Non-Standard human, husband, and grateful father. USAF veteran. I mostly tweet nonsense, and my tweets are attributable only to me, no other entity.
Austin, TX
Joined February 2015
- Tweets5.8K
- Following1K
- Followers595
- Likes20.1K
Pinned Tweet
Rest in Peace my love. You protected our family, helped my wife and I start our family and will forever be loved and missed.
Amaya Jones 05/2014 - 09/2026
Shane Jones retweeted
Google removed ad blockers from Chrome, even though it has been outright serving infostealer malware via sponsored Google search ads that eventually led to a $6.3B heist.
...but the whole world is going crazy about the hard-to-exploit PHP bug. 😖
‼️ BREAKING: Binance says it was hacked after one engineer installed a fake Mac Homebrew tool and another did a coding test for a fake job on his work computer.
The first searched for an AI coding tool and got a tampered Homebrew, a popular Mac tool. Binance caught it, but the hackers learned who worked on its wallets.
Ads on Google have pushed Mac malware for many years now, and most developers are aware of this.
The coding test hid malware its security missed. Hackers then used Binance's own internal AI tool to take over two wallet engineers.
They stole a record $6.3B
Shane Jones retweeted
🚨 AUSTIN 🚨 are you excited for the Grand Opening of your very own local Micro Center on November 13th? We are, because we're going to have a huge celebration with food trucks, some of your favorite influencers, a DJ, and more!
Shane Jones retweeted
Bypassing SMB and LDAP signing with ntlmrelayx 🔥
I added both reauthentication bypasses to Impacket, now merged! Use –reauth-bypass on unpatched systems 🚀
LDAP can also start anonymously where accepted.
Research: blackfield.ch/blog/defeating… and specterops.io/blog/2026/10/2…
Shane Jones retweeted
Fair winds and following seas, Stan Nelson. We will remember you.
Readers added context they thought people might want to know
Stan Nelson, a D-Day Navy veteran shown in the image, died Nov. 20 2025 at age 105 and was not the last survivor of the invasion.
varsity.startribune.com/stan-nelson-ch…
kstp.com/kstp-news/loca…
en.wikipedia.org/wiki/John_C._R…
mysanfordherald.com/article/2053,l…
Shane Jones retweeted
Released TpDirectCallbackHijack, a process injection PoC where you overwrite one function pointer inside an existing thread pool object (TP_IO / TP_ALPC / TP_JOB), post a single completion packet, and the victim's own worker thread dispatches your shellcode. Restore stub puts the pointer back on the way through, so the thread pool keeps working.
No remote thread, no Get/SetThreadContext. Pool Party adjacent. Based on @_0xDeku's research.
github.com/Maldev-Academy/Tp…
Shane Jones retweeted
Make your payload "sleep" to look like any real Windows activity.
BusyWork is a Rust library that swaps each pause for randomized real work - hashing, file enumeration, registry queries, DNS lookups - drawn from 76 tasks across seven categories with ±30% jitter on every parameter.
No two "pauses" produce the same API sequence, and no timing primitives survive in the compiled binary.
A post by Daniel (@PatchRequest)
Source: patchi.fyi/blog/busywork-sle…
#redteam #blueteam
Shane Jones retweeted
The bypass of LDAP Signing Through Reauthentication described in @SpecterOps blog also works with pure Kerberos relay. too ;-)
Shane Jones retweeted
This is immersion breaking, this has never happened in Miami
GTA 6 includes a fully functional bus and train transportation system.
Buses have specific routes & times when they are meant to arrive at each stop.
(Source: gamesradar.com/edge/gtavi-co…)
Shane Jones retweeted
Sources tell WIRED that an Accenture employee’s personal Claude agent ran on a DOD network for two months before it was identified and the vulnerability could be patched. buff.ly/nUjCkPs
Shane Jones retweeted
Your Break-Glass Account Is Excluded From Every Policy. It Still May Not Get You In.
ridgelinecyber.com/blog/brea…
I want one
JUST IN: Palmer Luckey's genetically modified military dog startup, Warhound, comes out of stealth, aiming to create enhanced canines for the U.S. military.
Readers added context they thought people might want to know
This is NOT Palmer's company at all, his company Anduril is only supplying the tech for the dogs, and this is a wholly owed Collosal entiity
x.com/palmerluckey/s…
Shane Jones retweeted
Very cool technique to bypass SMB signing, appears to be patched on recent Windows versions.
I wrote up a way to defeat enforced SMB signing for relay.
It abuses a documented SMB re-authentication behavior.
I'm surely missing nuance and prior art. Corrections welcome.
Writeup:
blackfield.ch/blog/defeating…
PoC:
github.com/aas-n/reauthx
Shane Jones retweeted
Until we get confirmation Jira is safe from the PHP vulnerability, I don’t think anyone should be opening tickets or assigning me work.
