Finally finished my Active Directory Pentesting Methodology!
This can become your 𝗴𝗼-𝘁𝗼 𝗿𝗲𝘀𝗼𝘂𝗿𝗰𝗲 for AD pentesting:
• 50+ Techniques
• 300+ Commands
• 100 Screenshots
• Full kill chain (Foothold → PrivEsc → Lateral → Domain Compromise)
karrab7.com/articles/Active-…
Robert Raducanu retweeted
Tor Browser 16.0 is here! 🧅
🔧 Redesigned settings so it's easier to scan & manage
🪟 Optional generic window titles for more privacy
📱 A refreshed Android interface
🐧 Native Linux ARM64 support
Download the new stable release for desktop & Android: blog.torproject.org/new-rele…
Robert Raducanu retweeted
Zooming in on the Moon and Saturn using an Orion XT8 Dobsonian telescope. This is the closest you'd see them in 2026.
Readers added context they thought people might want to know
Stolen, uncredited video from an engagement bait account based in Africa.
The original channel is called SunshineNate on TikTok
Source:
tiktok.com/t/ZG9yBuQU8TmD…
The AD Forest As A Security Boundary And the Impact of Trusts on That Security Boundary – The Revisited Still (In)Secure Sequel, by @JsQForKnowledge
jorgequestforknowledge.wordp…
Robert Raducanu retweeted
While the latest issue of Raspberry Pi Official Magazine is a weather-monitoring projects special, we couldn’t resist sharing this build, as we are powerless in the face of anything space-themed.
Recreate the Apollo Guidance Computer: raspberrypi.com/news/recreat…
Robert Raducanu retweeted
Crazy cool blog I saw on linkedin about an SMB signing bypass technique
TLDR: SMB re-auth reuses the original signing key and never checks the new identity matches the old. So you sign a session as a low-priv account you control, re-auth it with a relayed privileged login, and get a privileged session still signed with your original low-priv key, which btw is accepted even where signing is required, with DCs included.
blackfield.ch/blog/defeating…
Robert Raducanu retweeted
If you're bored one day and just like "man I wish I had more Active Directory content to watch." Well, I got you...
Head on over to the Cyber Threat Perspective Youtube channel and search "Active Directory"
youtube.com/@CyberThreatPOV/…
Robert Raducanu retweeted
FastH3 Omni 开源了!
能在消费级显卡自部署的超级加速版MiniMax H3!
之前的 FastH3 V2 已经能在消费级显卡上跑了,
但那只是开胃菜——只支持文生视频。
这次可以上全能参考:
图片 + 视频 + 音频 都能塞进去,
一次生成带同步音频的视频,角色、动作、声音全可控。
huggingface.co/collections/F…
Robert Raducanu retweeted
🔥 The first Three Buddy Problem from Offensive AI Con is live! Audio only.
IBM X-Force’s Valentina Palmiotti (@chompie1337) walks us through the autonomous Windows kernel exploit pipeline she built on older Claude models, which landed within a hair of Mythos for about $180 a chain.
Plus, the Pwn2Own bug Claude called unexploitable, why her Pwn2Own bugs still sit unpatched, disappearing exploit techniques, the dread of being a defender, and how Phrack found its way back into print.
open.spotify.com/episode/2wE…
Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects thehackernews.com/2026/10/an…
Robert Raducanu retweeted
Index of all known BOFs chryzsh.github.io/awesome-bo… #redteam
Robert Raducanu retweeted
Fieldwatch is a free, open-source Android app that can help identify the devices around you, including what might be watching or following you: trackers, cameras, drones (it even decodes their Remote ID), body cams, and more. It can help identify almost 250 device types, and you can add your own. It listens to nearby Wi-Fi and Bluetooth signals and compares them to a built-in signature database. It only receives, never transmits. No account, no ads, no back end, and it works fully offline.
What's new:
Fieldwatch 1.1.22 adds GPS jamming and spoofing detection, using the receiver that's already in your phone. 🛰️
When your GPS suddenly changes, Fieldwatch lets you know right away:
* A popup with details of the interference
* A voice alert
* A red diamond on your path where it happened
* The details saved in your sit
* An optional note on your TAK marker
It needs a one-time calibration. Choose your sensitivity and you're set. For best performance, keep the phone in a dash holder, or on your chest rig when you're on foot.
Also in this build: weak pairing floods stay quiet while you're driving, and a real flood can leave a note on your TAK marker until it ends.
Easier setup: Live now shows a banner when Location is off, and Diagnostics opens with a "What to check" list that names the exact switch that's off.
The only official release is on my GitHub, link in bio. Each release lists the APK hash and signing certificate so you can check your build.
Coming next: a localization framework. I'm building a proper translation system for Fieldwatch, so translating the app will mean filling in a language file instead of forking the codebase and hand-editing text buried in the code. If you've offered to help translate, thank you, and please hold off for now. Once the framework lands, your work will be much easier and won't break with every update.
Robert Raducanu retweeted
New Episode Alert!
EP 180: Conti
Most hackers quietly fade away. #Conti did not. How did one of the most feared ransomware gangs collapse in the messiest, most public way possible?
darknetdiaries.com/episode/1…
If you are interested in the searchable documentary record of Soviet #spy operations & personalities in the United States, I highly recommend the Friday Archive.
43 collections/ 1,130 files/ 147,000 pages.
The link: fridayarchive.org/
Dumping/analyzing/modifying HDD drive firmware and debugging via JTAG (@Grimdoomer)
icode4.coffee/?p=1465
#infosec






























