Sam██ Pok█ar█l (@maskop9) header
Sam██ Pok█ar█l (@maskop9) profile picture

Sam██ Pok█ar█l

@maskop9

Offensive Security Consultant

 Nepal
samipp.com.np
Joined April 2017
  • Tweets2.3K
  • Following738
  • Followers541
70Media
Photo by Sam██ Pok█ar█l (@maskop9)Photo by Sam██ Pok█ar█l (@maskop9)Photo by Sam██ Pok█ar█l (@maskop9)Photo by Sam██ Pok█ar█l (@maskop9)Photo by Sam██ Pok█ar█l (@maskop9)Photo by Sam██ Pok█ar█l (@maskop9)Photo by Sam██ Pok█ar█l (@maskop9)Photo by Sam██ Pok█ar█l (@maskop9)Photo by Sam██ Pok█ar█l (@maskop9)Photo by Sam██ Pok█ar█l (@maskop9)
You are not bored. You're terrified of being alone with yourself in your own head.
2
1
15
Published a new blog on breaking Microsoft SSO and turning a valid JWT into a full account takeover. The interesting part? Microsoft was signing the token correctly. The application was simply trusting the wrong things. Blog: samipp.com.np/posts/breaking…

Breaking Microsoft SSO: How a Rogue Tenant Led to Account Takeover

A single missing check in a Go SSO handler let me log in as anyone on the platform, including the admin, without a password. Here’s how a source code review found it, and how you can reproduce it...

samipp.com.np
3
6
345
Sam██ Pok█ar█l retweeted
Smukx.E (@5mukx) profile picture
Smukx.E
@5mukxJun 4
Dear @github @Microsoft and @MsftSecIntel . Thank you for your service. I have lost all hopes from you guys. As a Windows security researcher whose intent was to help the beginners and contribute to open source security tooling, and i had so much respect towards @Microsoft , that thought was changed today and i am leaving. I have left the enough evidence in the ticket session. I would be better if a security researcher from GitHub might actually take a look at these. Thank you and bye to the community..... Here after you will not see posts about GitHub issues. Ticket ID: #4440743 #github #msft #defense #unlawful
23
50
6
414
40,167
Published a new blog on phantom DLL hijacking and proxy DLL development. Tool: github.com/maskop9/proxydllg… Read here: samipp.com.np/posts/phantom-… #CyberSecurity #RedTeam #WindowsInternals #DLLHijacking #OffensiveSecurity
GitHub - maskop9/proxydllgenerator: Automated proxy DLL generator for DLL hijacking

GitHub - maskop9/proxydllgenerator: Automated proxy DLL generator for DLL hijacking

Automated proxy DLL generator for DLL hijacking. Contribute to maskop9/proxydllgenerator development by creating an account on GitHub.

github.com
1
23
107
4,577
Published a new blog on Applocker & WDAC evasion techniques. This article covers practical application control bypass concepts, modern tradeoffs, and realistic execution paths in hardened environments. Read here: samipp.com.np/posts/modern-a…

Modern AppLocker & WDAC Evasion: Trusted Execution, LOLBins, and Real-World Tradecraft

What AppLocker and WDAC actually do under the hood, the techniques that still work in 2026, the ones that are now front-and-center in every EDR, and the corners most write-ups skip, Managed Installer...

samipp.com.np
1
137
Sam██ Pok█ar█l retweeted
impulsive (@weezerOSINT) profile picture
impulsive
@weezerOSINTApr 23
North Korean Lazarus Group has weaponized this exact class of Microsoft-signed kernel driver. It is sitting on MILLIONS of Windows PCs right now. It gives any local process full control from the deepest level of Windows. 5 lines of code. Zero validation. Your antivirus can’t stop what runs below the OS.
Image from impulsive (@weezerOSINT)
Image from impulsive (@weezerOSINT)
45
401
22
2,265
321,011
I just solved SSOS on Hack The Box! Totally learnt something new with this!!! labs.hackthebox.com/achievem… #HackTheBox #HTB #CyberSecurity #EthicalHacking #InfoSec #PenTesting
Owned SSOS from Hack The Box!

Owned SSOS from Hack The Box!

I have just owned challenge SSOS from Hack The Box

labs.hackthebox.com
6
234
I just solved Overwatch on Hack The Box! labs.hackthebox.com/achievem… #HackTheBox #HTB #CyberSecurity #EthicalHacking #InfoSec #PenTesting
Owned Overwatch from Hack The Box!

Owned Overwatch from Hack The Box!

I have just owned machine Overwatch from Hack The Box

labs.hackthebox.com
12
148
Sam██ Pok█ar█l retweeted
Martin Mielke (@xct_de) profile picture
Martin Mielke
@xct_deFeb 7
I was looking a bit onto why OPENROWSET is able to read privileged files (like the root flag on Signed @hackthebox_eu) when using Silver tickets on MSSQL. Turns out you can get SYSTEM access without potatoes by recovering the full token. vuln.dev/silver-ticket-mssql…

MSSQL Silver Tickets and Token Privileges

I ran into an interesting situation while reviewing Signed on HackTheBox: We get MSSQL access through a silver ticket, which leads to admin privileges on the MSSQL service - but the service account...

vuln.dev
1
35
117
8,022
Sam██ Pok█ar█l retweeted
X-C3LL (@TheXC3LL) profile picture
X-C3LL@TheXC3LLJan 31
A small rant: The State of Art in Red Team is whatever you want to believe x-c3ll.github.io/posts/Rant-…

The State of Art in Red Team is whatever you want to believe

a rant about Red Teaming.

x-c3ll.github.io
16
88
10
340
52,504
I just pwned Outdated on Hack The Box! labs.hackthebox.com/achievem… #HackTheBox #HTB #CyberSecurity #EthicalHacking #InfoSec #PenTesting
Owned Outdated from Hack The Box!

Owned Outdated from Hack The Box!

I have just owned machine Outdated from Hack The Box

labs.hackthebox.com
101
Sam██ Pok█ar█l retweeted
Dear Son. (@DearS_o_n) profile picture
Dear Son.
@DearS_o_n17 Aug 2025
RULE NUMBER 1: Envy no man. For whatever you see, he paid the price
29
63
3
537
34,074
Sam██ Pok█ar█l retweeted
flux (@0xfluxsec) profile picture
flux
@0xfluxsec29 Jul 2025
I have uploaded a proof of concept MVP for Hells Hollow (removing the bloat from my previous project it was part of). You can find it here: github.com/0xflux/Hells-Holl… #maldev #malware #cyber #infosec #rootkit #hellshollow #cybersecurity #osint #vulnerability #bypass
GitHub - 0xflux/Hells-Hollow: Hells Hollow Windows 11 Rootkit technique to Hook the SSDT via Alt...

GitHub - 0xflux/Hells-Hollow: Hells Hollow Windows 11 Rootkit technique to Hook the SSDT via Alt...

Hells Hollow Windows 11 Rootkit technique to Hook the SSDT via Alt Syscalls - 0xflux/Hells-Hollow

github.com
33
138
10,584
Sam██ Pok█ar█l retweeted
PentesterLab (@PentesterLab) profile picture
PentesterLab
@PentesterLab8 Aug 2025
14
1
81
8,110
I just pwned WhiteRabbit on Hack The Box! hackthebox.com/achievement/m… #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting
14
372
I just pwned ArtificialUniversity on Hack The Box! This literally gave me some sleepless nights! hackthebox.com/achievement/c… #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting
1
12
220
Sam██ Pok█ar█l retweeted
nafiez (@zeifan) profile picture
nafiez@zeifan28 Apr 2025
A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :) zeifan.my/Right-Click-LNK/
12
107
2
339
25,350
I just pwned Editorial in Hack The Box! hackthebox.com/achievement/m… #hackthebox #htb #cybersecurity
1
6
172
I just pwned Axlle in Hack The Box! Phish -> initial shell. Trick a program -> exec shell for priv esc. AD Perms -> escalate further. Windows Kits ****Runner -> admin. hackthebox.com/achievement/m… #hackthebox #htb #cybersecurity
6
279
I just pwned PermX in Hack The Box! Enum -> CVE -> Shell -> User -> Root!!! hackthebox.com/achievement/m… #hackthebox #htb #cybersecurity
11
322
I just pwned Blazorized in Hack The Box! Blazorized contains a web app running on Blazor web assembly and requires you to reverse the files to gain access to the system and perform DACL(AD) attacks to escalate privilege. hackthebox.com/achievement/m… #hackthebox #htb #cybersecurity
9
192
Load more