath it. sense.quorumz.com/discover?l…

disKover - Subdomain Discovery Enumerates subdomains active-first, combining several techniques into one fast pipeline and confirming every result by live resolution. Download github.com/BruteLogic/disKov… Testbed sub.brutelogic.net Simple, fast, and effective.

Python2Shell is also a thing now. Advisory: github.com/advisories/GHSA-9…

STOP WASTING HOURS TRYING TO LEARN REA. REA Team put together one practical roadmap with tutorials, real investigations, GitHub repos, books, research papers and free courses. START HERE: 1. REA Official Repository github.com/morluto/rea 2. REA Official Website rea.tools 3. Installation & Agent Setup github.com/morluto/rea/blob/… 4. Your First REA Investigation rea.tools/first-investigatio… 5. REA Guides rea.tools/guides/ 6. Guided MCP Prompts github.com/morluto/rea/blob/… Install: npx rea-agents@latest setup WATCH & FOLLOW ALONG: 1. How To Use REA To Clone Any Software In Minutes — piped.video/watch?v=FnB9tHKB… 2. REA + Pi Coding Agent Tutorial datacamp.com/tutorial/revers… 3. Ghidra Tutorial for Beginners piped.video/watch?v=OFAxXXcL… 4. Frida for Android Reverse Engineering piped.video/watch?v=GHh9P-Dy… 5. pwn.college Reverse Engineering pwn.college/intro-re-pwn~593… 6. Malware Unicorn RE101 malwareunicorn.org/workshops… REAL REA INVESTIGATIONS: 1. Notes Export rea.tools/first-investigatio… 2. Notion Clipboard rea.tools/showcase/notion/ 3. DX-Ball Reconstruction rea.tools/showcase/dx-ball/ 4. Aegis APK rea.tools/showcase/aegis/ 5. TH04 Bullet Patterns rea.tools/showcase/th04/ GITHUB REPOS: 1. REA github.com/morluto/rea 2. Awesome Reverse Engineering github.com/morluto/awesome-r… 3. REA Gems github.com/sqwu/rea-gems 4. Awesome Reverse-Engineered github.com/alexgaoth/awesome… 5. Ghidra github.com/NationalSecurityA… 6. JADX github.com/skylot/jadx 7. Frida github.com/frida/frida 8. ILSpy github.com/icsharpcode/ILSpy 9. x64dbg github.com/x64dbg/x64dbg BOOKS: 1. The Ghidra Book, 2nd Edition nostarch.com/ghidra-book-2e 2. Reverse Engineering for Beginners go.yurichev.com 3. Practical Binary Analysis nostarch.com/binaryanalysis/ 4. Practical Malware Analysis nostarch.com/malware 5. The Android Malware Handbook nostarch.com/androidmalwareh… 6. Reversing: Secrets of Reverse Engineering wiley.com/en-us/Reversing%3A… RESEARCH PAPERS: 1. LLM4Decompile arxiv.org/abs/2403.05286 2. AutoDecompiler arxiv.org/abs/2606.16162 3. SALT4Decompile arxiv.org/abs/2509.14646 4. Decomperson usenix.org/conference/usenix… 5. DIRTY usenix.org/system/files/sec2… 6. Automatically Attacking Software RE Agents arxiv.org/abs/2605.30667 7. Does Reverse Engineering Need a Bigger Model? rea.tools/blog/reverse-engin… FREE COURSES & PRACTICE: 1. OpenSecurityTraining2: x86-64 Assembly p.ost2.fyi/courses/course-v1… 2. pwn.college: Reverse Engineering pwn.college/intro-re-pwn~593… 3. pwn.college: Reversing Hell pwn.college/reversing-hell/ 4. Malware Unicorn RE101 malwareunicorn.org/workshops… 5. Nightmare github.com/guyinatuxedo/nigh… 6. RPISEC Modern Binary Exploitation github.com/RPISEC/MBE 7. OWASP Mobile Application Security mas.owasp.org BEST ORDER TO LEARN: install REA → Notes Export → Notion → CTF binary → Aegis APK → DX-Ball → then Ghidra, assembly and papers

SMB signing enforced? You might still be vulnerable to relay. Really interesting research from @aas_s3curity demonstrating how SMB2/3 re-authentication can bypass enforced signing on affected Windows systems, potentially including Domain Controllers. The technique: • Establish an SMB session using a low-privileged account • Relay privileged NTLM or Kerberos authentication • Re-authenticate the existing session as that identity • Abuse retention of the original signing key • Access the privileged session while signing with a key you control The underlying issue is a missing identity check during re-authentication. The author released reauthx, a krbrelayx fork, alongside tooling to identify affected hosts. Important: September 2026 Windows updates appear to address this. Successful exploitation still requires a suitable privileged authentication and other relay preconditions. Excellent research building on work from Dirk-jan Mollema, Synacktiv, SySS, Semperis and SpecterOps. Write-up: blackfield.ch/blog/defeating… PoC: github.com/aas-n/reauthx #ActiveDirectory #RedTeam #WindowsSecurity