Malware enthusiast. Reverse engineer. FPV drone pilot 🚁 Threat Intel @PRODAFT @ege@infosec.exchange https://xitter.cf/t.co/QnOokdQwO6

fs+0x30
Joined March 2011
mitmproxy: use `--emudhra` to sign TLS certificates 💀
33
466
83
5,823
246,039
Hello London 🇬🇧 The Phrack team is here and we left our mark around the city. If you can find any of these stickers, email us for a chance of getting a physical copy of Phrack 73 delivered to your doorstep. Send proof to [email protected] and have fun!
3
20
107
5,965
Sliver GUI A desktop operator console for the Sliver C2framework in the spirit of Cobalt Strike and Havoc. Designed and Developed by Raj Kumar Mullapudi : github.com/Mr-In4inci3le/sli…
2
30
1
189
11,345
ege retweeted
🚨 PHANTOM MANTIS (a.k.a. The Gentlemen): They only hold the door open to exfiltrate your data. Meet Phantom Mantis, the ransomware crew that went from total unknown to one of the most prolific operations. 💀 🔥 HUNDREDS of victims on their leak site 🌍 Confirmed hits across 20+ countries 📈 Explosive growth that nobody saw coming We are tearing the operation wide open.🕵️ 🔴 TLP:RED version: the full deep-dive: affiliate intel, victimology, the usual PRODAFT stuff. ⚪ TLP:CLEAR: Open to everyone, right here: 👉 catalyst.prodaft.com/public/… #TheGentlemen
5
15
1,829
I just made it to Fireship! 🤯 🐀 Ratty terminal was featured in "10 weird OSS projects you need to know about" 🧀 A GPU-rendered terminal emulator with inline 3D graphics 🦀 ratty-term.org ▶️ Watch it here: youtube.com/watch?v=qPuzWFvR… #rustlang #ratatui #ratty #opensource #terminal #3d #fireship
7
6
52
2,164
Updated the article. (MRL research lounge incorporated) This is the most technically complex upgrade in monero history. Worth reading and making your own opinion.
1
5
49
2,835
ege retweeted
NOPcon is back! Call for Papers is now open. After a long break, we’re opening the doors again to the community. If you have something cool to share, this is your stage. Submit your work: nopcon.tr/cfp.html #nopcon2026
32
9
69
23,088
New website (ノ◕ヮ◕)ノ*:・゚✧ ege.sh/
5
23
1,873
57e4a4ce3149899512d8953a441ed364 148d607f122cd3b4203c72152ff447b0 4d7800ef923bcbab981941a5e948264c
1
620
New Sliver release! > Improvements to shell you can now manage multiple shells and swap between them! > Windows PE metadata spoofing > Improvements to MacOS shellcode loader > Bug fixes github.com/BishopFox/sliver/…
28
1
81
7,879
EU moves to ban privacy coins by 2027. If it didn’t matter, they wouldn’t try to kill it. They ban what they can’t control.
72
92
20
611
32,223
As part of the SYS initiative, @PRODAFT is notifying users affected by the RAMP forum database leak. Threat actors are being encouraged to assist with the de-anonymization of some of the most active cybercriminals and ransomware operators — developments that are expected to make headlines. Choose a better path for yourself. xitter.cf/PRODAFT/status/2019928…
RAMP Forum User Intelligence Available for Our Platform (U.S.T.A. & Catalyst) Members 🫶Our SYS initiative remains highly active, as a well-known forum member voluntarily contacted us. We are grateful for their contribution. Even when admins attempt to dox each other for 10 BTC, it's good to see some members doing it voluntarily for us. 🔍As a result, our team has acquired intelligence associated with 7,709 RAMP forum users, including the following high-value investigative datasets: 📧Private messages exchanged between threat actors, enabling reconstruction of operational planning and coordination; 👾Attachments sent and received between threat actors, supporting malware, tooling, and infrastructure attribution; 🔐Authentication and login activity, facilitating access-pattern analysis and operational security assessment; 🌌Forum search history, providing insight into intent, targeting, and operational focus; 🧐Profile information, including but not limited to registered email addresses, supporting identity correlation and cross-platform attribution; 🗣️Chat room and group communication metadata, indicating collaboration structures and coordinated activity across specific operations and campaigns. We will be correlating these datasets to support and advance multiple previously unsolved investigations. #cyberintelligence #ramp #LockBitSupp <3
2
11
1
35
11,110
Amen to that 😂
For all the malware devs out there 🦠🧑‍💻 Every infostealer uses a different timestamp format. Some of you even invent new ones. Analysts everywhere are crying while parsing those logs. Please. Just use ISO8601. (One of our clients advised that) Make it a standard among whatever nasty thing you're coding. If you don't know how, please contact us. #ISO8601 #CyberThreat #MalwareDev
1
644
Sliver now has MCP support which means defenders can use prompt injection to leak sensitive information from the C2 server. 🎉 I use a file called passwords.txt to trick #ClaudeAI into creating directories beacon/session info. #AGI #PromptInjection #DFIR
8
59
4
253
28,004
Super curious how they choose each year's awards 😅 #flareon12
1
2
5,394