sailay(valen) (@404death) header
sailay(valen) (@404death) profile picture

sailay(valen)

@404death

Just an idiot, a tiny presence in an infinite universe. S-1-5-7 https://teapawt.org/t.co/OwoK61Z67A

github.com/sailay1996
Joined April 2013
  • Tweets4.4K
  • Following699
  • Followers4.7K
150Media
Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)Photo by sailay(valen) (@404death)
Skip the LSASS theatre ... walk the $MFT, take the hive, leave no minidump behind.
Image from sailay(valen) (@404death)
5
35
199
9,022
sailay(valen) retweeted
Nicolas Krassas (@Dinosn) profile picture
Nicolas Krassas
@DinosnOct 28
From Arbitrary File Read to Shell: Yet Another RCE in Telerik tantosec.com/blog/2026/10/te…
From Arbitrary File Read to Shell: Yet Another RCE in Telerik

From Arbitrary File Read to Shell: Yet Another RCE in Telerik

A vulnerability in Telerik UI for ASP.NET AJAX led to an arbitrary file read via RadImageEditor's image cache. Leaking web.config turned it into RCE.

tantosec.com
1
11
60
5,198
sailay(valen) retweeted
Invoke RE (@InvokeReversing) profile picture
Invoke RE
@InvokeReversingOct 26
We've uploaded our live stream from October 16th where we analyzed a Rust loader that uses indirect syscall resolution, AES decryption, ETW patching and multiple unpacking steps to load and execute NWHStealer. Enjoy!
Image from Invoke RE (@InvokeReversing)
1
13
30
1,281
sailay(valen) retweeted
Joas Antonio (@C0d3Cr4zy) profile picture
Joas Antonio
@C0d3Cr4zyOct 24
Syswhispers4 github.com/JoasASantos/SysWh…
GitHub - JoasASantos/SysWhispers4: AV/EDR evasion via direct and indirect system calls Windows NT...

GitHub - JoasASantos/SysWhispers4: AV/EDR evasion via direct and indirect system calls Windows NT...

AV/EDR evasion via direct and indirect system calls Windows NT 3.1 through Windows 11 24H2 · x64 · x86 · WoW64 · ARM64 - JoasASantos/SysWhispers4

github.com
1
49
1
210
11,556
sailay(valen) retweeted
cr3ghost (@cr3ghost) profile picture
cr3ghost
@cr3ghostOct 5
If you're into Windows internals, kernel development or reverse engineering, bookmark this. @codemachineinc has an incredible FREE archive of low-level Windows research covering: • WinDbg + kernel debugging • Windows kernel data structures • Kernel callbacks • NTOSKRNL internals • EX_FAST_REF pointers • TEB internals • Prototype PTEs • x64 kernel virtual address space • System call internals • Windows on ARM • Interrupt dispatching • KMDF internals • WFP + WSK + AFD • Kernel threads • Physical memory analysis • Driver development + debugging There are also some absolute gems like using WinDbg to analyze/remove Poison Ivy RAT and a full catalog of key Windows kernel structures. A lot of the material is older, but the fundamentals are still extremely valuable for understanding Windows under the hood. Full FREE article archive: codemachine.com/articles.htm… Huge credit to @codemachineinc for keeping this material publicly available. #WindowsInternals #ReverseEngineering #KernelDevelopment
Image from cr3ghost (@cr3ghost)
Image from cr3ghost (@cr3ghost)
Image from cr3ghost (@cr3ghost)
Image from cr3ghost (@cr3ghost)
1
69
1
363
14,101
sailay(valen) retweeted
Yasser Sinjab (@ysinjab) profile picture
Yasser Sinjab@ysinjabSep 15
laurentiugabriel.github.io/b…

How I use LLMs to learn complex topics · Laurentiu Raducu

LLMs are used for any things. Learning new things is one of the top use cases.

laurentiugabriel.github.io
3
48
662
39,508
sailay(valen) retweeted
Jake Bolam (@xixasec) profile picture
Jake Bolam@xixasecSep 14
I wrote a blog post about exploiting Logi Options+ for SYSTEM shells. blog.amberwolf.com/blog/2026…

A Peripheral Path to SYSTEM - Exploiting Logi Options+ for SYSTEM Shells

Chained flaws in the Logitech Options Plus updater give any local user SYSTEM code execution, with no admin rights or user interaction. CVE-2026-12518.

blog.amberwolf.com
1
21
1
59
4,179
sailay(valen) retweeted
Pavel Yosifovich (@zodiacon) profile picture
Pavel Yosifovich
@zodiaconSep 15
How do you run your own service inside Svchost.exe? trainsec.net/library/malware…
Image from Pavel Yosifovich (@zodiacon)
3
42
264
14,477
Story time...
Abdelhamid Naceri (@MSNightmare2000) profile pictureAbdelhamid Naceri@MSNightmare2000Sep 11
they fired me for no reason, it was never abount bounties.
33
179
27
1,423
338,800
Microsoft has failed to properly patch ShieldBreak CVE-2026-69414 - msrc.microsoft.com/update-gu… ShieldCrash demonstrates a full bypass of the patch - github.com/MSNightmare/Shiel… Works with latest September 2026 patch
Abdelhamid Naceri (@MSNightmare2000) profile pictureAbdelhamid Naceri@MSNightmare2000Aug 11
Microsoft has failed to properly patch RoguePlanet (CVE-2026-50656), ShieldBreak, a PoC that demonstrates a full bypass to the previous patch is now public. github.com/MSNightmare/Shiel… The PoC works with the latest August 2026 patch
20
186
11
1,094
68,879
FalconFlank : Crowdstrike Falcon 0day LPE is now public github.com/MSNightmare/Falco…
89
501
78
2,901
367,091
sailay(valen) retweeted
supermao (@buaaxhm) profile picture
supermao
@buaaxhmAug 29
我太爱这个了 太牛逼了 github.com/zhaoxuya520/rever…
GitHub - zhaoxuya520/reverse-skill: Reverse Engineering / Authorized Penetration Testing / Security...

GitHub - zhaoxuya520/reverse-skill: Reverse Engineering / Authorized Penetration Testing / Security...

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Cod...

github.com
141
282
10
2,519
265,706
Also, looking for a job, hard requirement has to be in Germany, if you have anything for me, you can reach me by email ! [email protected]
6
20
2
218
15,994
GenDigital products are vulnerable to a 0day vulnerability, a PoC that demonstrates a SAM database dump and elevation of privilege is now public github.com/MSNightmare/Prett…
14
135
4
942
36,583
Kaspersky 0day ? Anyone ? github.com/MSNightmare/HardB…
28
253
17
1,767
153,858
sailay(valen) retweeted
Master_寒蝉 (@Master_HanChan) profile picture
Master_寒蝉
@Master_HanChanAug 19
CVE-2026-42980 Windows 内核 WMI 整数下溢本地提权漏洞，低权限攻击者可利用该漏洞将自身权限提升至 SYSTEM，进而完全控制受影响主机。 (切记，运行第二次poc存在蓝屏概率) github.com/G4sp4rCS/CVE-2026…
Image from Master_寒蝉 (@Master_HanChan)
50
50
243
13,046
sailay(valen) retweeted
OrcaRouter 🐳 (@OrcaRouter) profile picture
OrcaRouter 🐳
@OrcaRouterAug 15
We just released our uncensored weights for Qwen3.8 27B FP8, designed for AI Red Teaming and security research, enjoy! huggingface.co/orcarouter/Qw…
orcarouter/Qwen3.8-27B-Uncensored-FP8 · Hugging Face

orcarouter/Qwen3.8-27B-Uncensored-FP8 · Hugging Face

We’re on a journey to advance and democratize artificial intelligence through open source and open science.

huggingface.co
133
646
94
6,918
7,615,110
sailay(valen) retweeted
Aidan Khoury (@aidankhoury) profile picture
Aidan Khoury@aidankhoury27 Nov 2023
Yet another very powerful patchguard and vbs compliant method for hooking system calls globally revers.engineering/fun-with-…
Fun with another PatchGuard-compliant Hook - Reverse Engineering

Fun with another PatchGuard-compliant Hook - Reverse Engineering

Abuse the HalPrivateDispatchTable to hook SYSCALL system-wide while maintain compliance with PatchGuard on Windows 10 and 11.

revers.engineering
6
103
2
390
91,693
sailay(valen) retweeted
domas (@xoreaxeaxeax) profile picture
domas@xoreaxeaxeaxAug 13
New exploit: “xor dword [0xf80c2094], 1<<22” Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed. github.com/xoreaxeaxeax/skit…
166
1,072
184
8,171
1,100,386
Seems like I can proudly say that I got some CVE IDs and published security research before the AI era.
2
278
sailay(valen) retweeted
Elon Musk (@elonmusk) profile picture
Elon Musk
@elonmuskAug 2
Accurate 😂
Image from Elon Musk (@elonmusk)
3,770
4,649
778
47,420
13,665,980
Load more