#hosting defender, fixer, cleaner, #infosec #pentester Pro Bass session player, for a long time. Runner. Family man
Worldwide
Joined August 2012
- Tweets3.7K
- Following3.5K
- Followers1.2K
- Likes2K
linkbruttocane retweeted
🔥 Recent additions to LOLBAS-Project.github.io:
• applaunch.exe for applocker bypass
• mscopilot/setupupc/dotnet-trace.exe for proxy execution
• scp/ssh.exe for loading arbitrary DLLs
• msoxmled.exe for downloading
• fsutil.exe for preventing Windows Defender updates
linkbruttocane retweeted
CrystalPotato - port of GodPotato, a local privilege escalation from accounts with SeImpersonatePrivilege to SYSTEM. Includes:
✅ indirect syscalls
✅ dynamic API resolution
✅ compile-time string obfuscation
github.com/ricardojoserf/Cry…
I'm trying to picture just how gorgeous Jolene must have been, if Dolly Parton was scared she'd steal her man. You will live through your music.
linkbruttocane retweeted
China open-sourced a peanut-sized OCR that parses entire 100-page PDFs in one shot..
It's called Unlimited-OCR. Only 3B params. Runs locally.
Every other OCR tool chops your doc into pages and loses the thread. this one reads the whole thing in a single pass.
→ One-shot "long-horizon" parsing (32K context window)
→ Multilingual, out of the box
→ 93% on the standard parsing benchmark (+6 over baseline)
→ <0.11 error rate past 40 pages
→ Runs 100% locally on your own hardware
→ Works with Transformers, vLLM, SGLang, Docker, Ollama, llama.cpp
Traditional cloud OCR (Textract, Google Vision, Azure Doc Intelligence) costs $1.50–$15 per 1,000 pages.
This runs on your machine. For free. Forever.
Baidu built it explicitly to push DeepSeek-OCR one step further. Already at 1.9M downloads on Hugging Face and most people have no idea it exists yet.
100% open source.
linkbruttocane retweeted
After Opus 4.8
Anthropic CEO prediction:
2026 - 90% code is written by Al
2027 - 100% code is written by Al
My prediction:
2026 - 90% code is written by Al
2027 - 100% code is written by Al
2028 - 10% code is written by Al, Senior SWEs paid 10x of today to clean up the Al-written code mess.
linkbruttocane retweeted
NetExec v1.5.0 has been released!🔥
Merry Christmas everyone!🎉 It's been a very long time since the last release, so there are a TON of new features!
Some of the highlights:
- Built-in LDAP signing and channel binding checks
- RDP command execution
- certipy find integration
ALT NetExec v1.5.0 has been released!🔥
linkbruttocane retweeted
The impeccable, brilliant Anthony Jackson. A must listen. Just as fresh today as then. One of my very favorite albums. Here with Steve Khan, Manolo Badrena, and Steve Jordan. 🔥
youtu.be/5RW654QrrEI
linkbruttocane retweeted
Resharing this useful catalog of various EDR products "shell" and response functionalities by @cbecks_2 related to the Thread discussion below 👇
github.com/cbecks2/edr-artif…
There’s various reports of cybercriminals abusing CrowdStrike RTR, the SentinelOne installer, and the Wazuh SIEM Agent. Seems we could do with a new @MITREattack TTP for this threat. Should be a concern for orgs running any of type of EDR/SIEM agents.
(Sources linked below)
linkbruttocane retweeted
Presenting the #Wagmi traffer group (Героев нужно знать в лицо).
Collaborated with @g0njxa on this blog to raise awareness about these widespread scams on X, Discord, and other platforms. Too many people are falling victim, putting millions in the hands of threat actors. Stay vigilant! 🕵️
trac-labs.com/the-wagmi-manu…
linkbruttocane retweeted
Today EUROPOL announced the takedown of a large and prolific CSAM (Child Sexual Abuse Material) website known online as "Kidflix" — a reference to Netflix.
Over 35 countries were involved in the operation which was lead by the State Criminal Police of Bavaria (Bayerisches Landeskriminalamt) and the Bavarian Central Office for the Prosecution of Cybercrime (ZCB).
Kidflix was infamous due to it's "unique" features for CSAM websites. It allowed users to filter by video quality, watch child abuse livestreams, and preview videos prior to purchase. Additionally, individuals who were active on the website, shared content, produced unique content, etc. could earn "Kidflix tokens" which allowed them to get other CSAM material for free. Furthermore, the site had 3.5 unique CSAM videos uploaded every hour, with a total of 6,288 hours (262 days) of CSAM videos present on the website.
Law enforcement learned over 1,800,000 people from all across the globe visited Kidflix. Kidflix contained over 72,000 videos of CSAM.
As a result of the takedown over 1,400 suspects have been identified and (thus far) 79 individuals have been apprehended and 39 children has been rescued from child predators.
This operation, dubbed "Operation Stream", is the largest pedophile network takedown European history. EUROPOL has stated they will continue to work with other countries law enforcement agencies to hold each person accountable for the crimes committed on Kidflix.
catonmat.net/fibonacci-miles… (it's the golden ratio sauce)
linkbruttocane retweeted
Think if Ransomware operators gonna publish exfiltrated data with a 10 hours video on YouTube 😵💫
Infinite storage space at no costs 🥳
QRExfiltrate
This tool is a command line utility that allows you to convert any binary file into a #QRcode movie. The data can then be reassembled visually allowing exfiltration of data in air gapped systems.
github.com/Shell-Company/QRE…
linkbruttocane retweeted
Thank you Symantec for the non-public #Frebniis samples 😒
symantec-enterprise-blogs.se…
linkbruttocane retweeted
Tallahassee Memorial hospital, in Tallahassee, Florida, is redirecting patients to other healthcare facilities and cancelling and/or rescheduling medical appointments due to a "cyber attack".
Something needs to be done - this cannot be tolerated any longer.
linkbruttocane retweeted
New process injection technique dropped from BlackHat EU! Freaking cool.
Dirty Vanity abuses the Windows forking (process reflection and snapshotting) to evade EDR using.
Slides: i.blackhat.com/EU-22/Thursda…
POC: github.com/deepinstinct/Dirt…
Shout-out to @eliran_nissan!
