Tessera

Bad Sector Labs

@badsectorlabs.com

Cybersecurity news, techniques, exploits, and tools every week at http://blog.badsectorlabs.com 🐘@badsectorlabs@infosec.exchange

79 Posts513 Follower 53 Folgt

Bad Sector Labs @badsectorlabs.com · 2mo ago

Ludus Feature Friday! The new 2.2.0 release brings "sources" which allow you to easily add blueprints, templates, and roles to your Ludus host. We even converted GOAD to a fully Ludus-native blueprint! Check out the full change log and video here: ludus.cloud/changelog/2....

Ludus 2.2.0: Sources — Ludus

Add blueprints, templates, and roles/collections from trusted sources to your Ludus host — shipping with native GOAD, a no-Defender Windows 11 template, and every Bad Sector Labs template and role pre...

ludus.cloud

Raphael Mudge @raphaelmudge.bsky.social · 2mo ago

Relax and unwind in the Tradecraft Garden aff-wg.org/2026/06/01/r... Celebrating one year of Tradecraft Garden. 40 blog posts. ~30 POCs/projects. A lot of thank you's inside. The release itself: stack unwinding data generation, reference relaxation in the linker, and COFF mixing (+disco baby!)

Relax and unwind in the Tradecraft Garden

We’re at the 12th release of Crystal Palace and marking one year in the Tradecraft Garden. This release adds reference relaxation to make global references PIC-friendly. I’ve also added stack unwin…

aff-wg.org

Bad Sector Labs @badsectorlabs.com · 3mo ago

CopyFail (CVE-2026-31431) in Go. In case you want to get root from a static binary without Python as a dependency. github.com/badsectorlab...

Bad Sector Labs @badsectorlabs.com · 4mo ago

🏟️❤️🤖 Ludus MCP/Skills (@badsectorlabs), Grapefruit 📱 security suite (@CodeColorist), 2 Citrix NetScaler posts (@AlizTheHax0r + @_mccaulay), 🔒 BIOS bypass (@craigsblackie), and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2026-03-30

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · 4mo ago

The FCC bans all new foreign routers, Delve was a compliance as a service scam, ForceHound, VMKatz, and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2026-03-24

The FCC bans all new foreign routers, Delve was a compliance as a service scam, ForceHound, VMKatz, and more!

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · 5mo ago

🏟️ Ludus launched 2 years ago and the community embraced and extended it with write-ups, roles, configs, and environments. We're excited to see what you build with Ludus 2! (1/4)

Bad Sector Labs @badsectorlabs.com · 5mo ago

Ludus 2 (@badsectorlabs), new GOAD lab (@M4yFly), 🍪 hack (@XeEaton), DPAPI + Nemesis (@harmj0y + @tifkin_), iOS exploit kit found (@Mandiant), and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2026-03-09

Ludus 2 (@badsectorlabs), new GOAD lab (@M4yFly), 🍪 hack (@XeEaton), DPAPI + Nemesis (@harmj0y + @tifkin_), iOS exploit kit found (@Mandiant), and more!

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · 5mo ago

We try hard to do this with Ludus. We've gotten huge value from the Ludus Discord and watching what people struggle with or have to fight to get to work and that makes us try to solve that issue in Ludus itself. It's a balance of not adding every little feature though, so there is art to it.

Raphael Mudge@raphaelmudge.bsky.social · 5mo ago

The above doesn't just apply to C2s or offensive security. Platform owners of any ilk, who see a problem that their community and partners are collectively trying to solve, would do well to look for that expended energy, see the barriers, and ask what they can do to make that energy more effective

Raphael Mudge @raphaelmudge.bsky.social · 5mo ago

A Scalpel, A Hammer, and a Foot Gun aff-wg.org/2026/03/03/a...

A scalpel, a hammer, and a foot gun

Last month, I released a Yara signature generator for Crystal Palace. AKA, an invariant content observation tool. I then used the feature to document the physics of various content-signature parame…

aff-wg.org

Bad Sector Labs @badsectorlabs.com · 5mo ago

SolarWinds RCE (@chudyPB), Windows 11 Recall-based LPE (@filip_dragovic), Robot RCEs (@olivier_boschko + @ruikai), EDR as a RAT (@p0w1_), and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2026-03-02

SolarWinds RCE (@chudyPB), Windows 11 Recall-based LPE (@filip_dragovic), Robot RCEs (@olivier_boschko + @ruikai), EDR as a RAT (@p0w1_), and more!

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · 5mo ago

Firefox RCE (@kqx_io), Havoc Professional (@C5pider + @0xC4RN4GE + @avx128), afd.sys UAF (@Dark_Puzzle + @Bad_Jubies), macOS JIT abuse (@kyleavery), AEMonitor (@__pberba__), and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2026-02-23

Firefox RCE (@kqx_io), Havoc Professional (@C5pider + @0xC4RN4GE + @avx128), afd.sys UAF (@Dark_Puzzle + @Bad_Jubies), macOS JIT abuse (@kyleavery), AEMonitor (@__pberba__), and more!

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · 6mo ago

SharePoint enumeration (@matthiasdeeg), LNK "0days" (@Wietze), AMD driver LPE (@Bad_Jubies), POSTing to superadmin (@XeEaton), and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2026-02-16

SharePoint enumeration (@matthiasdeeg), LNK

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · 6mo ago

"Negative-day" discovery (@spaceraccoonsec), Exploit gen with LLMs (@seanhn), Harmony LPE (@johnnyspandex + @buffaloverflow), NetSupport Manager RCE (@0xor_solo), Azure blob C2 (@KingOfTheNOPs + @senderend) and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2026-02-09

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · 7mo ago

SmarterMail Pre-auth RCE (@chudyPB + @SinSinology), Claude Code code execution (@ryotkak), VSS create (@RicardoJoseRF ), EDRStartupHinder (@TwoSevenOneT), and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2026-01-12

SmarterMail Pre-auth RCE (@chudyPB + @SinSinology), Claude Code code execution (@ryotkak), VSS create (@RicardoJoseRF ), EDRStartupHinder (@TwoSevenOneT), and more!

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · 7mo ago

Start your 2026 off with 3 weeks of news, techniques, write-ups, and exploits! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2026-01-05

Windows ARM64 internals (@33y0re), VEH^2 PoC (@0xfluxsec), macOS 26 TCC bypass (@patch1t), BOFs with Crystal Palace (@_RastaMouse), Flare-On 2025 write-ups (@washi_dev), and more!

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · 8mo ago

We published 44 editions of Last Week in Security in 2025, the best free technical cybersecurity newsletter. We sifted through the noise (without AI!) to deliver: 📰 179 News Stories 🧠 407 Techniques & Write-ups 🛠️ 438 Tools & Exploits 👀 51 New X Accounts & 37 New Blogs followed

Bad Sector Labs @badsectorlabs.com · 8mo ago

SCOM lab (@synzack21), WatchGuard RCE (@_mccaulay), Clickjacking with SVGs (@rebane2001), macOS LPE (@theevilbit), a new private phone company (@nickcalyx + @phreeli), Proxmox tradecraft (@ZephrFish) and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2025-12-08

blog.badsectorlabs.com

SpecterOps @specterops.io · 8mo ago

SCOM is one of the most deployed, but least researched, System Center products. Zach Stein breaks down how it works + how to build a lab to test new tradecraft. ghst.ly/3Ymzfcw

Git SCOMmit - Putting the Ops in OpsMgr - SpecterOps

Yet another System Center Ludus configuration for your collection. https://github.com/Synzack/ludus_scom

ghst.ly

Bad Sector Labs @badsectorlabs.com · 9mo ago

Apple's sourcemaps takedown (@moeruri), Call stack sig bypass (@saerxcit), AD Site pwnage (@croco_byte), sneaky remap (@MagisterQuis), Deceptiq launch (@deceptiq_), and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2025-11-10

Apple's sourcemaps takedown (@moeruri), Call stack sig bypass (@saerxcit), AD Site pwnage (@croco_byte), sneaky remap (@MagisterQuis), Deceptiq launch (@deceptiq_), and more!

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · 10mo ago

WriteAccountRestrictions fun (@unsigned_sh0rt), RCE in Dell UnityVSA (@SinSinology), Unity Runtime exploit (@ryotkak), Lenovo DCC LPE (@0x4d5aC), remote control over generators (@XeEaton), and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2025-10-06

WriteAccountRestrictions fun (@unsigned_sh0rt), RCE in Dell UnityVSA (@SinSinology), Unity Runtime exploit (@ryotkak), Lenovo DCC LPE (@0x4d5aC), remote control over generators (@XeEaton), and more!

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · 11mo ago

FreeBPX RCE (@chudyPB), badpie (@dtmsecurity), macOS auditd malloc woes (@jfmeee), Spotlight TCC leak (@patrickwardle), WSUS relaying (@Coontzy1), pyLDAPGui (@ZephrFish), and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2025-09-15

FreeBPX RCE (@chudyPB), badpie (@dtmsecurity), macOS auditd malloc woes (@jfmeee), Spotlight TCC leak (@patrickwardle), WSUS relaying (@Coontzy1), pyLDAPGui (@ZephrFish), and more!

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · 11mo ago

Sure, a bunch of NPM packages got backdoor'd (again), but don't miss the great research and tools released last week! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2025-09-08

Metamorphic compilation (@tijme), Windows Secure Calls (@33y0re), macOS race condition exploit (@patch1t), NTLM relaying (@elad_shamir), iOS zero-click RE (@quarkslab), and more!

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · 11mo ago

Lots of tooling around the new Bloodhound "OpenGraph" standard this week including vCenterHound from @m0rd4vid and the bhopengraph library from @podalirius_. blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2025-08-25

WebClient deep dive (@0xthirteen), 2x RCE chains in Commvault (@chudyPB), how to rob a hotel (@dmcxblue), MSI patch/protocol handler RCE (@johnnyspandex), self-relaying (@_logangoins), and more!

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · 12mo ago

DEF CON releases, PDQ SmartDeploy creds (@unsigned_sh0rt), FortiSIEM root command injection (@SinSinology), a cat themed loader (@vxunderground), fine-tune LLMs for offsec (@kyleavery_), juicing NTDS.DIT (@MGrafnetter), and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2025-08-18

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · 12mo ago

Come see a preview of the new Web UI for 🏟️Ludus at the Embedded Systems Village. Our mini-workshop walks you through deploying a range and then hacking an emulated IP camera.

Bad Sector Labs @badsectorlabs.com · 12mo ago

In Vegas for hacker summer camp and trying to get food without breaking the bank? I vibed a simple map site: defconfood.badsectorlabs.com Come see Ludus at the embedded Systems Village - hack an IP camera, see the new UI, and get a sticker!

DEF CON Las Vegas Food Map

defconfood.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · last yr.

Last LWIS before DEF CON. Come see us in the Embedded Systems Village where we have a mini-workshop hosting an emulated camera on Ludus for you to hack! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2025-08-04

AEM RCE (@infosec_au), Intune cert abuse (@_dirkjan), Entra tradecraft (@hotnops), LLMs for R&D (@kyleavery_), File System API research (@Print3M_), and more!

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · last yr.

VMware Tools LPE (@justbronzebee), Adaptix C2 0.7 (@hacker_ralf), Ludus MCP (@__Mastadon), SOAP(y) (@_logangoins), and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2025-07-28

VMware Tools LPE (@justbronzebee), Adaptix C2 0.7 (@hacker_ralf), Ludus MCP (@__Mastadon), SOAP(y) (@_logangoins), and more!

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · last yr.

PIC agents (@_RastaMouse), ToolShell, Async BOFs (@Cneelis), SCCM MP relays (@unsigned_sh0rt), RAITrigger (@ShitSecure), and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2025-07-21

PIC agents (@_RastaMouse), ToolShell, Async BOFs (@Cneelis), SCCM MP relays (@unsigned_sh0rt), RAITrigger (@ShitSecure), and more!

blog.badsectorlabs.com

Bad Sector Labs @badsectorlabs.com · last yr.

LudusHound (@bagelByt3s), SpeechRuntimeMove (@ShitSecure), Havoc Pro (@C5pider), FortiWeb RCE (@SinSinology), SailPoint IQService RCE (@NetSPI), Altiris RCE (@lefterispan), WAF bypass (@nyxgeek), and more! blog.badsectorlabs.com/last-week-in...

Last Week in Security (LWiS) - 2025-07-14

blog.badsectorlabs.com