Hacker and RedTeamer Author: - Black Hat Ruby (https://nitter.cf/t.co/kPq4QzEenM) - @Rubyfu Cert: MCITP-EA, CCNA, RHCE, CEH, OSCP, GWAPT, OSCE
(✌ﾟ∀ﾟ)☞
Joined March 2009
- Tweets21K
- Following2.2K
- Followers8.2K
- Likes3.2K
Pinned Tweet
Black Hat Ruby — Offensive Ruby programming book for hackers & pentesters
Available on Amazon, Order your copy Now!
amazon.com/dp/B08JHSF6GT
#BlackHatRuby #Rubyfu #BlackHat #Ruby #Redteam
ALT Book Cover, foreword (@muts) & coverword (@hdmoore)
ALT Table of Content
𝓢𝓪𝓫𝓻𝓲 retweeted
CVE-2026-97229: GitLab Ruby Regex RCE (KEV) | Sn1per
sn1persecurity.com/wordpress…
External Attack Surface Management | Offensive Security | Penetration Testing | OSINT | Bug Bounty #infosec #bugbounty #netsec #offsec #pentest #pentesting #cybersecurity #infosecurity
𝓢𝓪𝓫𝓻𝓲 retweeted
PHP2Shell update 🚀
13 → 56 perfiles.
5 → 30 con RCE.
Gracias a las aportaciones de la comunidad por ampliar la colección. Nuevos: stage-3 vessel 8.5.0–8.5.10, Debian 13/apxs2 y nginx+PHP-FPM.
github.com/devploit/php2shel…
𝓢𝓪𝓫𝓻𝓲 retweeted
تنبيه هام من الدفاع المدني:
تصوير أو نشر أو تداول أي معلومات تتعلق بالتصدي للصواريخ والطائرات المسيّرة أو مواقع سقوطها يعرّض للمساءلة القانونية.
-
𝓢𝓪𝓫𝓻𝓲 retweeted
We’re expanding our Cyber Verification Program to give security professionals broader access to our most capable models.
Through this program, verified security professionals can access Claude Mythos 5.1, Opus 5.5, and Sonnet 5.5 with safeguards designed for defensive work.
We’re also opening up new tiers to allow for authorized offensive work, like penetration testing and red-teaming.
anthropic.com/news/cyber-ver…
𝓢𝓪𝓫𝓻𝓲 retweeted
تصوير أو نشر أو تداول معلومات ذات صلة بالتصدي للصواريخ والطائرات المسيرة ومواقع سقوطها يعرضك للمساءلة القانونية.
#وزارة_الداخلية
Filming, publishing, or sharing information related to countering missiles and drones and their impact sites exposes you to legal liability.
#Ministry_of_Interior
𝓢𝓪𝓫𝓻𝓲 retweeted
We were building an AI Security startup. We killed the startup idea and released the red-team engine instead — OpenHunterAI github.com/LumosLab-Innovati…
𝓢𝓪𝓫𝓻𝓲 retweeted
Latest release:
- v3.0.0
👉 github.com/az7rb/crt.sh
Previous versions:
- v1.0.0
- v2.0.0
👉 github.com/az7rb/crt.sh/rele…
𝓢𝓪𝓫𝓻𝓲 retweeted
🔓 Attackers are probing a Microsoft SharePoint RCE chain combining CVE-2026-55040 and CVE-2026-63520. The flaws can enable authentication bypass and remote code execution on exposed on-premises servers. Patch immediately.
#CyberSecurity #Microsoft
Read more: thecyberedition.com/microsof…
𝓢𝓪𝓫𝓻𝓲 retweeted
الحمدلله ❤️،اول شهادة في اختبار الـAI 😊
بفضل الله حصلت على شهادة C-AI/MLPen من @TheSecOpsGroup الخاصة باختبار اختراق تطبيقات الذكاء الاصطناعي:
𝓢𝓪𝓫𝓻𝓲 retweeted
Want to run an entire Tailscale daemon from memory inside a C2 implant with zero disk artifacts, no kernel drivers, traffic indistinguishable from HTTPS to a CDN, and relay connections from the victim network back through the tailnet.
Now you can. Enjoy!
netspi.com/blog/technical-bl…
𝓢𝓪𝓫𝓻𝓲 retweeted
gopacket is live! Check it out, it is intended to be a full reimplementation of Impacket in Go (it is in beta please send me bug reports) github.com/mandiant/gopacket…
𝓢𝓪𝓫𝓻𝓲 retweeted
Active Directory Home Lap⚠️
بحكم اني ما لقيت بيئه Active Directory تكون Local و مخصصه للدراسه غير GOAD الي جدا ثقيل
بنيت Lab و رفعته ب GitHub تقدر تحمله الحين عندك عن طريق Vagrant
الـEnvironment عباره عن Parent/Child Domain - و جهازك انت يالـAttacker
github.com/0x4161/active-dir…
𝓢𝓪𝓫𝓻𝓲 retweeted
PoCs for Apache Tomcat Unauth RCE (CVE-2026-34486) and Apache httpd Pre-auth RCE (CVE-2026-23918) are now public on our Github.
Tomcat exploit is fully reliable. httpd chain works in a controlled lab setup with a known info leak.
github.com/striga-ai/CVE-202…
github.com/striga-ai/CVE-202…
𝓢𝓪𝓫𝓻𝓲 retweeted
HashDump-BypassEDR：github.com/AabyssZG/HashDump…
通过系统白程序 Reg.exe 的拓展应用，巧妙绕过EDR的拦截点，实现绕过EDR从而DumpHash😈
该方法针对Windows系列均有效，操作难度不大，具有实战价值🥳
本项目实战文章：blog.zgsec.cn/archives/EDR-D…
源代码和Release已发布，师傅们麻烦点个Star，万分感谢！😍
𝓢𝓪𝓫𝓻𝓲 retweeted
Just pushed a minor update to #mimikatz 2 🥝(no - it's *NOT* the version 3) to support specific GMSA DPAPI passwords in LSA secrets to be able to to decrypt Masterkeys
> github.com/gentilkiwi/mimika…
Only for @topotam77 convenience ;)
𝓢𝓪𝓫𝓻𝓲 retweeted
VirusTotal Inside the Agent Loop
VT-community plugins for OpenClaw and Hermes agent
more info:
blog.virustotal.com/2026/04/…
𝓢𝓪𝓫𝓻𝓲 retweeted
Introducing Combat Theater, a malware technique emulator built for blue teams, detection engineers and security researchers to perform testing and detection validation quickly and easily.
Check out the introduction blog to learn more!
combat.theater/blogs/introdu…
𝓢𝓪𝓫𝓻𝓲 retweeted
Exciting news: Zero-Point Security has joined @fortraofficial and will work alongside the @_CobaltStrike, @OutflankNL, and @_CoreImpact teams to develop the next generation of offensive security training! Get more details on the blog cobaltstrike.com/blog/new-mo…
