Patchi/fyi (@PatchRequest) header
Patchi/fyi (@PatchRequest) profile picture

Patchi/fyi

@PatchRequest

Pentesting | Red Teaming Game Hacking | Anti Cheat

 Deutschland
patchi.fyi/
Joined July 2019
  • Tweets178
  • Following418
  • Followers262
40Media
Photo by Patchi/fyi (@PatchRequest)Photo by Patchi/fyi (@PatchRequest)Photo by Patchi/fyi (@PatchRequest)Photo by Patchi/fyi (@PatchRequest)Photo by Patchi/fyi (@PatchRequest)Photo by Patchi/fyi (@PatchRequest)Photo by Patchi/fyi (@PatchRequest)Photo by Patchi/fyi (@PatchRequest)Photo by Patchi/fyi (@PatchRequest)
Make your payload "sleep" to look like any real Windows activity. BusyWork is a Rust library that swaps each pause for randomized real work - hashing, file enumeration, registry queries, DNS lookups - drawn from 76 tasks across seven categories with ±30% jitter on every parameter. No two "pauses" produce the same API sequence, and no timing primitives survive in the compiled binary. A post by Daniel (@PatchRequest) Source: patchi.fyi/blog/busywork-sle… #redteam #blueteam
Image from SEKTOR7 Institute (@SEKTOR7net)
6
31
3
190
10,137
Patchi/fyi retweeted
kernullist (@kernullist) profile picture
kernullist
@kernullistMay 29
Whipped up a standalone wrapper for IDA free while waiting on batch analysis. Thanks to @PatchRequest for the awesome idea!
Image from kernullist (@kernullist)
Image from kernullist (@kernullist)
3
26
2,200
Vibe Coding with AI was the best ever for Bug Bounty. The DevOps is so bad that I love it. While generating tokens, it somehow generates infosec jobs too Find more at: cerast-intelligence.com/
Image from Cerast Intelligence (@CerastIntel)
1
2
304
We are live! Search our database of over 8 million potentially exposed files by domain 🔍 Explore now: cerast-intelligence.com/
2
5
595
Sneak Peek of what’s coming October 1st Be ready | millions of never-before-seen exposed files will become searchable cerast-intelligence.com/
Image from Cerast Intelligence (@CerastIntel)
1
1
1
7
773
Found a leaked .env file during testing today — critical reminder to check for sensitive data exposure. 🚨 Want to find it too? 👉 cerast-intelligence.com/
Image from Cerast Intelligence (@CerastIntel)
1
3
457
Super cool story about hacking hackers! 😎 Read it, learn from it, and definitely don’t try this yourself (or maybe do). 🕵️‍♂️🔥 #Infosec medium.com/@corneacristian/h…
How I hacked 100 hackers

How I hacked 100 hackers

… Or script kiddies I could say

corneacristian.medium.com
1
3
338
🚨 Heads up, devs! A malicious commit hit the lottie-player repo, causing pop-ups linked to a crypto scam. If you're using it, double-check your dependencies and update ASAP! Stay sharp out there. github.com/LottieFiles/lotti… #infosec #cybersecurity #Web3 #crypto #scam #lottieplayer #lottie
Image from Cerast Intelligence (@CerastIntel)
3
12
2
23
5,159
Check out the latest security findings at cerast-intelligence.com/! 🚨 We uncover issues such as exposed keys/secrets/configs, misconfigured frameworks like WordPress, outdated versions of SSH/FTP, and much more. You can use these findings for bug bounties, security research, or other security projects.
Image from Cerast Intelligence (@CerastIntel)
1
2
287
Want some free loot? Here a free first month: FREELOOT100
Image from Cerast Intelligence (@CerastIntel)
1
1
237
Well, I'm not advising you to do this but a lot of #Redline #Infostealer Command & Control servers have RDP exposed to the internet - and what should I say? A lot of them allow you to shut the system down. Do with that information what you want 🤡
Image from NexusFuzzy 💩 (@NexusFuzzy)
12
45
6
244
41,927
I guess history books have to be rewritten after the #Conti leaks have been fully analyzed. In an effort to help the community I already updated the default ransomware meme
Image from NexusFuzzy 💩 (@NexusFuzzy)
Image from NexusFuzzy 💩 (@NexusFuzzy)
1
Good news! #CobaltSpam has now the possibility to share your found CobaltStrike servers with @abuse_ch Threatfox. Additionally, you now have the possibility to only parse the beacon without spamming the server afterwards github.com/hariomenkel/Cobal…
Image from NexusFuzzy 💩 (@NexusFuzzy)
90
3
197
We have successfully archived the Conti affiliate training material - a compilation of various RedTeaming videos, RedTeaming tools, malicious powershell scripts, etc. This is essentially the Conti 'continual education' program. You can download it here: pastebin.com/U71YVjjy

vx-underground.orghttps://tinyurl.com/ygtydr57https://tinyurl.com/yzuxt8dw - Pastebin.com

Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

pastebin.com
20
285
8
858
Patchi/fyi retweeted
Simon Lee (@smoon_lee) profile picture
Simon Lee@smoon_lee15 Jun 2021
#Windows11 Fresh Install
Image from Simon Lee (@smoon_lee)
26
23
6
141
Patchi/fyi retweeted
Kyle Cucci (@d4rksystem) profile picture
Kyle Cucci@d4rksystem6 Jan 2021
Finally added #VMware support for my #malware anti-evasion scripts. This script will attempt to sanitize your VMware malware analysis VM's by modifying registry keys, files, and processes. Get it and test it out here: github.com/d4rksystem/VMware…

GitHub - d4rksystem/VMwareCloak: A PowerShell script that attempts to help malware analysts hide...

A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analysis. - d4rksystem/VMwareCloak

github.com
Kyle Cucci (@d4rksystem) profile pictureKyle Cucci@d4rksystem7 Nov 2020
Is #Malware detecting and evading your #VirtualBox virtual machines? Check out VBoxCloak - a Powershell script for hiding VirtualBox from malware. Guaranteed to bring down your pafish detections😄 github.com/d4rksystem/VBoxCl…
Image from Kyle Cucci (@d4rksystem)
2
53
2
100
Vajra – an Automated Web Hacking Framework for Web Applications. hakin9.org/vajra-framework/?…
Image from Malware Patrol (@MalwarePatrol)
1
Windows Exploit Suggester (WES-NG) This tool analyses the output of Windows 'systeminfo' utility and suggest exploits for these discovered vulnerabilities. github.com/bitsadmin/wesng
4
210
5
470
Patchi/fyi retweeted
Oscaron (@oscaron) profile picture
Oscaron@oscaron2 Aug 2020
Image from Oscaron (@oscaron)
5
26
1
110
Team #craictheplanet came top 10 in @tghack_ctf!! Great result for our first, next we are onto @UMBCCyberDawgs CTF, top 20 so far. 🇮🇪🎉
Image from CraicThePlanet (@craictheplanet)
2
6
Load more