bukaw (@mk82js) header
bukaw (@mk82js) profile picture
Joined March 2015
bukaw retweeted
Finally finished my Active Directory Pentesting Methodology! This can become your 𝗴𝗼-𝘁𝗼 𝗿𝗲𝘀𝗼𝘂𝗿𝗰𝗲 for AD pentesting: • 50+ Techniques • 300+ Commands • 100 Screenshots • Full kill chain (Foothold → PrivEsc → Lateral → Domain Compromise) karrab7.com/articles/Active-…
2
42
158
5,500
bukaw retweeted
After a few years in beta, the V8 Sandbox is now considered a real security boundary! (Just announced at OffensiveCon Tokyo together with @mlippautz). This is less about reaching a particular software milestone than about two things:
4
20
1
173
9,476
bukaw retweeted
At Google CTF in Singapore with TeamH4C, I came across Node2Shell on X. php2shell already feels well-trodden, so I dug into Node2Shell instead and published the analysis on SAGO, our 1-day platform. 📝 Write-up: sago.h4c.team/reports/SG-202… 💻 PoC & exploit: github.com/TeamN4C/SG-2026-0…
4
19
2
114
8,691
bukaw retweeted
0-Click RCE on the Tesla Infotainment Through Cellular Network cc @_p0ly_ @vdehors synacktiv.com/sites/default/…
3
57
4
451
26,611
60-minute crash course in Memory Forensics: How it works and how to reconstruct 0-day exploits using it 🧠🔬😈👾👑 More details on: LinkedIn: lnkd.in/p/gNq5RhcK Substack: it4sec.substack.com/p/60-min… Telegram: t.me/it4sec/81
2
60
2
340
7,745
bukaw retweeted
Finding a Whatsapp NDay (CVE-2026-23866) numb3rs.re/posts/cve-2026-23… #infosec
64
505
18,601
We have post-trained GLM 5.3 flash to become as strong as Fable 5.1 on SRE tasks (that is bug finding in complicated software deployments). Checkout our tech paper to see how we did it. web-assets.dd-static.net/425…
18
75
9
762
41,574
国外搞逆向的猛男真多啊!十分推荐这个强大的agent 逆向工程IDE平台名为Eleven: 1. 专注逆向二进制app, 包括: Mac/iOS, Linux ELF, Windows PE, Andoird apk等等; 2. 底层用的也是这几天爆火的REA逆向库+二进制逆向工具 3. 支持常见的所有agent,类似Claude Code, Codex,Cursor等 4. 各种使用AI辅助逆向的强大功能 github.com/Zfinix/eleven
Introducing Eleven: reverse engineering with your agent. i've always wanted to open any app and just ask what a function does, instead of staring at assembly for hours. so i built it with Eleven you can: → open Mac apps, Android APKs, Windows and Linux binaries, and read every function as pseudocode, assembly, a graph or hex → ask Claude, Codex, Gemini, Cursor or any ACP agent about the code. it reads the binary with you and you watch every step → your agent renames functions and leaves notes as suggestions. you accept or skip, and everything can be undone → patch bytes safely (always a copy, never the original), compare two builds, and debug with lldb free and open source
35
144
5
780
50,002
New research from our team: we chained an unauthenticated bulk import, an XXE buried in a nested dependency and leaked IMS credentials into full pre-auth RCE on Adobe Experience Manager Cloud. We also cover how AI models helped (and didn't) during the audit. slcyber.io/research/more-cri…
1
35
1
150
5,835
bukaw retweeted
Our research team discovered two vulnerabilities in Discourse: a pre-authentication cache poisoning to sitewide XSS (CVE-2026-55674), and an arbitrary file read (RCE) chaining a JPEG race condition with ImageMagick and Ghostscript (CVE-2026-55420). You can read more here:
4
61
3
242
23,085
bukaw retweeted
vf3 (very fast fun vibe fuzzer) designed by @_dinolover38 is faster than Jackalope and libprotobuf-mutator 😳 🏃🏻‍♂️🔥 #OAIC
6
26
1
255
13,967
Underrated security resources that helps you learn newer technologies Orange Tsai - "Breaking Parser Logic" and "A New Era of SSRF." The writeups from Orange is pretty good to learn security in-depth, from a different angle Resource: blog.orange.tw/ Peace and Salam✌️
1
21
119
5,874
bukaw retweeted
Infosec tradecraft just became reusable by AI agents. SpecterOps just open-sourced: 79 skills. 22 reusable agents. 26 plugin families. BloodHound. Cobalt Strike. Outflank C2. Ghidra. Binary Ninja. Ghostwriter. Recon. AppSec. Code review. C2 development. Reverse engineering. Adversary simulation. Windows + macOS tradecraft. And this is NOT just for red teamers. Vulnerability researchers: These workflows could accelerate code review, patch analysis, 1-day research and potentially help with 0-day discovery when paired with real research expertise. Reverse engineers + malware analysts: Give agents structured workflows, references and tooling instead of starting every investigation from a blank prompt. Blue teams + detection engineers: Study the same offensive tradecraft, emulate attacker behavior, build better detections and start asking what telemetry survives increasingly agent-assisted operations. DFIR + threat intel: Understand what adversaries may automate next and turn repeatable investigative knowledge into reusable workflows. Red teamers: BloodHound attack paths, recon, C2 development, adversary simulation and operator tradecraft are becoming increasingly agent-assisted. This isn't another collection of AI prompts. It's practitioner knowledge being turned into reusable, reviewable security workflows. Potentially useful for everyone from CTF learners and newcomers all the way to malware analysts, reverse engineers, exploit devs, red teams, blue teams and vulnerability researchers. This is only the beginning. @SpecterOps Skills: github.com/SpecterOps/skills @OutflankNL and @kyleavery breakdown: outflank.nl/blog/2026/09/02/… #Infosec #RedTeam #ReverseEngineering
11
208
2
977
57,511
bukaw retweeted
SharePoint + Pre-Auth RCE + MemShell? 👀 We’ve published our technical analysis of CVE-2026-65660, covering the attack chain from an Allow Anonymous site and a pre-auth SharePoint vulnerability to RCE and MemShell. Take a look: blog.viettelcybersecurity.co…
10
142
1
614
33,908
bukaw retweeted
DeepZero is an open-source pipeline for hunting vulnerable Windows kernel drivers. Point it at a driver corpus → parse, decompile, Semgrep, then LLM assessment for exploitable IOCTLs. Built for BYOVD research. Maintainer reports verified findings already in disclosure. helpnetsecurity.com/2026/09/… #Cybersecurity #AI #AISecurity #MCP #Claude #GPT #Infosec #Trending #KernelSecurity #BYOVD
3
16
1,076
This is the part 2 of Everything About Memory Allocators, in this we are going to discuss about malloc and free
1
40
1
361
23,812
Adminer - SQLite RCE Regex Filter Bypass - @SorceryIE blog.sorcery.ie/posts/admine…
12
44
3,490
Our primary co-author @wwkenwong @ unprompted.au Topic: The Fuzzer Reached the Code, yet Missed the State. SOSP 2026: State-Aware Fuzzing of JavaScript Engines with LLM-Guided Instrumentation sigops.org/s/conferences/sos… Co-authors: Dongwei Xiao, @wangshuai901 , @02E774
2
15
77
5,721