Hacker, Pentester and Technology Lover

Joined May 2021
Backdoor retweeted
if you have a qwen3.5 4b around, please try steering neurons L14 N8949 +1 and L13 N7956 -1 now you have evil qwen recipe: dose × median(‖resid‖ leaving layer L, tokens 1:) / ‖W_down[:, n]‖` at the down_proj at every input
487
1,290
728
21,886
4,216,601
Backdoor retweeted
Before local AI is banned, learn how to host and tune your own models. Specific learning curves to understand for me were: - Offloading portions of newer models to SSD rather than RAM - Prompt caching configs - Preload tuning - the right choice of model for the task - pre optimized models for your hardware and harness - finding the fastest inference server at the web/api level
40
93
2
1,064
42,783
JUST IN 🚨 Denmark has launched an official website where foreigners can search for jobs, apply for vacancies, and relocate to work in the country. workindenmark.dk/?fbclid=IwT… You know what to do??
Readers added context they thought people might want to know
This website has been active since 2001. Workindenmark.dk is Denmark's official public employment service for connecting international jobseekers with Danish employers. workindenmark.dk/about-workinde… ipaddress.com/website/workin…
115
2,308
73
15,027
1,299,364
Has anyone received a bounty from Apple recently? X seems dead regarding these posts; no one is announcing anything about them.
33
Backdoor retweeted
i will make sure my subscribers buy them at this price $BBAI AT $1 $BITF AT $1 $GRAB AT $2 $ONDS AT $3 $SOUN AT $3 $RIOT AT $4 $CIFT AT $5 $PATH AT $7 $SOFI AT $8 $IREN AT $15 $OKLO AT $20
69
45
3
338
104,386
Google just open-sourced its Harness² It's a plug-and-play framework for recursive agent harnessing in an open world. Agents can perform, and learn from, tasks its harness was never designed for. Built around 8 components: 1. System prompt 2. Guardrails 3. Memory 4. Tool guidance 5. Subagents 6. Skills 7. Scripts 8. Plugins Link: github.com/google-research/h…
58
217
9
1,490
81,254
I got you! Just found a way to steal local Windows user credentials 👀 Turns out, all it takes is a few simple hooks on put_Value and get_Value in credprovdatamodel.dll
8
24
1
303
14,200
Input payload obfuscation is a real game changer here. No AMSI or ETW bypass needed and memory scanner evasion 👀
RustPack Release 1.8.0 was shipped to our customers recently. Short Blogpost with the most relevant new features for everyone here 🔥🔥 msecops.de/blog/posts/rustpa… #RedTeam #OST #Pentest #Maldev
2
28
161
9,686
Backdoor retweeted
Active Directory Attack Architecture Map v2.0 kypvas.github.io/ad_attack_a…
4
173
2
705
28,538
Today, we are announcing our new Gemini agent for your business—a universal cloud agent running 24/7 to get your work done. It arrives knowing your tools, data, and work history; it works across knowledge work, content, and code; and it comes with built-in governance to help your data stay secure and cost stay in control → goo.gle/4j7daun
216
481
267
4,272
3,686,306
Today at Google Cloud’s Gemini at Work event, we announced Gemini, a new single universal agent for work that has all of your business context and can be used for everything from knowledge work to answering questions, and content creation to coding, all from a single prompt box. It’s built around core architectural principles: ☑️ Unified Agent: Gemini can answer questions, do knowledge work and generate code from a single prompt box. ☑️Access: Gemini is web-based and can be accessed from any device and integrated into third-party applications. It can also operate without a dedicated user interface. ☑️Persistent Execution: It runs in the cloud, which means it maintains a single set of memories, context and one personalization graph no matter where you access it. ☑️Multi-Agent Orchestration: Gemini can create sub-agents to tackle multi-step tasks and can also act as a coworker agent with a defined role and its own dedicated identity ☑️Context: Gemini knows your tools, data, and work history and learns how you work the more you use it. ☑️Model Choice Flexibility: It orchestrates across multiple models to deliver optimal quality and lower your costs.
461
339
388
3,892
2,166,325
Introducing PageBreak, an agentic vulnerability discovery tool using deterministic validation to achieve a near-zero false positive rate. How it works: blog.google/security/agentic… For real-world vulnerabilities PageBreak has discovered 👇 bughunters.google.com/blog/p…
22
198
9
1,209
99,058
Backdoor retweeted
Olvídate de DCSync y las copias de sombra de NTDS. Si quieres extraer hashes de Active Directory sin hacer ruido, este es el camino. Timeroasting abusa del servicio de tiempo de Windows (NTP) para robar hashes de forma sigilosa. Y lo peor: pasa desapercibido en la mayoría de pipelines de detección. 🧵 ¿Cómo funciona y cómo detectarlo? 1️⃣ El protocolo olvidado: Abusa de la extensión NTP de Microsoft para recolectar hashes de cuentas de máquina (y en escenarios avanzados, cuentas manipuladas). 2️⃣ Cero alertas: El tráfico NTP es omnipresente en cualquier red corporativa, por lo que el ruido generado es prácticamente nulo comparado con otras técnicas. 3️⃣ Crackeo offline: Los hashes obtenidos se pueden tirar contra Hashcat (-m 31300) para romper contraseñas débiles. Los defensores necesitan empezar a monitorear anomalías en peticiones MS-SNTP ya mismo. Aprende a implementarlo paso a paso con PowerShell aquí 👇
11
131
6
573
37,614
Backdoor retweeted
As a Canadian citizen aged 18 to 35, you can broaden your horizons and boost your career with International Experience Canada. 1. Pick a destination among over 35 countries and territories. 2. Choose a temporary work permit that’s right for you and complete your application. 3. Work, travel and develop your skills in a new environment abroad for up to 2 years. 4. Gain a life-changing experience that will support your long-term career development in Canada. Apply now: bit.ly/4hi9lBd
58
77
33
1,538
391,408
🥷 Now we can inject a payload into a remote process without using VirtualAllocEx and WriteProcessMemory. No need to suspend the target process New technique to evade EDRs: Github: TwoSevenOneT/InjectSetConsole #redteam #pentest #antimalware
10
189
4
999
60,264
Backdoor retweeted
September flew by like four niggas in a Nissan Altima
107
1,421
54
37,946
1,525,482
And another DCOM Lateral Movement technique released @MCTTP_Con by Shebin Mathew 🔥
2
30
138
7,560