Pinned Tweet
Slides of our talk “Turning your BMC into a revolving door” are online airbus-seclab.github.io/ilo/…
#Zeronights cc: Alex.G @0xf4b @ZeroNights @AirbusSecLab @Synacktiv
Sn0rkY retweeted
I'm thrilled to make Silverseal public!. It is among the first publicly available UEFI bootkit research frameworks for Linux-based systems to demonstrate an end-to-end path from GRUB to a running Rust kernel-module rootkit: github.com/Idov31/Silverseal 1/3
Sn0rkY retweeted
🚨 THE #OB12026 @offbyoneconf AGENDA HAS DROPPED!
The talks are locked in. The research is coming. The countdown is on!
📅 14–15 September 2026
📍 Grand Copthorne Waterfront, Singapore
🔗 Check out the full agenda: offbyone.sg/programme
🎟️ Tickets: merch.starlabs.sg
Sn0rkY retweeted
Finally got around to implementing e2e shellcode unit tests; I *think* Sliver currently has the broadest shellcode/encoder/compression compatibility of any framework, from Linux shellcode + shikata_ga_nai to MacOS/arm64 + XOR encoders!
github.com/BishopFox/sliver/…
Sn0rkY retweeted
Are you 40? If you are, it's time to finnally buy a WinRAR license! Thanks to @buraktuyan for creating this awesome video that no one asked for but that everyone needs! 🤣😎
Here's my 30-second spec ad for WinRAR (that nobody asked for).
Okay, perhaps Rourke Heath did.
He shared this fun brief with his GenHQ community last week, and I took it on.
In this experimental project, I wanted to turn one of the internet's longest-running jokes into a subtle family drama about WinRAR's 40-day trial that somehow lasted almost three decades.
Here's how I made it:
After writing the script (the old school way), I worked with ChatGPT 5.6 Sol Max to turn it into a 14,000-character prompt for Seedance 2.5 (yes, Dreamina allows prompts that long).
I used GPT Image 2 to create the reference image for WinRAR's trial screen, while Seed Audio 1.0 generated the audio reference for the full voiceover and dialogue. After 20+ Seedance 2.5 tests at 480p, with the prompt evolving throughout, I generated the final versions at 720p.
I then lightly edited the video and upscaled it to 1080p with Topaz Labs Astra Starlight Precision 2.6. However, the screenshot text didn't survive the upscale (I should have used Astra's scene detection feature and selected a different model for that particular shot), so I recreated it using Seedance 2.0 at 1080p. (I also tried Hailuo H3 and Kling 3.0, but in this particular case, Seedance 2.0 gave me the best overall result in one go.)
For the sound, I selected a solo-instrument soundtrack from Epidemic Sound and added extra sound effects to improve the overall sound design.
And here's the result.
I'm curious to hear what you think.
Did this bring back memories, or is this genuinely your first time hearing about WinRAR? I’d love to know.
Sn0rkY retweeted
Published a writeup on CVE-2025-24169, a macOS vulnerability which allowed a malicious app to enumerate a user's saved account data in the Passwords app - contravening TCC protections.
Example PoC + full details here: joshparnham.com/2026/07/acce…
Sn0rkY retweeted
How a SIM can (and will) hack you: Security analysis of SIMs, attacks, and tools for research. 👨🏻💻🎫📱🩻👾
More details on:
LinkedIn: linkedin.com/posts/dlaskov_c…
Substack: it4sec.substack.com/p/how-a-…
“Quand tu fais la croix rouge de la recherche pour Microsoft “ tu m’as régalé avec cette citation @lgandx 😂 réf: open.spotify.com/episode/6fr…
Sn0rkY retweeted
Do you watch Netflix in your free time?
Try hackflix for security conference talks
h4ckfl1x.com/
#cybersecurity #bugbounty
Sn0rkY retweeted
🚀 WE ARE OFFICIALLY BACK for our third edition!
📅 Dates: 14 to 15 September 2026
📍 Venue: Grand Copthorne Waterfront Hotel Singapore
👉🏻 Submit your CFP here: cfp.offbyone.sg/2026/cfp
More to come!
More details: linkedin.com/posts/off-by-on…
#OB12026 #OffensiveSecurity #Singapore
Sn0rkY retweeted
🔐 Releasing LUKSbox: encrypted vaults that survive the next decade.
Drop sensitive files on any cloud or USB. The provider gets one random-looking blob they can't read, even under subpoena.
✅ FIDO2 (YubiKey, Titan, Nitrokey, Windows Hello)
✅ TPM 2.0 keyslots
✅ Post-quantum hybrid (ML-KEM-768/1024 - FIPS 203)
✅ Detached header → zero metadata on the container
✅ Linux / macOS / Windows
✅ Rust, Apache-2.0, 30M+ fuzz iterations
v0.1.0 is out!
👉 github.com/PentHertz/LUKSbox
#infosec #encryption #postquantum #FIDO2 #rust #opensource #cryptography #penthertz
Sn0rkY retweeted
I infected my iPhone with the ‘Coruna’ spyware. Here’s what I found.
youtu.be/XQvZ2mLnZVI
Sn0rkY retweeted
I finally let Claude do my pentest this week. Full 5-day engagement, zero human input. Here's what the client got: 😏
clawd.it/posts/10-replaced-b…
#bugbounty #pentesting #AI #cybersecurity #infosec #claudeai
Sn0rkY retweeted
Lands of Packets
TTL exceeded.
I would like to collect texts from the scene about FX in his memory. A collection of obituaries that will then be posted on phenoelit.de.
If anyone would like to contribute, please contact me.
Mail: [email protected]
Signal: jrn.07
Sn0rkY retweeted
An interesting wrap-up presentation from the security researcher who found the COROS watch security vulnerabilities last year. Worth a watch if you're into geekery: youtube.com/watch?v=WmY9XBJE…
Sn0rkY retweeted
Is ESLogger or Mac Monitor your friend for dynamic malware analysis on macOS? Then i've got something that might come to use!
An browser based ES/Mac Monitor log analyzer with a lot of neat features like story timelines, Sigma rule matching, an in-depth process tree analyzer and much more and the neat thing is, nothing is uploaded to any backend!
I'm looking for feedback!
Take a look at es.decompiler.dev
#macos #malware #reverseengineering #re #ThreatHunting #dfir






























