Init1Security (@init1security) profile picture

Init1Security

@init1security

Elevating security with expert offensive strategies

 Long Beach
init1security.com/
Joined October 2024
  • Tweets330
  • Following84
  • Followers1.2K
48Media
Photo by Init1Security (@init1security)Photo by Init1Security (@init1security)Photo by Init1Security (@init1security)Photo by Init1Security (@init1security)Photo by Init1Security (@init1security)Photo by Init1Security (@init1security)Photo by Init1Security (@init1security)Photo by Init1Security (@init1security)Photo by Init1Security (@init1security)Photo by Init1Security (@init1security)
Init1Security retweeted
howtopam (@howtopam) profile picture
howtopam@howtopamOct 27
LiberNT is in active development. A free Windows-compatible Operating System. Built out of love for the NT architecture. Windows® 11 compatible, for amd64, arm64 and riscv64. github.com/LiberNT/LiberNT
Image from howtopam (@howtopam)
51
171
26
1,288
72,687
People are going to lose their mind when they realize its actually easier to hack things using FEATURES not CVEs.
23
84
23
597
53,350
Man all of them security mitigations and the funny still happens, will never stop being funny
Image from Abdelhamid Naceri (@MSNightmare2000)
6
36
1
638
22,499
Init1Security retweeted
Luke Acha (@luke92881) profile picture
Luke Acha
@luke92881Oct 27
We have openings on our team GM. Senior Incident Coordinator lnkd.in/g35U5F7R Senior Incident Handler lnkd.in/gs2erCpU Senior Adversary Operations lnkd.in/gjQQs_Uz

LinkedIn

This link will take you to a page that’s not on LinkedIn

lnkd.in
1
7
1
15
5,725
Azure API Management as a Policy-Based C2 Redirector redops.at/research/azure-api…
Azure API Management as a Policy-Based C2 Redirector · RedOps

Azure API Management as a Policy-Based C2 Redirector · RedOps

A Cobalt Strike 4.13 walkthrough of Azure API Management: native request policies, backend certificates, curl tests, and the observed Beacon connection.

redops.at
18
57
2,985
Init1Security retweeted
MalDev Academy (@MalDevAcademy) profile picture
MalDev Academy
@MalDevAcademyOct 26
Today we released WhisperHijack, a stealthy process injection PoC that uses thread descriptions to inject payloads into remote processes, then patches a waiting thread's return address for execution. Every memory op happens in-target via Queue APCs, with zero NtWriteVirtualMemory or NtSetContextThread calls. Based on @hasherezade TNC + WTH research. github.com/Maldev-Academy/Wh…
Image from MalDev Academy (@MalDevAcademy)
Image from MalDev Academy (@MalDevAcademy)
6
71
4
414
21,009
Init1Security retweeted
Florian Roth ⚡️ (@cyb3rops) profile picture
Florian Roth ⚡️
@cyb3ropsOct 27
People seem to think this post was about exploit development. It wasn’t. You don’t need to discover a new software vulnerability to compromise 90% of organizations.
Florian Roth ⚡️ (@cyb3rops) profile pictureFlorian Roth ⚡️
@cyb3ropsOct 26
Important quote ... plan to use it in your slide decks in the coming months "The ease with which open-weight AI models can be combined and spread into countless attack tools has transformed cyberattacks, which once required advanced skills, into an era where anyone can easily carry them out."
8
14
5
144
25,677
Init1Security retweeted
Nicolas Krassas (@Dinosn) profile picture
Nicolas Krassas
@DinosnOct 27
Kernel eviction notice: What wesp.sys reveals about the Windows Endpoint Security Platform elastic.co/security-labs/blo…
Windows Endpoint Security Platform: Inside wesp.sys

Windows Endpoint Security Platform: Inside wesp.sys

Microsoft is moving EDR out of the Windows kernel. A kernel debugging session shows what the Windows Endpoint Security Platform can and can't do just now.

elastic.co
1
12
62
5,537
Init1Security retweeted
sagitz (@sagitz_) profile picture
sagitz
@sagitz_Oct 21
Today we disclose PHP2Shell - remotely exploitable memory corruptions in PHP WordPress pre-auth RCE: ✅ Drupal pre-auth RCE: ✅ Joomla pre-auth RCE: ✅ Remote memory disclosure of any PHP application: ✅ Read more ⬇️🧵
Image from sagitz (@sagitz_)
65
568
94
3,096
472,069
It has been a quieter month than usual for iPurple blogging, as I have been working on content for a number of upcoming projects and activities. A new article will be published early next week. In the meantime, have a look at my latest post on leveraging WerEnc.dll to encrypt your implant. Why use it? ✅ Smaller stagers by reusing encryption code already built into Windows ✅ AES-256 encryption support ✅ Trusted, signed Microsoft DLL Living-off-the-land encryption has its advantages. ipurple.team/2026/09/21/dump…
Image from Panos Gkatziroulis 🦄 (@ipurple)
2
17
1,192
Init1Security retweeted
HackerRalf (@hacker_ralf) profile picture
HackerRalf@hacker_ralfMar 14
Using Crystal Palace and AdaptixC2 maorsabag.github.io/posts/ad…

Sleeping Beauty: Putting Adaptix to Bed with Crystal Palace

A tale of relocations, ROP chains, and the quest to make an Adaptix beacon sleep gracefully.

maorsabag.github.io
34
132
7,600
Init1Security retweeted
DbgMan ^_^ (@0XDbgMan) profile picture
DbgMan ^_^@0XDbgManFeb 23
Yo, a new Blog Post about Bypass All Sec Control in windows like (win def,applocker,WDAC,SmartScreen,ASR,PPL,Sysmon,Edrs) 0xdbgman.github.io/posts/sec… #EDRS #Bypass #PPL #WDAC #Redteam #windowsDefender #ASR #Sysmon
Security Controls: Modern EDR & Windows Protection Bypass

Security Controls: Modern EDR & Windows Protection Bypass

Red Teamer & Low-Level Developer. Deep dives into Windows Internals, Kernel Exploitation, Driver Analysis, and Red Team techniques.

0xdbgman.github.io
1
74
2
195
8,687
Init1Security retweeted
DbgMan ^_^ (@0XDbgMan) profile picture
DbgMan ^_^@0XDbgManFeb 18
Yo , a new blog post about persistence techniques Windows:Registry, Scheduled Tasks, WMI, DLL Hijacking Linux:cron, SSH Keys, LKM macOS: LaunchAgents, Dylib Hijacking Cloud: IAM Abuse, Kubernetes Inspired by Volt Typhoon, Lazarus Group, APT29. 0xdbgman.github.io/posts/per…
Persistence: Advanced Red Team Persistence Techniques

Persistence: Advanced Red Team Persistence Techniques

Red Teamer & Low-Level Developer. Deep dives into Windows Internals, Kernel Exploitation, Driver Analysis, and Red Team techniques.

0xdbgman.github.io
1
66
1
217
8,662
Init1Security retweeted
Wietze (@Wietze) profile picture
Wietze@WietzeFeb 12
Can LNK files ever be trusted? ⚡ My latest blog post demonstrates several new LNK abuse methods, allowing you to fully spoof the target shown in Explorer. It also introduces tools to create your own LNKs, and detected spoofed ones yourself. 🐬 wietzebeukema.nl/blog/trust-…
11
232
7
1,005
145,498
Init1Security retweeted
Julian Peña (@rainbowdynamix) profile picture
Julian Peña@rainbowdynamixFeb 2
Introducing: GhostKatz! 🐱 A Cobalt Strike BOF that lets you dump LSASS via exploitation of vulnerable drivers that offer physical memory read primitives. Written by @EricEsquivel123 and I!! :) github.com/RainbowDynamix/Gh…
GitHub - RainbowDynamix/GhostKatz: Dump LSASS via physical memory read primitives in vulnerable...

GitHub - RainbowDynamix/GhostKatz: Dump LSASS via physical memory read primitives in vulnerable...

Dump LSASS via physical memory read primitives in vulnerable kernel drivers - RainbowDynamix/GhostKatz

github.com
2
47
172
11,560
Init1Security retweeted
David (@dmcxblue) profile picture
David
@dmcxblueFeb 3
Finally, HTTPS integration: previously, the HTTP traffic used simple encryption and encoding to hide the data, but now support for HTTPS makes it look more legit. #redteam
Image from David (@dmcxblue)
2
22
1,623
Init1Security retweeted
Tom Dörr (@tom_doerr) profile picture
Tom Dörr
@tom_doerrFeb 5
List of tools and datasets for intelligence gathering github.com/Jieyab89/OSINT-Ch…
Image from Tom Dörr (@tom_doerr)
73
489
20,884
Init1Security retweeted
Malcat dev (@malcat4ever) profile picture
Malcat dev
@malcat4everFeb 5
Sometimes, the absence of signature match is also interesting. Here the #Chrysalis sideloaded dll, where we can quickly spot the few interesting functions. Make sure to check "Show UNK" !
Image from Malcat dev (@malcat4ever)
8
32
2,983
Init1Security retweeted
David (@dmcxblue) profile picture
David
@dmcxblueJan 23
Excited to be sharing again!! @0x00secOfficial 0x00sec.org/how-to-rob-a-ban… #redteam
How to Rob a Bank (Lessons by Phineas Phisher)

How to Rob a Bank (Lessons by Phineas Phisher)

dmcxblue writes in the forum: Hi everyone!! I’m excited to be back in this fantastic community and forum where my journey of publishing articles on Red Team techniques and Offensive Security first...

0x00sec.org
5
11
954
Init1Security retweeted
David (@dmcxblue) profile picture
David
@dmcxblueJan 4
A short weekend read for anyone interested in the ANIMO (Azure Network Intel & Mission Ops) tool I've been working on throughout 2025. It documents a red team scenario with its capabilities and future development plans. If you'd like to send suggestions, phishing links or donations my DMs are open. #redteam dmcxblue.net/2026/01/04/anim…
ANIMO (Azure Network Intel & Mission Ops)

ANIMO (Azure Network Intel & Mission Ops)

“Here come’s a (New) Challenger” Azure or Entra for the new generation is a big playing field, I’ve been writing a tool for Azure Engagements the entirety of 2025, now that …

dmcxblue.net
1
5
53
3,600
Load more