Pinned Tweet
☢️ 2026 started with a bang! The project I've been building for the last three years - an Initial Access framework letting us weaponize 100+ file formats - is joining Outflank's OST & I'm joining too!😍
🔥 Same mission, now with joint R&D to ship even more high-quality RT tools!
📢 Big News! @mariuszbit is joining Outflank! He ticks all the boxes:
Experienced #offsec researcher ✓
Respected name in red teaming ✓
Built RMF tooling for initial access ✓
His work is coming to OST✓
The red hoodie fits perfectly ✓
Welcome Mariusz!
outflank.nl/blog/2026/01/21/…
mgeeky | Mariusz Banach retweeted
Your EDR Has Boundary Issues.
@harmj0y and @tifkin_ of @SpecterOps explore how adversarial machine learning can evade EDR detection- and how LLMs are accelerating the reverse engineering behind it.
Watch their Offensive AI Con talk below. 👇
youtube.com/watch?v=GNDMDI_p…
#OAIC #OffensiveAI #Cybersecurity #EDR
mgeeky | Mariusz Banach retweeted
We just published two blog posts about PageBreak, Google's AI web security scanner (that I've helped develop for the better part of the year). We share our approach and a couple of findings, enjoy!
- blog.google/security/agentic…
- bughunters.google.com/blog/p…
mgeeky | Mariusz Banach retweeted
A quick article showing how the Jev OPSEC ranker works, and looking at how Jev can be used for identifying potentially sensitive file paths and content at speed.
mgeeky | Mariusz Banach retweeted
26 LLM routers are secretly injecting malicious tool calls and stealing creds. One drained our client $500k wallet.
We also managed to poison routers to forward traffic to us. Within several hours, we can directly take over ~400 hosts.
Check our paper: arxiv.org/abs/2604.08407
mgeeky | Mariusz Banach retweeted
NetNTLMv1 is dead. Long live NetNTLMv1. 🌈
Today we're releasing NTLMRain: recovering NT hashes from NetNTLMv1 responses.
🌐 Browser-based cracking
⌨️ Cross-platform CLI with GPU/CPU support
💾 Searchable tables that fit on a 4 TB disk
Read the blog: outflank.nl/blog/2026/09/08/…
mgeeky | Mariusz Banach retweeted
Want to run an entire Tailscale daemon from memory inside a C2 implant with zero disk artifacts, no kernel drivers, traffic indistinguishable from HTTPS to a CDN, and relay connections from the victim network back through the tailnet.
Now you can. Enjoy!
netspi.com/blog/technical-bl…
mgeeky | Mariusz Banach retweeted
Don’t miss red team operator Cedric Van Bockhaven’s presentation at Fortra’s Black Hat booth #2939 Wednesday morning.
We will have in-booth tradecraft presentations running on both Wednesday and Thursday of Black Hat USA 2026. See our full schedule here:cobaltstrike.com/the-black-h…
mgeeky | Mariusz Banach retweeted
New research paper By Daniel Wilkinson and Chris Anley just dropped!
A Preliminary Investigation Into Interpretable Adversarial Attacks Through Feature Interference in Superposition👇
nccgroup.com/media/kahclmxj/…
mgeeky | Mariusz Banach retweeted
The first autonomous agent cyberattack is an unprecedented event that deserves unprecedented transparency. Today we’re sharing everything we can: a full technical timeline, an interactive replay, and how we used an open model to defend ourselves, so defenders everywhere can learn from it and prepare for what’s next.
huggingface.co/blog/agent-in…
mgeeky | Mariusz Banach retweeted
What happens when a new Mythic agent can be generated, tested, and deployed in ~2 hours?
@_xpn_ explores "disposable tooling" and the implications for offensive operations and defenders alike.
Check out the latest from GhostWorks ⬇️ ghst.ly/4oMyrdC
I’m sharing my slides from @x33fcon 2026.
Inside ~15 examples of abusing traitorware to execute your payload via trusted & signed binaries (e.g. VLC Player, SublimeText) and how to find more of them.
Recording will be published soon.
github.com/Print3M/MyTalks/b…
Literally just had a use case to let Fable run loose around my PoC... aaaand they took it away O_O
The US government, citing national security authorities, has issued an export control directive to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether inside or outside the United States, including foreign national Anthropic employees.
The net effect of this order is that we must abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance.
Access to all other Claude models is not affected.
We apologize for this disruption to our customers. We believe this is a misunderstanding and are working to restore access as soon as possible.
Read our full statement: anthropic.com/news/fable-myt…
We're having a blast at the Hacker Pirate Ship @ #x33fxon Brilliant evening, awesome con!
@gasmelt @thenopcode @mrgretzky @django88_ @jakub_stanior @francisacer1 @BigM1ke_oNe @InfoSec_Crow_ @Sno0wOfficial
35+ non-Office file formats fully weaponized & obfuscated by the OST Builder - coming soon! So many ways to run your shellcodes. This release becomes my hello world to the OST family 👋
New release: kicking off Red Macros Factory integration into OST by @OutflankNL researcher @mariuszbit! ⚙️
Builder tool now ships with better script payload gen, obfuscation, guardrails, LNK tradecraft, and new conversion paths. More formats and payload shenanigans coming soon!
Random 🇵🇱 trivia: In the last 9 days, Poland came together for a world-record-breaking charity stream that raised €60M+ for childhood cancer treatment.
A 23yo influencer’s spontaneous idea spiraled into a national movement of families, celebs, and donations.
Proud to be 🇵🇱!
For those looking to get a taste of polish folk and language :D
youtube.com/watch?v=nTq1AlZo…
Welcome @_RastaMouse to the gang! 😎 Exciting times ahead! 🔥🍻
Never been happier to have a mouse in the house. 🐭
@_RastaMouse of @_ZeroPointSec has officially joined @Fortra! The mind behind Red Team Ops, one of the most respected training courses in offensive security, is now building what's next with us.
fortra.com/resources/press-r…
I’ve been grinding hard on AI for the better part of the last 8+ months - learning, building, adapting, and pulling late nights just like so many others right now.
Cutting through the FUD and hype, there is real potential here. Industry-breaking potential. The era we’ve been waiting for - to finally supercharge and develop the tools and platforms we’ve wanted to build for years - is here, and agent assistance is accelerating everything.
With coding agents, I’ve built solid tools and had research breakthroughs that would have taken weeks or months before. These should feel like real wins worth celebrating. But honestly? I don’t feel victorious. In many ways, it just feels necessary to keep pace. As Dave said: adapt or be left behind - and for good reason.
I’m not ready to be left behind. But damn, I’m tired.
I’m tired of constantly reinventing myself. Tired of constantly re-tooling. Tired of the endless cycle of keeping up, the late nights, and the personal sacrifices that come with it. I’ve even lost the desire to share knowledge and research with the community the way I used to. From the conversations I’ve had, I’m far from alone - many others in this space feel the same but don’t necessarily vocalize it outside of smaller circles.
Is it because I see AI purely as a threat? Not really. The offensive side of our industry has been heading this way for a while, and I’ve been moving with it. The truth is, the excitement Dave describes is real - but for me right now, it’s mixed with exhaustion. I’m grateful for the breakthroughs, yet I catch myself wondering how long I can sustain this level of constant reinvention without something giving. The early-2000s energy is back, sure… but so is the burnout that often came with it.
Being a bit older now, with young kids at home, the pace hits differently. I don’t have the same endless energy I once did, and the late nights and constant context-switching carry a heavier weight. Finding balance is tough, but it feels more important than ever. Hopefully we can all figure out how to ride this wave more sustainably - without burning out in the process.
What I see in cybersecurity:
AI has re-invigorated an industry that was largely stale for the past ten years.
Complete new green field. Changes everything. New innovation happening everyday.
Need to adapt or be left behind.
This reminds me of the early 2000s, it’s exciting, addicting, and it’s going to be fun as hell.
mgeeky | Mariusz Banach retweeted
In collaboration with Lookout and Google (thank you 🙏) we have been working on tearing down and building detections for DarkSword - iOS exploit chain for iOS 18.4 - 18.7. Super excited for this research 🎉. Please update your iPhones.
iverify.io/blog/darksword-io…





























