Aurélien Chalot @Defte_
Hacker, sysadmin and security researcher @OrangeCyberdef 💻 Calisthenic enthousiast 💪 and wannabe philosopher https://t.co/SqDDhIGGGh 📖 🔥 Hide&Sec 🔥 blog.whiteflag.io The grid Joined November 2017-
Tweets2K
-
Followers4K
-
Following489
-
Likes3K
@abdo_mhanni @Dinosn Actually doing my best to spread detection techniques so that people can detect it xD but yeah
I see a lot of activiy going around browser cache smuggling which I presented back in 2023 there sensepost.com/blog/2023/brow…. Remember, the detection part is trivial: monitor any process that is not a browser, that is reading cache files. Also, disable Win+R shortcut! :)
🚨 ClickFix has a new trick... the malicious payload is already sitting in your browser cache before you paste the command. Compromised sites preload scripts disguised as PNGs, letting pasted commands bypass Windows Run's ~260-character limit and launch a multi-stage malware
@dotimus_ @MsftSecIntel Mostly watching for processes that are not browsers reading the cache folder. Originally I described that technique using a powershell oneliner but this could be a proper binary, a batch script or anything else. So yeah, matching processes reading the cache folder is the best
@MsftSecIntel More information about that technique here sensepost.com/blog/2023/brow…, detection is pretty simple! Monitore for processes that are not browsers, accessing the Cache folder of any browser :)!
@0xNarek @MsftSecIntel Bien vu merci pour le ping!
3 months of work later, MS-NEGOEX is merged into Impacket 🚀 First big step toward bringing Impacket on Entra ID-joined & hybrid machines. Next stop is PKU2U, after #2260 gets merged and soon after you will have SMB, LDAP & MSSQL on Azure with the tools you already know 👀 Be sure to check it out, research or/and build on it! Cant wait to see the sort of Azure offsec opportunities that may come out of this : ) github.com/fortra/impacke…
@_atsika Who knows ahahahahah but yeah unlikely
Yesterday we merged two new functionnalities on NXC for MSSQL. The ability to dump local database users' hashes. The new function lists both the login name, the algorithme used to hash the password and the hash allowing cracking them via hashcat/john:
This is part of a much bigger project that I started a year ago in order to provide better offensive capabilities to NXC and there is much more to come! 🥳👀
As well as a function that allows listing databases' backups as well as their backup path and whether the backup is encrypted or not (which may help finding password, sensitive data and so on).
@sundhaug92 @sekurlsa_pw My exact question, words dont mean nothing anymore I guess
Are you (like me) constantly running into your own Responder? The days are finally over!🚀 @Defte_ and I finally finished up a PR by bdrogja that let's you define exclusions such as "yourself". You can also exclude entire ranges or IPv6 addresses (if anyone uses those lol).
Please just give that person a reverser job or something this is just insane the level 🤣🤣🤣🤣🤣
FalconFlank : Crowdstrike Falcon 0day LPE is now public github.com/MSNightmare/Fa…
Be aware that your photos can be accessed without unlocking your phone when you receive a WhatsApp video call on Android. This is in plain sight. It's not hidden, not a secret feature. Not a hack. This has already been reported to Meta and Google. #Privacy #Security #Android17
Cet episode des "rires du Medef" est un tournant. Il vient adouber JLM en tant que seul défenseur des travailleurs/classe populaire Il vient le déclarer comme seul opposant au système eco/politique actuel Et il vient de souder toute une classe sociale derrière lui Game changer!
I've published UniBLEed, a fully wormable proximity Bluetooth RCE affecting Unitree's G1 humanoids. Blog spans cloud, mobile, firmware, Bluetooth & hardware. Two multi-bug RCE chains. 3 months into ~80 minutes, $6,700 in bounties. Go jailbreak your G1s!! boschko.ca/g1-ble-rce/
He copied a value out of the Windows Event Log. Pasted it into his special browser. And he was signed into Microsoft Entra as the user who had just authenticated. No password. No phishing link. No stolen private key. @MGrafnetter's Black Hat USA 2026 research...
@mrzshyey2 @seblatombe Mon point est juste de dire que c'est une tâche complexe et que tous les services de l'état où je suis passé, bah c'était calamiteux. Y'a juste pas assez de moyen pour recruter les profils et lancer les bons projets
@mrzshyey2 @seblatombe Ouais je confirme, tu pèses pas tes mots et te rend pas compte de la charge de travail que c'est de gérer un SI qui plus est quand chaque ministère a le sien. Quant aux admins expérimentés, ça paie pas assez le public :)
This
This past week I’ve been asked several times by people of different ages “how do you research and publish so much?”. It’s awesome to be asked. I love sharing tips and I try to give my techniques for maintaining a research pipeline. But I also want to be honest about my reality.
Mayfly @M4yFly
7K Followers 792 Following Former Dev and DevOps| Pentester and red teamer at orange cyberdefense | OSCE³| Tweet are my own| discord: m4yfly
Rémi GASCOU (Podalir... @podalirius_
8K Followers 750 Following Senior Security Researcher @SpecterOps | 5 x Microsoft MVP | Creator of opensource security tools 🎬 https://t.co/QaAENc5l2w | Views are my own
sn🥶vvcr💥sh @snovvcrash
12K Followers 492 Following Sr. Penetration Tester / Red Team Operator @ptswarm :: Author of the Pentester’s Promiscuous Notebook :: He/him :: Tweets’re my pwn 🐣
Florian Roth ⚡️ @cyb3rops
225K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Swissky @pentest_swissky
23K Followers 1K Following RedTeam | Pentest Author of PayloadsAllTheThings & SSRFmap https://t.co/w1ZLRqoafG
Justin Elze @HackingLZ
74K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
Orange Cyberdefense's... @sensepost
9K Followers 317 Following Work like hell, Share all you know, Abide by your handshake, Have fun. - Dan Geer
Hocine @Sant0rryu
501 Followers 540 Following
Laluka@OffenSkill @TheLaluka
6K Followers 1K Following Sharing is Caring, Hacker, Eternel Learner, Cat! =^~^=
n00py @n00py1
14K Followers 965 Following Retweeter of InfoSec/Offsec/Pentest/Red Team. Occasional blogger/Independent security research.
5pider @C5pider
36K Followers 143 Following research & development @InfinityXCurve | personal blog: https://t.co/4gzLz0Z26z
an0n @an0n_r0
14K Followers 734 Following CRT(E|O|L) | OSCP | @RingZer0_CTF 1st (for 2yrs) | HackTheBox Top10 | RPISEC MBE | Flare-On completer | GoogleCTF writeup winner | SSD research | Math MSc |🇭🇺
Josh @passthehashbrwn
10K Followers 294 Following Adversarial Simulation at IBM, tweets are mine etc.
mRr3b00t @UK_Daniel_Card
126K Followers 8K Following Chief Artificial Intelligence Cyber Security Scientist Superintelligence-grade security former Helpdesk AI infection status: clean Task Force 29
John Hammond @_JohnHammond
328K Followers 3K Following Cybersecurity Researcher @HuntressLabs Just Hacking Training @JustHackingHQ w/ @ethicalhacker https://t.co/UtsNJiyiEk && https://t.co/narO3syzIy
Thomas Seigneuret @_zblurx
4K Followers 408 Following Red Teamer & Security researcher Maintainer of NetExec and dploot
Jean @Jean_Maes_1994
12K Followers 1K Following @sansoffensive Certified instructor/SEC565 author/SEC699 co author https://t.co/cp5DerI3g4
Filip Dragovic @filip_dragovic
8K Followers 1K Following My research unless stated otherwise. My opinions are my own and do not represent the views of my employer. Red Team @MDSecLabs
klm @klmxtom
3 Followers 451 Following
Tor Åge Takvam @ttakvam
157 Followers 807 Following
TOKYO @TOKYOg99x
1 Followers 57 Following
Hadi @Hadi1457771
1 Followers 92 Following new bug hunter; infosec engineer passionate about linux/nixos, osint & foss.
KXS @KXSDroid
4 Followers 340 Following
afzal @afzalyasir2012
0 Followers 52 Following
Eddie Morra @GonFree18308487
60 Followers 396 Following
Hu Uhha @HuUhha67265
0 Followers 74 Following
Mouhamed el amine Hmi... @ElHmila
1 Followers 337 Following
Stevenwael @Stevenwaelvqlh
2 Followers 106 Following Penetration Tester || AI Security Explorer || Bug Bounty Hunter 👾🧑🏻💻
Scan Malware @scanmalware
182 Followers 458 Following Scanning the web for malware & phishing ⚡ AI-powered threat detection & multi-tech analysis | Protecting the internet one site at a time
محمد @Sphinnky
213 Followers 565 Following
SlimeHackers - Slugge... @0b01011000
180 Followers 2K Following I want to boop some goop. Slave to the ether. We’re not just existing, we’re living.
TheKiller @ChandMrsarthak1
82 Followers 755 Following
zoharbuber @zoharbuber
31 Followers 2K Following
Nathan @kipro31
963 Followers 380 Following 28 🇫🇷 - cybersecurity engineer - in charge of @Thebausffs YT -
Adrian Niedzielski @AdrianNiednu
21 Followers 1K Following
AAG @medioum43
166 Followers 1K Following FENERBAHCE'nin onuru dokunulmazdır. Ona saygı duymak ve onu korumak tüm taraftarların görevidir. @fenerbahce🫡 #alikocistifa
Peter Fransico @PeterFransbk3d
22 Followers 84 Following
S3gm3nt4t10n F4ult @s3gm3n_F4ult
0 Followers 95 Following
Joshua Penny @josh_penny
2K Followers 910 Following Senior Threat Intelligence Analyst @Bridewellsec @BCONCOLLECTIVE
Jesus Ramirez @yisusrg05
426 Followers 3K Following Almeria. Ciberseguridad URJC. Coordinador de la @HackOnURJC
Pau Besalú @5Bepu
13 Followers 377 Following cybersec x athlete x doing my own thing / not necessarily in that order
Starchip @st4rch1
0 Followers 79 Following
zacken @zacken21018239
1 Followers 75 Following
h3st4k3r @h3st4k3r
1K Followers 432 Following Vulnerability & Incident Management | Scripting & Automation From the community to the community. All opinions that you can see represented here are my own.
Amin Arab (پرچم �... @aminarab_17
10 Followers 261 Following Redteamer | Post-Exploitation Specialist https://t.co/EwfePfhuW2
Saifuddin Amri @SaifuddinAmri__
935 Followers 2K Following CISSP. Chief of Hacker. Cyber Security Consultant. Tweets about tech, cyber security & Islam. I post memes. Views are my own.
lehabiel @lehabiel1
5 Followers 410 Following
YassineLassoued @YassineLassou3d
2 Followers 201 Following
R∆V∆N∆N @R4vanan
49 Followers 688 Following i am also a gamer!! but a small difference, you love #Xbox to play! but i love #hackthebox to play ;-)
pirate.moo @apiratemoo
7K Followers 4K Following \x6d\x6f\x6f\x62\x69\x74\x63\x68 I break things for a living. Opinions are my own.
vx-underground @vxunderground
455K Followers 386 Following The largest collection of malware source code, samples, and papers on the internet. Password: infected
Mayfly @M4yFly
7K Followers 792 Following Former Dev and DevOps| Pentester and red teamer at orange cyberdefense | OSCE³| Tweet are my own| discord: m4yfly
mpgn @mpgn_x64
19K Followers 237 Following Flibustier du net ̿ ̿̿'̿'\̵͇̿̿\=(•̪●)=/̵͇̿̿/'̿̿ ̿ ̿ ̿ Podcast Hack'n Speak @hacknspeak / https://t.co/GyACSFg9mw
Rémi GASCOU (Podalir... @podalirius_
8K Followers 750 Following Senior Security Researcher @SpecterOps | 5 x Microsoft MVP | Creator of opensource security tools 🎬 https://t.co/QaAENc5l2w | Views are my own
Oliver Lyak @ly4k_
9K Followers 268 Following Yet another security researcher 🔦 Github: https://t.co/7WFOFz17KI
sn🥶vvcr💥sh @snovvcrash
12K Followers 492 Following Sr. Penetration Tester / Red Team Operator @ptswarm :: Author of the Pentester’s Promiscuous Notebook :: He/him :: Tweets’re my pwn 🐣
Florian Roth ⚡️ @cyb3rops
225K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Swissky @pentest_swissky
23K Followers 1K Following RedTeam | Pentest Author of PayloadsAllTheThings & SSRFmap https://t.co/w1ZLRqoafG
Justin Elze @HackingLZ
74K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
Orange Cyberdefense's... @sensepost
9K Followers 317 Following Work like hell, Share all you know, Abide by your handshake, Have fun. - Dan Geer
Synacktiv @Synacktiv
22K Followers 274 Following Offensive security company. Dojo of many ninjas. Red teaming, reverse engineering, vuln research, dev of security tools and incident response.
Hocine @Sant0rryu
501 Followers 540 Following
Laluka@OffenSkill @TheLaluka
6K Followers 1K Following Sharing is Caring, Hacker, Eternel Learner, Cat! =^~^=
n00py @n00py1
14K Followers 965 Following Retweeter of InfoSec/Offsec/Pentest/Red Team. Occasional blogger/Independent security research.
5pider @C5pider
36K Followers 143 Following research & development @InfinityXCurve | personal blog: https://t.co/4gzLz0Z26z
Binni Shah @binitamshah
140K Followers 159 Following Linux Evangelist, Malwares, Security enthusiast ,Investor,World Economy, Finance,Contrarian , Philanthropist , Reformist , Sigma female [email protected]
Ossama @0x3lk
47 Followers 61 Following Just doing offsec stuff @Orangecyberdef | Maldev & Binary exploitation | Tweets are my own
Nick Powers @zyn3rgy
2K Followers 268 Following Adversary Simulation @SpecterOps | Previously @Rapid7 & @Protiviti
Carsten @0xcsandker
2K Followers 182 Following Security enthusiast, Likes Windows Internals, AD & Entra — https://t.co/mVVbfkO7IO
bl4ck4rch @bl4ckarch
295 Followers 442 Following Security Researcher & Pentester at @orangecyberdef | CTF enthusiast | @hackthebox_eu MVP 2025
Joker @Joker2a1
881 Followers 908 Following Red team operator and physical intrusion enthusiast 🇱🇺 🇨🇭 🇫🇷
Snowscan @snowscan
6K Followers 436 Following
secret club @the_secret_club
18K Followers 0 Following secret club is a not-for-profit reverse-engineering group; publishing new research on popular software. No ads, no cookies, just research.
Wietze @Wietze
8K Followers 343 Following Threat Detection & Response. Views are my own, unless retweeted. Maintainer of https://t.co/000t7J0NBR & https://t.co/thv6PP5C48 Co-maintainer of https://t.co/rXIxOggXs2
Abdul Mhanni @abdo_mhanni
457 Followers 912 Following 23 | Microsoft MVP | 46xCVE | Part Time Penetration tester, Full Time Script Kiddie | Electrical Eng @ Uni of Sydney
Paul Moore - Security... @Paul_Reviews
17K Followers 1K Following Laugh when you can, apologise when you should and let go of things you can't control.
💻🥷 WarthogTK �... @warthogtk
2K Followers 6K Following Pentester | MD (Intensivist & Healthcare Simulation in another life) | Infosec, Geopolitics, Defense, Hybrid warfare, DCS, Gaming, Metal Opinions are my own
Noobosaurus R3x 🦖 @NoobosaurusR3x
3K Followers 713 Following L3 H4ck3r L3 Plu5 n00b Du w3b Bug Bounty Hunter Wannabe https://t.co/9Ey8TAzkLT https://t.co/vVNhDzGb9K https://t.co/G2q7Php4Pg
Deus ex Silicium @dexsilicium
46K Followers 41 Following Micro-électronique / Semi-conducteurs / Microscopie électronique / Scanner rayons X / Ingénierie inverse hardware / Ondes électromagnétiques / Science / Youtube
那个火饺🦆(JJ) @thatjiaozi
1K Followers 453 Following 🇲🇽🇨🇦. Cloud Vulnerability Research. Opinions are my own. Not those of my company.
James Lucas @JamesLucasIT
821K Followers 6K Following Beauty is truth, truth beauty; that is all ye know on earth, and all ye need to know.
RedTeam Pentesting @RedTeamPT
8K Followers 173 Following Official RedTeam Pentesting GmbH account -- Impressum: https://t.co/pS9oK62Lsu
📔 Michael Grafnett... @MGrafnetter
4K Followers 143 Following Principal Security Researcher @SpecterOps, Microsoft MVP Identity & Access + Enterprise & Platform Security
Steffen Buck @buck_steffen
136 Followers 156 Following
Romern @Romerrn
38 Followers 310 Following
Unlock Your Brain, Ha... @UYBHYS
2K Followers 1K Following The Wild Wild #infosec Conference organisée par @AnDaolVras 11e édition : les 6 & 7 novembre 2026 à #Brest ! #secnum #UYBHYS
mRr3b00t @UK_Daniel_Card
126K Followers 8K Following Chief Artificial Intelligence Cyber Security Scientist Superintelligence-grade security former Helpdesk AI infection status: clean Task Force 29
Volker @volker_carstein
594 Followers 611 Following Hacker 💻 speaker 📣 Jack of All Trades 🃏 Social Engineering, OSINT, AD, TTRPG Pentester / Red Team Operator @ Bsecure / Parabellum Services
Secorizon @secorizon
817 Followers 119 Following Home of Responder, Pcredz, SecorizonAI, etc Red team ops, offensive pentests, web3, etc. Back then, your 0days were your certs.
DebugPrivilege @DebugPrivilege
41K Followers 2K Following Not active anymore on X. Network Defender. Problem solver with a passion for troubleshooting complex issues.
MSec Operations @MSecOps
2K Followers 1 Following
Defused @DefusedCyber
8K Followers 1 Following Managed Honeypots for Early-warning Threat Intelligence 🍯 Sign up today for a 14-day trial: https://t.co/TTnxgi9Hv5
Jack McCarthy @McCarthyLabs
222 Followers 6K Following Geopolitical Intelligence & Espionage | Cyber Threat Intelligence Research & Analysis | Digital Investigative Analysis. -Modeling the real "Three-Body Problem"!
Nicolas Grégoire @Agarri_FR
28K Followers 628 Following Web hacker and Burp Suite Pro trainer Refer to https://t.co/D5tRH7U2hg for trainings Follow @MasteringBurp for free tips and tricks
Toffy @toffyrak
272 Followers 234 Following
Keanu Nys @RedByte1337
1K Followers 84 Following Offensive Security Lead @ Spotit. Creator of GraphSpy
Chris Thompson @_Mayyhem
3K Followers 501 Following Senior Security Researcher @SpecterOps https://t.co/Sz5fRYkX6u
Bad Sector Labs @badsectorlabs
9K Followers 529 Following Cybersecurity news, techniques, exploits, and tools every week at https://t.co/UgKmeEEjIV 🐘 @[email protected]
Orange Cyberdefense F... @OrangeCyberFR
13K Followers 285 Following 🛡️ Construire une société numérique plus sûre #SaferDigitalSociety
Rtl Dallas @RtlDallas
685 Followers 212 Following
Worty @_Worty
3K Followers 585 Following Organizer of @HeroCTF || ctf w/ @FlatNetworkOrg || TeamFR 2021, 2022 & 2025 🇫🇷 || Breaking stuff @0xDepi
Yuval Gordon @YuG0rd
1K Followers 431 Following Security Researcher at Palo Alto Networks. Opinions are my own.You might like
