Hexucated (@hexucated) header
Hexucated (@hexucated) profile picture

Hexucated

@hexucated

Hamad - DFIR, Reverse and more....

 0xDEADBEEF
medium.com/@Hexucated
Joined November 2017
  • Tweets651
  • Following331
  • Followers833
54Media
Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)Photo by Hexucated (@hexucated)
Hexucated retweeted
Anas Almizani (@x6vrn) profile picture
Anas Almizani@x6vrnNov 14
كتبت مقالة عن ثغرة CSPT وكيف ممكن تؤدي الى account takeover اذا ربطتها مع open redirect, اتمنى تستفيدون 😁 i wrote an article about CSPT and how it can lead to account takeover when you chained it with an open redirect x6vrn.github.io/cspt-to-ato.…

CSPT + Open Redirect = Account Takeover?

x6vrn.github.io
3
17
1
92
4,213
Hexucated retweeted
Anas Almizani (@x6vrn) profile picture
Anas Almizani@x6vrnOct 23
php2shell is overrated
1
11
859
Hexucated retweeted
herrcore (@herrcore) profile picture
herrcore
@herrcoreSep 25
If you are doing #FlareOn this year and want to rank yourself against other 𝗵𝘂𝗺𝗮𝗻𝘀 we made an unofficial leaderboard. Honour system only, but it's something.
Image from herrcore (@herrcore)
3
25
1
154
10,564
Hexucated retweeted
iq0 (@iiq0_) profile picture
iq0@iiq0_Sep 8
3 CVEs in Microsoft's September 2026 Security Update. CVE-2026-80076 CVE-2026-80078 CVE-2026-80082 Really proud of this one. A lot of reversing, debugging, and research went into these. POCs coming soon… or maybe not, haha.
17
9
79
5,038
Hexucated retweeted
iq0 (@iiq0_) profile picture
iq0@iiq0_Aug 19
apparently zero days are not that rare iq0.gitbook.io/iq0/b/escapin…
2
21
1
199
17,630
Image from vx-underground (@vxunderground)
45
506
23
4,298
101,672
Hexucated retweeted
Jake Knowlton (@j2k3k) profile picture
Jake Knowlton
@j2k3kJan 24
hey malware nerds FLARE is hiring google.com/about/careers/app…
5
31
1
198
22,803
NEW BLOG: The Great VM Escape 💕 We caught threat actors deploying a VMware ESXi exploit toolkit in the wild - potentially was a zero-day developed over a year before VMware's disclosure 👀 If anyone has thoughts on it let me know, but I needed almost a full case of beer to wrap my head around this one 🍺 Full technical breakdown 👇 huntress.com/blog/esxi-vm-es…
ESXi Exploitation in the Wild | Huntress

ESXi Exploitation in the Wild | Huntress

Huntress outlines a complex, multi-step attack designed to break out of guest VMs and target the ESXi hypervisor, using potential zero-day vulnerabilities and sneaky VSOCK communication.

huntress.com
24
195
9
804
196,217
Congratulations to @idunhill77 for clearing our Certified Red Team Professional exam! #ADLab #CRTP #AlteredSecurity cc @nikhil_mitt teapawt.org/AlteredSecurity/status… alteredsecurity.com/adlab
Image from Altered Security (@AlteredSecurity)
1
3
858
Hexucated retweeted
iq0 (@iiq0_) profile picture
iq0@iiq0_22 Sep 2025
cough cough …dusty here 👀. linkedin.com/posts/iiq0_im-h…
I’m happy to share that I’ve obtained a new certification: OffSec Exploit Developer (OSED) from...

I’m happy to share that I’ve obtained a new certification: OffSec Exploit Developer (OSED) from...

I’m happy to share that I’ve obtained a new certification: OffSec Exploit Developer (OSED) from OffSec! | 149 comments on LinkedIn

linkedin.com
19
5
70
7,057
Hexucated retweeted
Dirk-jan (@_dirkjan) profile picture
Dirk-jan
@_dirkjan17 Sep 2025
I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-global…

One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens

While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise...

dirkjanm.io
138
899
112
3,169
482,700
Easy SIEM Alert
Image from LetsDefend (@LetsDefendIO)
2
31
1
313
16,117
Hexucated retweeted
Muhannad (@MuhannadRu) profile picture
Muhannad@MuhannadRu9 Aug 2025
The Ark that hunts the Stars ✨ I’m sharing my latest tool, Stelark. Stelark is a Compromise Assessment tool for ADCS that detects vulnerabilities and hunts suspicious certificates issued by vulnerable templates. It also includes an intense mode for historical threat hunting that enumerates all issued certificates to uncover past ADCS abuse even after templates have been fixed. Stelark generates an interactive HTML report and exports dump files of all identified templates and certificates for further investigation. Check it out github.com/0xMuhannad/Stelar…
14
10
1
21
8,942
"⚠️ Educational use only. Do not use against unauthorized systems." github.com/soltanali0/CVE-20…
GitHub - soltanali0/CVE-2025-53770-Exploit: SharePoint WebPart Injection Exploit Tool

GitHub - soltanali0/CVE-2025-53770-Exploit: SharePoint WebPart Injection Exploit Tool

SharePoint WebPart Injection Exploit Tool. Contribute to soltanali0/CVE-2025-53770-Exploit development by creating an account on GitHub.

github.com
9
90
3
384
37,482
ثغرات خطيرة في Cisco ISE تتيح تنفيذ أوامر بامتيازات Root عن بُعد بدون مصادقة - CVE-2025-20281 - CVE-2025-20282 - CVE-2025-20337 - درجة الخطورة 10/10 - التحديث الفوري لإصدارات 3.3 و3.4 ضروري - لا مؤشرات استغلال حتى الآن
Image from سايبركاست (@cyberscastx)
5
12
132
18,885
السعودية تحقق المركز الأول عالمياً في مؤشر الأمن السيبراني لعام 2025 🇸🇦 إنجاز جديد يعكس فاعلية النموذج السعودي وجهود تعزيز الأمن السيبراني والسيادة التقنية. #الامن_السيبراني
Image from سايبركاست (@cyberscastx)
2
3
19
2,029
😂🤣
Image from Security Trybe (@SecurityTrybe)
30
118
8
1,426
51,107
🚨 APT41 is using malware, TOUGHPROGRESS, that leverages Google Calendar for command and control. Learn more about the campaign, how GTIG disrupted it using custom detection signatures, and how to defend against future attacks: bit.ly/4kCNqU1
Image from Mandiant (part of Google Cloud) (@Mandiant)
2
64
3
154
21,966
لما تجرب تشغل ADRecon في الجهة..
Image from ميمز سكيورتي 🛡️ (@m3m353c)
2
23
8,045
Almost got scammed today. A deepfake Zoom call, impersonating a @0xPolygon founder, was sent by someone I actually know in real life. If you’re in crypto, you need to read this.
98
140
43
1,523
273,713
Load more