Cipher007 (@xCipher007) header
Cipher007 (@xCipher007) profile picture

Cipher007

@xCipher007

I do hacky hacky stuff! OSED | OSCP | CRTL | CRTO | CRTP | eJPT

 Cloud
rohannk.com
Joined October 2020
  • Tweets1.7K
  • Following121
  • Followers2K
263Media
Photo by Cipher007 (@xCipher007)Photo by Cipher007 (@xCipher007)Photo by Cipher007 (@xCipher007)Photo by Cipher007 (@xCipher007)Photo by Cipher007 (@xCipher007)Photo by Cipher007 (@xCipher007)Photo by Cipher007 (@xCipher007)Photo by Cipher007 (@xCipher007)Photo by Cipher007 (@xCipher007)Photo by Cipher007 (@xCipher007)
Cipher007 retweeted
tetsuo (@tetsuoai) profile picture
tetsuo
@tetsuoai21 Jul 2025
The Bleeding Edge: Modern Exploit Development. Ch: 1 of 8.

The Bleeding Edge: Modern Exploit Development. Ch: 1 of 8.

Article · @tetsuoai
21
119
6
788
2,168,445
Cipher007 retweeted
Cerbersec (@cerbersec) profile picture
Cerbersec@cerbersec7 Apr 2025
Ran into strict WDAC a little while ago, bypassed it using WinDbg Preview cerbersec.com/2025/04/07/byp…
6
49
2
129
27,340
Cipher007 retweeted
Muqsit 𝕏 (@mqst_) profile picture
Muqsit 𝕏@mqst_30 Mar 2025
🌏 Browser Exploitation 101: A Series of Blog posts for anyone interested in Chrome Browser Exploitation. Part 1: jhalon.github.io/chrome-brow… Part 2: jhalon.github.io/chrome-brow… Part 3: jhalon.github.io/chrome-brow… #infosec
Image from Muqsit 𝕏 (@mqst_)
Image from Muqsit 𝕏 (@mqst_)
Image from Muqsit 𝕏 (@mqst_)
65
277
12,084
Cipher007 retweeted
Bobby Cooke (@0xBoku) profile picture
Bobby Cooke
@0xBoku15 Feb 2025
Loki C2 release is getting closer! Been grinding out docs. Also have trusted beta testers helping out. Thank you! Planning on dropping the tool without a blog . Should be enough information in the repo readme (+detection guidance). Blog will follow in a month Loki C2 is coming..
Image from Bobby Cooke (@0xBoku)
9
64
1
405
24,787
Small helper to check Exchange Version, Releasedate and NTLM auth realm: github.com/LuemmelSec/Pentes…
Image from LuemmelSec (@theluemmel)
12
1
55
4,605
The Windows startup process tree. #ThreatHunting #DFIR
1
170
2
925
43,113
Cipher007 retweeted
chris (@chrislevan) profile picture
chris
@chrislevan23 Dec 2024
this.
Image from chris (@chrislevan)
236
3,992
662
31,084
1,679,431
Replying to @_RastaMouse
I'm at the end of my college life and it's kinda scary how fast 4 years of college went by. Last I remember was stepping into the college on the first day and damn time flew by real quick 🥲
1
4
332
Replying to @xCipher007
never give up living, unless you're dead.
2
1
4
219
Cipher007 retweeted
N7WEra (@N7WEra) profile picture
N7WEra@N7WEra24 Nov 2024
I have put together a list of publicly known IOC for impacket. Thanks to @Octoberfest73 and others on the awesome research. n7wera.notion.site/Modifing-…

Modifing Impacket to avoid detection | Notion

Changes to Impacket to remove default IOC

n7wera.notion.site
6
134
3
407
28,195
Replying to @tetsuoai @7etsuo
It was kinda emotional seeing Mike Tyson fight live in my lifetime. The strength it took for him to get back in the ring at this age truly proves he is a fucking legend 🙏🏻
1
1
8
367
„installing Wazuh agents on victims‘ devices“ … I love it 🖤 because the question is: why use a C2 and risk detection when legitimate tools offer 90% of the functionality and usually fly under the radar of AVs/EDRs?
Marc Rivero López (@Seifreed) profile pictureMarc Rivero López
@Seifreed22 Oct 2024
New @kaspersky report: Cybercriminals are spreading #malware via fake websites with popular software like uTorrent, Microsoft Office, & Minecraft, and through #Telegram channels and #YouTube, installing Wazuh SIEM agents on victims’ devices. Full report: kas.pr/9icb
Image from Marc Rivero López (@Seifreed)
8
94
3
379
36,859
Cipher007 retweeted
Cube0x0 (@cube0x0) profile picture
Cube0x0@cube0x030 Sep 2024
0xC2 is now available and the site has been updated with a brief introduction 0xc2.io/posts/introduction-a…

Introduction to 0xC2 | 0xC2

0xc2.io
10
57
231
22,993
Red Teaming in the age of EDR: Evasion of Endpoint Detection Through Malware Virtualisation blog.fox-it.com/2024/09/25/r…
Red Teaming in the age of EDR: Evasion of Endpoint Detection Through Malware Virtualisation

Red Teaming in the age of EDR: Evasion of Endpoint Detection Through Malware Virtualisation

Authors: Boudewijn Meijer && Rick Veldhoven Introduction As defensive security products improve, attackers must refine their craft. Gone are the days of executing malicious binaries from di…

blog.fox-it.com
2
161
2
503
55,330
Cipher007 retweeted
Krutik (@krutikvirani) profile picture
Krutik
@krutikvirani21 Sep 2024
Great things are happening at @trysynczero.
Image from Krutik (@krutikvirani)
1
2
6
224
Cipher007 retweeted
Panda (@VivaLaPanda) profile picture
Panda
@VivaLaPanda16 Sep 2024
Secret Service should have a bug bounty where if you hit someone under their protection with a paintball gun you get $10k
147
1,987
66
73,509
1,619,142
We've updated the vx-underground Windows malware paper collection. We have a lot more papers in queue. Read them. Papers: - 2024-08-31 - Finding open file handles in PS - 2024-08-30 - Evil MSI A story about vulnerabilities in MSI Files - 2024-08-26 - DLL Sideloading ith LicenseDiag.exe - 2024-08-19 - DRMBIN - Prevent binaries from running on other machines - 2024-08-15 - Offline SAM Editing - 2024-08-14 - Tricks with Microsoft Word and Sandboxes - 2024-08-13 - Abusing AVEDR Exclusions to Evade Detections - 2024-06-09 - Bypassing EDR NTDSdit protection using BlueTeam tools
Image from vx-underground (@vxunderground)
8
22
1
168
143,845
Cipher007 retweeted
Krutik (@krutikvirani) profile picture
Krutik
@krutikvirani30 Aug 2024
I was asked by @samrudhyash to review the new business card design & check if the QR code was working or not. I'm disappointed in myself, to say the least.
Image from Krutik (@krutikvirani)
Image from Krutik (@krutikvirani)
Image from Krutik (@krutikvirani)
1
1
2
2
263
Storm.rootkit, working on custom jitter/custom sleep.
Image from Claes Spett (.PrØÐiGy) (@J3rge)
1
8
78
5,951
Our malware database, virus.exchange, is an open source and free database where you can easily search through our malware collection. It currently possesses roughly half of our malware samples.
Image from vx-underground (@vxunderground)
13
131
6
617
65,511
Load more