@t0asts

security fellow, malware enjoyer (opinions are my own)

t0asts.com
Joined April 2026
  • Tweets359
  • Following827
  • Followers547
97Media
what did he know ..... 4️⃣
steve jobs dialing the number 4 in the iphone 1 macworld 2007 keynote presentation

ALT steve jobs dialing the number 4 in the iphone 1 macworld 2007 keynote presentation

12
295
2
6,096
46,283
toasts retweeted
Max Harley
@0xdab0Oct 21
25
1,709
86
16,376
238,592
Hello Unfortunately, @GitHub has banned us. They have orbital nuked the entire malware source code collection.
375
611
86
15,900
791,960
I went ahead and put up the Hall of Fame for this year, even though the contest just started. flare-on.com/hof.html #flareon13
9
18
106
6,494
toasts retweeted
herrcore
@herrcoreSep 25
If you are doing #FlareOn this year and want to rank yourself against other 𝗵𝘂𝗺𝗮𝗻𝘀 we made an unofficial leaderboard. Honour system only, but it's something.
3
25
1
153
10,452
toasts retweeted
tuckner
@tucknerSep 23
Ouch. A hijacked past commit to remove PolinRider... adds PolinRider
1
4
11
1,032
toasts retweeted
vxdb
@vxdbSep 22
ShinyHunters just defaced the FBI Jobs page
84
409
103
5,321
646,707
Super excited to see WESP land in public preview. I spent the past couple of days reverse engineering wesp.sys and espclient.dll, along with building a consumer POC. Here is a writeup on my initial analysis: jonny-jhnson.dev/blog/a-firs… GitHub POC: github.com/jonny-jhnson/Wesp…

A First Look Inside the Windows Endpoint Security Platform

An initial analysis of wesp.sys and espclient.dll, how WESP moves kernel events to user mode, and a POC for receiving process-creation events.

jonny-jhnson.dev
Jonny Johnson
@JonnyJohnson_Sep 11
Finally got a POC working. Working on a blog now, hopefully out in a couple of days 😀
3
47
2
146
15,161
Latest preview build (29661) ships wesp.sys! The long-awaited initiative that should make it easier for EDRs to move capabilities to user mode and stay more resilient against kernel-level attacks.
8
66
2
288
23,658
Microsoft has failed to properly patch ShieldBreak CVE-2026-69414 - msrc.microsoft.com/update-gu… ShieldCrash demonstrates a full bypass of the patch - github.com/MSNightmare/Shiel… Works with latest September 2026 patch
Abdelhamid Naceri@MSNightmare2000Aug 11
Microsoft has failed to properly patch RoguePlanet (CVE-2026-50656), ShieldBreak, a PoC that demonstrates a full bypass to the previous patch is now public. github.com/MSNightmare/Shiel… The PoC works with the latest August 2026 patch
20
186
11
1,093
68,821
FalconFlank : Crowdstrike Falcon 0day LPE is now public github.com/MSNightmare/Falco…
90
501
78
2,902
366,915
My research blog about #JSCeal is finally out! It was quite a journey. I hope you will like it! // #V8 #bytecode #malware #deobfuscation
Check Point Research
@_CPResearch_Aug 31
#JSCeal didn't give up its secrets willingly. Following our #BlackHat2026 talk, we're releasing Breaking the Seal: our research on statically deobfuscating compiled, obfuscated #V8 #malware. Inside: the methodology, the open-source toolkit, and the malware capabilities recovered along the way. research.checkpoint.com/2026…

Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode - Check Point Research

Research by: hasherezade Key Points Introduction JSCeal is a stealer delivered as compiled V8 bytecode (.jsc) and executed by a bundled Node.js runtime, targeting cryptocurrency applications (other...

research.checkpoint.com
2
39
143
17,660
GenDigital products are vulnerable to a 0day vulnerability, a PoC that demonstrates a SAM database dump and elevation of privilege is now public github.com/MSNightmare/Prett…
14
135
4
943
36,557
Nvidia user mode dlls are a bit funny, here is a 0day that can be used to cross-user boundaries (maybe get SYSTEM ?) github.com/MSNightmare/Green…
14
140
5
1,073
43,204
Kaspersky 0day ? Anyone ? github.com/MSNightmare/HardB…
28
253
17
1,770
153,778
was only a matter of time before someone started selling a cheat using this driver O.o
toasts
@t0astsAug 14
another cheat driver, but this time it's for mouse input AND signed by microsoft lol
6
11
1
279
37,212
toasts retweeted
tmp.0ut@tmpoutAug 23
We are pleased to release tmp.0ut 5 Volume! Get your viruses, rootkits, strange ELFs, weird machines, tiny files, cool art, and phresh beats here!! tmpout.sh/5/
tmp.0ut 5 Table of Contents - ANSI art featuring a list of 21 papers

ALT tmp.0ut 5 Table of Contents - ANSI art featuring a list of 21 papers

21
328
23
1,183
85,057
toasts retweeted
herrcore
@herrcoreAug 21
If REs are making 8¢ an hour we’re gonna need cheaper tools… IDA Home now comes with idalib (MCP ready) and code AIRPORT40 gets you 40% off for the next two weeks (new and returning customers). Duncan buried that at the end of the article 😉
Duncan Ogilvie 🍍
@mrexodiaAug 21
Had some fun with DeepSeek-V4-Flash-0731 while at the airport!

My 8¢ Malware Analyst

Article · @mrexodia
18
115
12,970
Had some fun with DeepSeek-V4-Flash-0731 while at the airport!

My 8¢ Malware Analyst

Article · @mrexodia
17
59
6
401
51,707
toasts retweeted
chompie
@chompie1337Aug 16
😦
17
85
9
1,564
68,204
Load more