Backdoor retweeted
if you have a qwen3.5 4b around, please try steering neurons L14 N8949 +1 and L13 N7956 -1
now you have evil qwen
recipe: dose × median(‖resid‖ leaving layer L, tokens 1:) / ‖W_down[:, n]‖` at the down_proj at every input
Backdoor retweeted
Before local AI is banned, learn how to host and tune your own models.
Specific learning curves to understand for me were:
- Offloading portions of newer models to SSD rather than RAM
- Prompt caching configs
- Preload tuning
- the right choice of model for the task
- pre optimized models for your hardware and harness
- finding the fastest inference server at the web/api level
Backdoor retweeted
JUST IN 🚨
Denmark has launched an official website where foreigners can search for jobs, apply for vacancies, and relocate to work in the country.
workindenmark.dk/?fbclid=IwT…
You know what to do??
Readers added context they thought people might want to know
This website has been active since 2001. Workindenmark.dk is Denmark's official public employment service for connecting international jobseekers with Danish employers. workindenmark.dk/about-workinde… ipaddress.com/website/workin…
php2shell - CVE-2026-109618 / CVE-2026-109619 github.com/ikow/php2shell-po…
Backdoor retweeted
Google just open-sourced its Harness²
It's a plug-and-play framework for recursive agent harnessing in an open world.
Agents can perform, and learn from, tasks its harness was never designed for.
Built around 8 components:
1. System prompt
2. Guardrails
3. Memory
4. Tool guidance
5. Subagents
6. Skills
7. Scripts
8. Plugins
Link: github.com/google-research/h…
Backdoor retweeted
Launching payloads via a service recovery.
RecoverIt crashes a broken Windows service so its recovery action launches a given payload. No Event ID 7045 fired.
A tool by @TwoSevenOneT
Tool: github.com/TwoSevenOneT/Reco…
Post: hackers-arise.com/defense-ev…
#redteam #blueteam
Backdoor retweeted
Here's some of the research I've done into AI and LLMs over the past year:
blog.zsec.uk/bullyingllms/ - Building MCPs
blog.zsec.uk/harnessing-harn… - What makes up a harness
blog.zsec.uk/ai-assisted-dev… - Building tooling
#infosec #llm #vulnerabilityresearch #MCP #harness
Backdoor retweeted
I got you! Just found a way to steal local Windows user credentials 👀
Turns out, all it takes is a few simple hooks on put_Value and get_Value in credprovdatamodel.dll
Backdoor retweeted
Input payload obfuscation is a real game changer here. No AMSI or ETW bypass needed and memory scanner evasion 👀
RustPack Release 1.8.0 was shipped to our customers recently. Short Blogpost with the most relevant new features for everyone here 🔥🔥
msecops.de/blog/posts/rustpa…
#RedTeam #OST #Pentest #Maldev
Backdoor retweeted
Active Directory Attack Architecture Map v2.0
kypvas.github.io/ad_attack_a…
Backdoor retweeted
Today, we are announcing our new Gemini agent for your business—a universal cloud agent running 24/7 to get your work done.
It arrives knowing your tools, data, and work history; it works across knowledge work, content, and code; and it comes with built-in governance to help your data stay secure and cost stay in control → goo.gle/4j7daun
Backdoor retweeted
Today at Google Cloud’s Gemini at Work event, we announced Gemini, a new single universal agent for work that has all of your business context and can be used for everything from knowledge work to answering questions, and content creation to coding, all from a single prompt box.
It’s built around core architectural principles:
☑️ Unified Agent: Gemini can answer questions, do knowledge work and generate code from a single prompt box.
☑️Access: Gemini is web-based and can be accessed from any device and integrated into third-party applications. It can also operate without a dedicated user interface.
☑️Persistent Execution: It runs in the cloud, which means it maintains a single set of memories, context and one personalization graph no matter where you access it.
☑️Multi-Agent Orchestration: Gemini can create sub-agents to tackle multi-step tasks and can also act as a coworker agent with a defined role and its own dedicated identity
☑️Context: Gemini knows your tools, data, and work history and learns how you work the more you use it.
☑️Model Choice Flexibility: It orchestrates across multiple models to deliver optimal quality and lower your costs.
Backdoor retweeted
Introducing PageBreak, an agentic vulnerability discovery tool using deterministic validation to achieve a near-zero false positive rate.
How it works: blog.google/security/agentic…
For real-world vulnerabilities PageBreak has discovered 👇
bughunters.google.com/blog/p…
Backdoor retweeted
Olvídate de DCSync y las copias de sombra de NTDS. Si quieres extraer hashes de Active Directory sin hacer ruido, este es el camino.
Timeroasting abusa del servicio de tiempo de Windows (NTP) para robar hashes de forma sigilosa. Y lo peor: pasa desapercibido en la mayoría de pipelines de detección.
🧵 ¿Cómo funciona y cómo detectarlo?
1️⃣ El protocolo olvidado: Abusa de la extensión NTP de Microsoft para recolectar hashes de cuentas de máquina (y en escenarios avanzados, cuentas manipuladas).
2️⃣ Cero alertas: El tráfico NTP es omnipresente en cualquier red corporativa, por lo que el ruido generado es prácticamente nulo comparado con otras técnicas.
3️⃣ Crackeo offline: Los hashes obtenidos se pueden tirar contra Hashcat (-m 31300) para romper contraseñas débiles.
Los defensores necesitan empezar a monitorear anomalías en peticiones MS-SNTP ya mismo.
Aprende a implementarlo paso a paso con PowerShell aquí 👇
Backdoor retweeted
As a Canadian citizen aged 18 to 35, you can broaden your horizons and boost your career with International Experience Canada.
1. Pick a destination among over 35 countries and territories.
2. Choose a temporary work permit that’s right for you and complete your application.
3. Work, travel and develop your skills in a new environment abroad for up to 2 years.
4. Gain a life-changing experience that will support your long-term career development in Canada.
Apply now: bit.ly/4hi9lBd
Backdoor retweeted
🥷 Now we can inject a payload into a remote process without using VirtualAllocEx and WriteProcessMemory.
No need to suspend the target process
New technique to evade EDRs:
Github: TwoSevenOneT/InjectSetConsole
#redteam #pentest #antimalware
Backdoor retweeted
And another DCOM Lateral Movement technique released @MCTTP_Con by Shebin Mathew 🔥

























