#pentest
32 posts · Last used 18d
Boosted by @welcome@friends.deko.cloud
#introduction
I'm White — offensive security - network & web, OSINT.
I build small open-source tools (Scryn, FrostNet) and write technique notes, EN & FR.
Code & writeups: github.com/white-exee
Also on X: @whitex3e
Here to learn and share.
#infosec #OSINT #pentest #redteam #cybersecurity
Boosted by @welcome@friends.deko.cloud
OffSeq is an European offensive security company.
We do pentesting, red teaming, OT/ICS and critical infrastructure security, and NIS2/DORA work across the EU.
Here we post our research: vulnerability disclosures (latest in Latvian and Estonian eID software and X-Road), monthly Mirage honeypot field reports and open-source tools.
Open to collaboration, DMs are open.
https://offseq.com/en/
#Introduction #InfoSec #PenTest #RedTeam #ThreatIntel #OffensiveSecurity
Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Offline, CLI + web UI.
https://github.com/crypt0p3g/dpapi-toolkit
#infosec #cybersecurity #redteam #pentest #opensource
Replying to
If I don't get any volunteers I'm going to have to wear a hoodie, don a Guy Fawkes mask, and start frantically typing in my basement like the media's version of a hacker.
But seriously, if anyone wants me to identify public vulnerabilities in their systems that attackers could exploit, please DM me. No charge and no shenanigans.
#WhiteHat #PenTesting #PenTest #Hacking #Vulnerability #vulnerabilities
How WebDav can be used to bypass Smartscreen, and MOTW.
https://g3tsyst3m.com/initial%20access/Using-WebDav-to-Outsmart-Smartscreen,-MOTW,-and-that-OTHER-Alert
#infosec #cybersecurity #redteam #pentest #phishing #windows
LOLRMM is a curated list of Remote Monitoring and Management (RMM) tools that could potentially be abused by threat actors.
https://lolrmm.io
#infosec #cybersecurity #redteam #pentest
ANIMO is a comprehensive Azure AD / Entra ID assessment platform that combines PowerShell-based session management, Azure CLI parity, and native Graph / ARM API integration.
https://github.com/dmcxblue/ANIMO
#infosec #cybersecurity #redteam #pentest #cloud #opensource
What's this? @zaproxy@infosec.exchange fuzzer update released this morning, with work from yours truly.
#PenTest #WebAppSec #BugBountyTips
An MCP server that lets an AI agent drive NetExec (nxc) for authorized security testing only.
https://github.com/mpgn/NetExec-mcp
#infosec #cybersecurity #pentest #ai
Windows Provisioning Package (.ppkg) generator. Payload runs as SYSTEM on apply.
https://github.com/init1Security/PPKGPacker
#infosec #cybersecurity #redteam #pentest
A litterbox integration for the Mythic Command and Control Server
https://github.com/Whispergate/Sphinx
#infosec #cybersecurity #redteam #pentest
Notes on Windows Component Object Model (COM hijacking, elevation of privilege, DCOM lateral movement, and persistence). Notes were generated by Kimi K3 Swarm may contain inaccuracies.
https://github.com/An0nUD4Y/Offensive-COM
#infosec #cybersecurity #redteam #pentest #windows
El lado del mal - Bootcamp de Ciberseguridad Defensiva y Ofensiva en HackBySecurity https://www.elladodelmal.com/2026/07/bootcamp-de-ciberseguridad-defensiva-y.html #BootCamp #Ciberseguridad #Pentest #Pentesting #0xWord #MyPublicInbox #Online
An open-source, self-hosted security research platform that turns focused AI analysis into de-duplicated, ranked findings with configurable validation and enrichment.
https://github.com/Kritt-ai/open-kritt
#infosec #ycbersecurity #redteam #pentest #ai
💻 𝗧𝗛𝗢𝗦𝗘 𝗪𝗛𝗢 𝗗𝗢𝗡’𝗧 𝗟𝗘𝗔𝗥𝗡 𝗙𝗥𝗢𝗠 𝗖𝗩𝗘𝗦 𝗔𝗥𝗘 𝗗𝗢𝗢𝗠𝗘𝗗 𝗧𝗢 𝗥𝗘𝗗𝗜𝗦𝗖𝗢𝗩𝗘𝗥 𝗧𝗛𝗘𝗠 💥 - Louis Nyffenegger
https://archive.org/details/BSidesLuxembourg2026/d1+t1+10+Those+Who+Don%E2%80%99t+Learn+From+CVEs+Are+Doomed+To+Rediscover+Them+-+Louis+Nyffenegger.mkv
Watch Louis Nyffenegger's ( @snyff@infosec.exchange ) session, recorded live at the Digital Learning Hub during BSides Luxembourg 2026.
#BSidesLuxembourg #CVE #CodeReview #SecureCoding #PenTest #SecurityEducation #DevSecOps
Nuclei-like credential surface scanner with BloodHound support. Audits local hosts for exposed secrets, cloud tokens, DevOps, and AI keys.
https://github.com/haxxm0nkey/credshound
#infosec #cybersecurity #redteam #pentest #opensource
Extract Windows credentials directly from VM memory snapshots and virtual disks
https://github.com/nikaiw/VMkatz
#infosec #cybersecurity #redteam #pentest #opensource
There is a documented enforcement gap in Conditional Access policies that apply to "all resources" but have an exclusion for at least one resource.
https://dirkjanm.io/bypassing-conditional-access-with-resource-exclusio
#infosec #cybersecurity #redteam #pentest #cloud
This is a proof-of-concept tool to demonstrace CVE-2026-54121 a.k.a Certighost.
https://github.com/aniqfakhrul/CVE-2026-54121
#infosec #cybersecurity #redteam #pentest

