Hexucated (@hexucated) header
Hexucated (@hexucated) profile picture

Hexucated

@hexucated

Hamad - DFIR, Reverse and more....

 0xDEADBEEF
medium.com/@Hexucated
Joined November 2017
  • Tweets651
  • Following331
  • Followers833
54Media
Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)
It's been a while .... 3 new CVEs in @velocidex by @rapid7 CVE-2026-18860 CVE-2026-18640 CVE-2026-18348
Image from Hexucated (@hexucated)
1
3
762
Hexucated retweeted
Anas Almizani (@x6vrn) profile picture
Anas Almizani@x6vrnNov 14
كتبت مقالة عن ثغرة CSPT وكيف ممكن تؤدي الى account takeover اذا ربطتها مع open redirect, اتمنى تستفيدون 😁 i wrote an article about CSPT and how it can lead to account takeover when you chained it with an open redirect x6vrn.github.io/cspt-to-ato.…

CSPT + Open Redirect = Account Takeover?

x6vrn.github.io
3
17
1
92
4,190
Hexucated retweeted
Anas Almizani (@x6vrn) profile picture
Anas Almizani@x6vrnOct 23
php2shell is overrated
1
11
858
Hexucated retweeted
herrcore (@herrcore) profile picture
herrcore
@herrcoreSep 25
If you are doing #FlareOn this year and want to rank yourself against other 𝗵𝘂𝗺𝗮𝗻𝘀 we made an unofficial leaderboard. Honour system only, but it's something.
Image from herrcore (@herrcore)
3
25
1
154
10,564
Hexucated retweeted
iq0 (@iiq0_) profile picture
iq0@iiq0_Sep 8
3 CVEs in Microsoft's September 2026 Security Update. CVE-2026-80076 CVE-2026-80078 CVE-2026-80082 Really proud of this one. A lot of reversing, debugging, and research went into these. POCs coming soon… or maybe not, haha.
17
9
80
5,038
Hexucated retweeted
iq0 (@iiq0_) profile picture
iq0@iiq0_Aug 19
apparently zero days are not that rare iq0.gitbook.io/iq0/b/escapin…
2
21
1
199
17,630
قررت اخرب الويكند واسوي EDR …. 🫠
1
4
476
more replies
2/ بديت اول وظيفة للدرايفر انها تسوي لوق لأي process creation عن طريق PsSetCreateProcessNotifyRoutine واللي بدوره يكتشف اي process تنشئ او تتقفل ، الخطوة الجايه نسوي logic في اتخاذ قرار اذا ما الprocess مصرح لها انها تشتغل او لا
1
1
206
3/ سويت اول يوز كيس فالEDR اذا كان فيه process اشتغلت عن طريق parent process مشبوهه يسوي لها بلوك ، طبعا الEDR محدود حاليا في نطاق الkernal callbacks بتوقف حاليا في هذا النطاق واضيف اكثر على النطاقات الثانية فالمستقبل زي ETW and API hooking سنوافيكم بالتحديثات مستقبلا.
1
118
Image from vx-underground (@vxunderground)
45
506
23
4,298
101,672
😂😂😂😂
LetsDefend (@LetsDefendIO) profile pictureLetsDefend
@LetsDefendIOMar 25
Cybersecurity Folks Hairloss
Image from LetsDefend (@LetsDefendIO)
2
524
Hexucated retweeted
Jake Knowlton (@j2k3k) profile picture
Jake Knowlton
@j2k3kJan 24
hey malware nerds FLARE is hiring google.com/about/careers/app…
5
31
1
198
22,803
NEW BLOG: The Great VM Escape 💕 We caught threat actors deploying a VMware ESXi exploit toolkit in the wild - potentially was a zero-day developed over a year before VMware's disclosure 👀 If anyone has thoughts on it let me know, but I needed almost a full case of beer to wrap my head around this one 🍺 Full technical breakdown 👇 huntress.com/blog/esxi-vm-es…
ESXi Exploitation in the Wild | Huntress

ESXi Exploitation in the Wild | Huntress

Huntress outlines a complex, multi-step attack designed to break out of guest VMs and target the ESXi hypervisor, using potential zero-day vulnerabilities and sneaky VSOCK communication.

huntress.com
24
195
9
804
196,217
#bhmea25
Image from Hexucated (@hexucated)
1
1
78
3,175
Congratulations to @idunhill77 for clearing our Certified Red Team Professional exam! #ADLab #CRTP #AlteredSecurity cc @nikhil_mitt teapawt.org/AlteredSecurity/status… alteredsecurity.com/adlab
Image from Altered Security (@AlteredSecurity)
1
3
858
Hexucated retweeted
iq0 (@iiq0_) profile picture
iq0@iiq0_22 Sep 2025
cough cough …dusty here 👀. linkedin.com/posts/iiq0_im-h…
I’m happy to share that I’ve obtained a new certification: OffSec Exploit Developer (OSED) from...

I’m happy to share that I’ve obtained a new certification: OffSec Exploit Developer (OSED) from...

I’m happy to share that I’ve obtained a new certification: OffSec Exploit Developer (OSED) from OffSec! | 149 comments on LinkedIn

linkedin.com
19
5
70
7,057
Hexucated retweeted
Dirk-jan (@_dirkjan) profile picture
Dirk-jan
@_dirkjan17 Sep 2025
I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-global…

One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens

While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise...

dirkjanm.io
138
899
112
3,168
482,699
Easy SIEM Alert
Image from LetsDefend (@LetsDefendIO)
2
31
1
313
16,117
Thanks @tryhackme for the opportunity. My feedback is on my LinkedIn page 👇 shorturl.at/c0McS
Image from Hexucated (@hexucated)
28
1,625
Load more