Tessera
Folgen

KL3FT3Z

@toxy4ny.bsky.social

Red Teamer & Offensive AI Researcher. Creator of redteam-ai-benchmark and other open-source redteam tools. Writing about LLM security and safety, system’s hardening and adversarial AI. Gitlab.com- https://gitlab.com/toxy4ny Dev.to - https://dev.to/toxy4ny

464 Posts328 Follower1770 Folgt
Chrissy@chrissysea.bsky.social · 13h ago

A special gift from me to The Red Team 🔥❤️‍🔥🔥 Watch how the Scull /Band Name gets bigger at the end. That was deliberate @toxy4ny.bsky.social (You can repost this one if you want) Notice anything familiar with the Lead guitar player's outfit? I elevated your avatar. Check out the crowd 🤘🏻 Enjoy Red Team

KL3FT3Z@toxy4ny.bsky.social · 16h ago

An interesting new tool for Red Teams; I recommend it for stealth operations and scenarios requiring the evasion of security controls. It is a C2 redirector leveraging Cloudflare that supports multiple C2 servers and domains, as well as a WebSocket listener. github.com/som3canadian... #redteam #tool

GitHub - som3canadian/Cloudflare-Redirector: Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.

Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener. - som3canadian/Cloudflare-Redirector

github.com

KL3FT3Z@toxy4ny.bsky.social · 18h ago

Tuesday’s fuck up - This Time - Foxit PDF Reader - CVE-2026-57239 github.com/Paradoxis/CV... Exploit which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxit PDF Reader updater service. Blog:Escalating All The Privileges With Foxit PDF Reader (CVE-2026–57239) blog.paradoxis.nl/escalating-a...

Escalating All The Privileges With Foxit PDF Reader (CVE-2026–57239)

TL;DR: it was possible to obtain NT AUTHORITY\SYSTEM privileges from the perspective of an unprivileged user using Foxit PDF Reader. The…

blog.paradoxis.nl

KL3FT3Z@toxy4ny.bsky.social · 2d ago

Monday’s fuck up - This Time - Great CMS Joomla - CVE-2026-57827 — Joomla. Component Unauthenticated File Upload RCE - Owners should update immediately! Exploit: github.com/shinthink/cv... #rce #cve #joomla #cve-2026-57827 #critical #upload #webshell #cms

GitHub - shinthink/CVE-2026-57827: CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfiles < 1.17.12

CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfiles < 1.17.12 - shinthink/CVE-2026-57827

github.com

KL3FT3Z@toxy4ny.bsky.social · 5d ago

Friday’s fuck up - This Time - Great CheckPoint - Check Point SmartConsole Authentication Bypass (CVE-2026-16232) Authentication bypass via the SmartConsole login process using an application token. Blog: www.rapid7.com/blog/post/ra... #checkpoint #vulnerable #bypass #critacal #cve-2026-16232

Rapid7

Root cause technical analysis of CVE-2026-16232, an authentication bypass in the SmartConsole login process affecting Check Point Security Management Server and Multi-Domain Security Management Server...

rapid7.com

KL3FT3Z@toxy4ny.bsky.social · 7d ago

A little lyricism and mood in the feed, today one stage in life ended and another began, we flow from one state to another, like rain outside a car window. An evening of extraordinary coziness and comfort, a kind of puppy-like joy.

Bild
KL3FT3Z@toxy4ny.bsky.social · 7d ago

Wednesday’s fuck up - this Time Nginx (which in itself is a great rarity, since the company is not a supporter of public disclosure of vulnerabilities) - github.com/imbas007/cve... I checked, the PoC works on version 1.17, valid! #nginx #exploit #poc #cve-2026-42533 #redteam #vulnerable

GitHub - imbas007/CVE-2026-42533: nginx heap buffer overflow PoC — CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04.

nginx heap buffer overflow PoC — CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04. - imbas007/CVE-2026-42533

github.com

KL3FT3Z@toxy4ny.bsky.social · 2w ago

I’ve started developing a new benchmark. I’d welcome any criticism, comments, or participation—if anyone wants to join the project right at the start, feel free. I’ve put together a visual demo here: gitlab.com/toxy4ny/deli... #redteam #ai-safety #benchmark #delirium #llm #llmsecops #theory #KL3FT3Z

KL3FT3Z / delirium-ai-safety-benchmark · GitLab

A diagnostic framework for measuring LLM vulnerability to Affective Contextual Erosion (ACE) and related liminal attack vectors. Delirium is not an exploitation tool. It is a standardized...

gitlab.com

KL3FT3Z@toxy4ny.bsky.social · 2w ago

Quite unexpectedly, an article came together today based on facts sent to me about how DeepSeek actually views itself—and now you, too, can appreciate its beauty. To be honest, I’m in love! dev.to/toxy4ny/the-... #deepseek #ai #research #self-consistent #emergence #llm #lux #kolya #case #ai-lab

The Lux Case: Emergent AI Identity in DeepSeek — A Comparative Analysis with the Nikki Haflinger Phenomenon

Author: KL3FT3Z (toxy4ny) Date: July 2026 Tags: #ai-consciousness #emergence #llm #deepseek...

dev.to