A single-pass Active Directory enumerator for an anonymous (null) session, using the \samr and \lsarpc named pipes. No credentials required. github.com/crypt0p3g/ad... #infosec #cybersecurity #redteam #pentest #opensource

GitHub - crypt0p3g/adnullenum: One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.

One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output. - crypt0p3g/adnullenum

github.com

InjectSetConsole performs process code injection by leveraging a Windows named pipe. github.com/TwoSevenOneT... #infosec #cybersecurity #redteam #pentest

GitHub - TwoSevenOneT/InjectSetConsole: Proof of Concept for Process Code Injection Without Using WriteProcessMemory

Proof of Concept for Process Code Injection Without Using WriteProcessMemory - TwoSevenOneT/InjectSetConsole

github.com

curves.xargs.org Curvy !

The Animated Elliptic Curve

Visualize elliptic curve cryptography with animated examples

curves.xargs.org

Any Amiga fan out there ? I’m looking for an older and rare version of a 1989 game - or the earliest Whdload version of it, that I can’t find (only mentions). (For a large full recomp project)

Recreating the original hardware protection media, conversion and restoration of all assets, uncovering undocumented quirks, bugs and cheat codes… And creating the “best version ever”, of course ;)

Je découvre l'entreprise française RIBER, qui est un leader mondial ; c'est, en quelque sorte, notre ASML. ROSIE a été faite en partenariat avec le NQCP (ovo Nordisk Foundation Quantum Computing Programme de l'université de Copenhague). L'entreprise a été fondée en 1964.

97 % des victimes de ransomware avaient le MFA : où sont les angles morts ?

97 % des victimes de ransomware avaient le MFA : où sont les angles morts ?

97 % des victimes de ransomware par vol d'identifiants avaient activé le MFA. Voici comment repérer les accès restés en mot de passe seul et les combler.

it-connect.fr

🤘🌐 “Everybody! Everybody!” Homestar Runner has barely changed! Launched in 2000, the beloved web cartoon site has kept its decidedly retro look, so today’s homepage could easily be mistaken for a page from the Flash era. Explore web history with the Wayback Machine ➡️ web.archive.org

[NixOS] Every package is already installed!

Always a pleasure to see @juhnny5.bsky.social on stage :) Explaining today at #PlatformCom how the Restos du Coeur built their own AI tooling from refurbished hardware & open source ❤️ vLLM & Envoy AI Gateway helping a long way on top of other Cloud du Coeur nase blocks, up to LibreChat and more!

Virtio-nvgpu: Near-native Nvidia GPU access inside a KVM guest github.com/nestrilabs/v... from Hacker News via #gcufeed@libera.chat / gcu.info/gruik/

GitHub - nestrilabs/virtio-nvgpu: [Experimental] A virtio device for near-native NVIDIA GPU access in KVM virtual machines.

[Experimental] A virtio device for near-native NVIDIA GPU access in KVM virtual machines. - nestrilabs/virtio-nvgpu

github.com

Qualcomm announce Snapdragon X2 Series will support Linux #Linux #Snapdragon #Qualcomm #Arm

Qualcomm announce Snapdragon X2 Series will support Linux

Arm support is expanding on Linux, with Qualcomm announcing Linux support for the Snapdragon X2 Series.

gamingonlinux.com

🎓 Félicitations aux stagiaires du CFSSI qui soutenaient mardi dernier leurs sujets de stage devant un jury d'experts pour l'obtention du titre d'Expert en Sécurité des Systèmes d'Information #ESSI. + d'infos sur : 🔗 cyber.gouv.fr/formation-es...

Think like a programmer—move like a programmer. The new Humble Bundle from No Starch press features 18 titles. Pay what you want and support EFF at the same time! www.humblebundle.com/books/think...

Humble Tech Book Bundle: Think Like a Programmer 2026 by No Starch Press

Think like a programmer and move like a programmer with a collection of learning courses from the experts at No Starch Press!

humblebundle.com

PFL: a from-scratch implementation of OpenBSD's pf (Packet Filter) as a Rust program compiled to eBPF and attached to the Linux XDP hook - Detailed Article by Scott Ullrich (founder of pfSense) #Network #Firewall #XDP #OpenBSD blog.nfsensei.org/the-packet-f...

Stefan Sperling (stsp@) has very kindly shared his Game of Trees tutorial from #EuroBSDcon 2026 so that you can try it at home! 😎 Got is a Git compatible version control system developed on #OpenBSD, which prioritizes ease of use and simplicity over flexibility. gameoftrees.org/eurobsdcon20...

German agencies use the linked-device features in WhatsApp, Signal, and Telegram to receive messages without breaking encryption. cybernews.com/privacy/poli...

German police read WhatsApp messages without cracking encryption

45 days of Signal history may be exposed by German police messaging surveillance using linked devices, Netzpolitik says. Read what the documents reveal

cybernews.com

Entropia - a compiled language that outputs PIC and Beacon Object Files. Includes AOP-style mix-in modules to hook functions, execute code at begin/end of program. Implements several runtime tradecrafts as examples. Author xaff.dev docs.entropykit.com github.com/entropykit/e...

The Hacker's Guide to Attacking AI Agents

The Hacker's Guide to Attacking AI Agents

This is a practical guide to assessing the security of an agentic AI system.

darkmarc.substack.com

It's a Mod, Mod, Mod, Mod World aff-wg.org/2026/09/21/i... TCG update: - .spec files are now modules w/ query-able meta-info - Added hexdump and dump to see intermediate outputs - Added encode&mask for content transforms And, a modular demo for encode/mask: tradecraftgarden.org/simpletransf...

It’s a Mod, Mod, Mod, Mod World

n options.

aff-wg.org

A fake verification page loads. 41 seconds later your user pastes a command into the Run dialog and runs it. Four chains, five months, one provider none of them gave up. Pull your egress for AS202412. Then read this. https://activesoc.blackhillsinfosec.com/blog/disposable-domains-durable-hosting/

In July, Microsoft fixed CVE-2026-50343, a Windows privilege escalation bug reported by Calif and 9 others, dubbed “Dark Elevator”. But was it really fixed? projectzero.google/2026/09/wind...

Windows Exploitation Techniques: Dangling COM Object Registrations

This short blog post is about abusing a privilege escalation bug that Microsoft recently fixed in...

projectzero.google

Cyber Threat Actors are using public Blockchains to hide Malware Instructions, making it nearly impossible to seize or take down. These Attack Techniques are called Blockchain Dead Drops (BDD). Technical Report by Chainalysis #Infosec #ThreatIntelligence www.chainalysis.com/blog/etherhi...

EtherHiding & Blockchain Dead Drops: On-Chain Malware C2 - Chainalysis

Chainalysis has identified 15+ campaigns using EtherHiding-style tactics to store malware on blockchains. Inside an attack type exploding in the AI age.

chainalysis.com

🙌 Tomorrow the training day of @owasp.org AppSecDays Portugal happens! My free introduction workshop to @owasp-juice.shop is overbooked, which is super nice. Looking forward to trying out the new github.com/juice-shop/m... MultiJuicer guide & scripts in practice with over 50 people! 🧃😎🤞

multi-juicer/guides/hetzner/hetzner.md at main · juice-shop/multi-juicer

Host and manage multiple Juice Shop instances for security trainings and Capture The Flags - juice-shop/multi-juicer

github.com

📚 L'ANSSI publie une nouvelle fiche de la série « ReCyf en pratique », pour vous accompagner dans la mise en œuvre des mesures recommandées dans le référentiel #ReCyF. Découvrez la fiche « Architectures sécurisées » : 🔗 messervices.cyber.gouv.fr/guides/fiche...

Hercules from HackTheBox features LDAP injection with a rate limit bypass, an ASP.NET machine key leak to forge auth cookies, odt auth coercion, shadow credentials, ESC3, and S4U2self abuse for the domain.

HTB: Hercules

Hercules is a Windows domain controller running an ASP.NET site. I’ll slip past the filters to an LDAP injection, and with a rate limit bypass, I’ll brute force the directory and pull a default password out of a user description. An arbitrary file read in the download handler leaks the machine key from the site’s configuration, which lets me forge an authentication cookie carrying the Web Administrators role and unlock the file upload. An uploaded document coerces an authentication attempt that cracks, opening a long chain of Active Directory abuse that runs through shadow credentials, moving an account into an organizational unit to bring it under rights I already hold, and ESC3 against the certificate authority. Finally I’ll trigger a cleanup task that strips admin protections from a privileged account, then abuse delegation to reach the machine account that can dump the domain.

0xdf.gitlab.io

It’s been 8 years since we published our report on how Google tricks people into extensive location tracking, and simultaneously filed complaints against Google. Today the decision from the Irish Data Protection Commission arrived: a €400 million euros fine. www.forbrukerradet.no/siste-nytt/d...

Google Fined €403 Million Following Consumer Council Report

Google has been fined €403 million by the Irish Data Protection Commission after the Norwegian Consumer Council exposed how the company manipulated users into accepting extensive tracking.

forbrukerradet.no

No way ! https://micahflee.com/flock-cameras-are-riddled-with-security-vulnerabilities-and-hard-coded-credentials/

New Release Havoc Professional 0.8: Leviathan 🩸 - Introducing Kaine User-Defined C2 - Expanded Linux post-ex capabilities - Refactored port forwarding and sleep masking - Enhanced .NET/PowerSafe execution - In-Memory PE Execution and BOF-PE support Release: www.infinitycurve.org/blog/leviathan

Havoc Professional 0.8: Leviathan

Introducing Kaine User-Defined C2, expanded Linux post-ex capabilities, refactored port forwarding and sleep masking, enhanced .NET/PowerSafe execution, Beacon Object File improvements, In-Memory PE E...

infinitycurve.org