@TheXC3LL

Just a biologist that loves to break cyber-stuff. Ka0labs / @AdeptsOf0xcc / ID-10-Ts member. 🦉

 /home/ka0labs
x-c3ll.github.io
Joined May 2011
  • Tweets10.2K
  • Following629
  • Followers5.4K
716Media
Why install PHP patches, when @trufae shows you how to binary patch a few bytes in your mod_php using @radareorg 🙃 trufae.substack.com/p/securi…
1
5
11
899
There we go wiz.io/blog/php2shell-php-rc…

PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog

Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.

wiz.io
4
49
5
434
32,441
But it doesn't just affect Intune + NSIS - any MDM solution that allows users to self-install apps, and other installer packaging frameworks could also be vulnerable. Details on the @AmberWolfSec blog: blog.amberwolf.com/blog/2026…

Help Yourself to SYSTEM

AmberWolf Security Research Blog

blog.amberwolf.com
8
21
1,306
We recently did some research on self-service attacks on Intune Company Portal. If you use Intune and allow users to self-install certain installers in System context, then this can lead to LPE ..
2
9
1
36
2,668
#windjammersmd is ready! @claudeai brought this #neogeo windjammers to our loved #megadrive #genesis. Check it here: github.com/hacklego/windjamm…. Kudos to @zanac_dx for the cover for the insert. Enjoy!

GitHub - hacklego/windjammersmd: Non-oficial port from windjammers Neo Geo to MegaDrive/Genesis

Non-oficial port from windjammers Neo Geo to MegaDrive/Genesis - hacklego/windjammersmd

github.com
1
4
7
506
Last week I watched our team use codex to build 2 new fully functional agents for Nighthawk using our open agent protocol, including with custom c2 support. They were deployed to a live project and worked flawlessly. Everyone has their own throwaway c2 at their fingertips…. The c2 game is dead
Adam Chester 🏴‍☠️
@_xpn_Jun 24
First blog post in a mini series where I look at "disposable tooling". This post shares what I have found to be useful when 1-shot'ing LLM generated Stage-0 agents for Mythic. specterops.io/blog/2026/06/2…

Disposable Tooling: Building LLM-Generated Mythic Agents from Prompt to Deployment

Using Claude Opus to autonomously generate Mythic C2 agents from prompt to deployment—and what that means for defenders.

specterops.io
11
17
178
11,346
X-C3LL retweeted
X-C3LL@TheXC3LLOct 10
Second part of my adventures with Eufy in @Adeptsof0xCC! A story of wifi secrets, UART lockdowns and a damaged flash memory chip adepts.of0x.cc/eufy-homestat…
2
4
12
765
Second part of my adventures with Eufy in @Adeptsof0xCC! A story of wifi secrets, UART lockdowns and a damaged flash memory chip adepts.of0x.cc/eufy-homestat…
2
4
12
765
Me ha gustado mucho @TheXC3LL , sobretodo leer las técnicas que usabais en operaciones anteriores y he empatizado mucho en los momentos de estrés y búsqueda de soluciones a la desesperada 🫠 además, la maquetación es top. Enhorabuena!
1
1
3
328
X-C3LL retweeted
Pepe Vila@cgvwzqAug 31
when you finally come back from your paternity leave during the AI revolution
1
10
930
X-C3LL retweeted
Juan Garrido@tr1anaSep 25
I've been working on this for a while, and here we are: Monkey365 v1.0.0 is out! This release is focused on Microsoft Entra ID, with a new dedicated ruleset and 100+ new checks. github.com/silverhack/monkey… As always, feedback is welcome. #EntraID #Microsoft365 #CloudSecurity

Release Monkey365 v1.0.0 · silverhack/monkey365

This release is an important milestone for the project and includes a large update to Microsoft Entra ID coverage, a new dedicated Entra ID ruleset, improvements to the internal project structure a...

github.com
1
2
342
X-C3LL retweeted
pepsipu@pepsipuSep 21
i thought read() was a syscall wrapper, but it can dlopen a bytecode interpreter and execute your code "house of windy" turns this into leakless code execution with only OOB null byte writes pepsipu.com/blog/2026-09-dwa…
9
56
3
396
56,091
X-C3LL retweeted
h-c0n@h_c0nSep 15
🚨 ¿Tienes algo que contarle a la comunidad hacker? El CFP de #hc0n2027 YA ESTÁ ABIERTO. 🟢 Comparte tu investigación, técnica, herramienta, experiencia o investigación con la comunidad. 📅 5 y 6 de febrero de 2027 📍 Madrid 👉 Envía tu propuesta: forms.gle/D1kKESiBND3Xtiu6A
1
23
2
36
3,227
Another post from me, this time looking at a how I hacked an RFID CTF to get to the top of the leaderboard: techanarchy.net/stamping-my-…

Stamping my own passport: a master-key flaw in the DEF CON 34 RFID scavenger hunt

My recent trip to DEF CON was happily derailed when I stumbled onto an RFID-based scavenger hunt. The idea was simple: track down content creators, hackers and vendors dotted around the conference...

techanarchy.net
1
2
233
More ghetto hacking weekend
1
4
473
X-C3LL retweeted
Outflank@OutflankNLSep 8
NetNTLMv1 is dead. Long live NetNTLMv1. 🌈 Today we're releasing NTLMRain: recovering NT hashes from NetNTLMv1 responses. 🌐 Browser-based cracking ⌨️ Cross-platform CLI with GPU/CPU support 💾 Searchable tables that fit on a 4 TB disk Read the blog: outflank.nl/blog/2026/09/08/…
7
160
6
450
34,498
X-C3LL retweeted
Calif
@calif_ioSep 8
Today we published WeWorm, the first zero-click worm to spread through WeChat calls across iOS and Android. We call you on WeChat and, without you answering or doing anything, take over your account within seconds. Then we use your phone to call your friends. Story and demos: calif.io/research/weworm
10
99
18
396
97,436
X-C3LL retweeted
James@CyberSummonerSep 5
Had a blast working with my buddy @max__grim creating this badge! Thanks to @OutflankNL and @MDSecLabs for the conf. It was a blast again ❤️ Looking forward to the next one!
1
4
30
1,095
That time of the year where I can talk with @filip_dragovic in person to discard he is an AI trained to find LPEs in Windows
1
1
24
1,016
RedTreat #5 is a wrap, possibly the best one yet! Awesome talks, attendees and location ❤️ safe travels to all attendees from me, @MarcOverIP and @StanHacked
4
6
66
3,879
Load more