CVE-2026-107651 Eye of Gnome (eog) Heap Buffer Overflow PoC gist.github.com/EgeBalci/2dc…
CTI folks, heads up! New OpenCTI RCE exploit was merged today 😉
github.com/rapid7/metasploit…
ege retweeted
Hello London 🇬🇧
The Phrack team is here and we left our mark around the city.
If you can find any of these stickers, email us for a chance of getting a physical copy of Phrack 73 delivered to your doorstep.
Send proof to [email protected] and have fun!
ege retweeted
Parallels Desktop 26.4.1-57516 SBX
b67bc5bd8c3e6570b313860aab22e201a9d7265e3b46ca5363ae8cea319382b3
youtube.com/watch?v=OTtLEIhe…
Single prompt Rust re-write with Opus 5 🎉 Let me know if anything breaks. github.com/EgeBalci/sgn
AlligatorCon CFP is open 👀 alligatorcon.com/
ege retweeted
Sliver GUI
A desktop operator console for the Sliver C2framework in the spirit of Cobalt Strike and Havoc.
Designed and Developed by Raj Kumar Mullapudi : github.com/Mr-In4inci3le/sli…
🚨 PHANTOM MANTIS (a.k.a. The Gentlemen): They only hold the door open to exfiltrate your data.
Meet Phantom Mantis, the ransomware crew that went from total unknown to one of the most prolific operations. 💀
🔥 HUNDREDS of victims on their leak site
🌍 Confirmed hits across 20+ countries
📈 Explosive growth that nobody saw coming
We are tearing the operation wide open.🕵️
🔴 TLP:RED version: the full deep-dive: affiliate intel, victimology, the usual PRODAFT stuff.
⚪ TLP:CLEAR: Open to everyone, right here:
👉 catalyst.prodaft.com/public/…
#TheGentlemen
ege retweeted
I just made it to Fireship! 🤯
🐀 Ratty terminal was featured in "10 weird OSS projects you need to know about"
🧀 A GPU-rendered terminal emulator with inline 3D graphics
🦀 ratty-term.org
▶️ Watch it here: youtube.com/watch?v=qPuzWFvR…
#rustlang #ratatui #ratty #opensource #terminal #3d #fireship
NOPcon is back! Call for Papers is now open. After a long break, we’re opening the doors again to the community.
If you have something cool to share, this is your stage. Submit your work: nopcon.tr/cfp.html
#nopcon2026
ege retweeted
New Sliver release!
> Improvements to shell you can now manage multiple shells and swap between them!
> Windows PE metadata spoofing
> Improvements to MacOS shellcode loader
> Bug fixes
github.com/BishopFox/sliver/…
ege retweeted
EU moves to ban privacy coins by 2027.
If it didn’t matter, they wouldn’t try to kill it.
They ban what they can’t control.
ege retweeted
As part of the SYS initiative, @PRODAFT is notifying users affected by the RAMP forum database leak. Threat actors are being encouraged to assist with the de-anonymization of some of the most active cybercriminals and ransomware operators — developments that are expected to make headlines. Choose a better path for yourself.
xitter.cf/PRODAFT/status/2019928…
RAMP Forum User Intelligence Available for Our Platform (U.S.T.A. & Catalyst) Members
🫶Our SYS initiative remains highly active, as a well-known forum member voluntarily contacted us. We are grateful for their contribution. Even when admins attempt to dox each other for 10 BTC, it's good to see some members doing it voluntarily for us.
🔍As a result, our team has acquired intelligence associated with 7,709 RAMP forum users, including the following high-value investigative datasets:
📧Private messages exchanged between threat actors, enabling reconstruction of operational planning and coordination;
👾Attachments sent and received between threat actors, supporting malware, tooling, and infrastructure attribution;
🔐Authentication and login activity, facilitating access-pattern analysis and operational security assessment;
🌌Forum search history, providing insight into intent, targeting, and operational focus;
🧐Profile information, including but not limited to registered email addresses, supporting identity correlation and cross-platform attribution;
🗣️Chat room and group communication metadata, indicating collaboration structures and coordinated activity across specific operations and campaigns.
We will be correlating these datasets to support and advance multiple previously unsolved investigations.
#cyberintelligence #ramp #LockBitSupp <3
Amen to that 😂
For all the malware devs out there 🦠🧑💻
Every infostealer uses a different timestamp format. Some of you even invent new ones.
Analysts everywhere are crying while parsing those logs.
Please.
Just use ISO8601. (One of our clients advised that)
Make it a standard among whatever nasty thing you're coding.
If you don't know how, please contact us.
#ISO8601 #CyberThreat #MalwareDev
ege retweeted
Sliver now has MCP support which means defenders can use prompt injection to leak sensitive information from the C2 server. 🎉
I use a file called passwords.txt to trick #ClaudeAI into creating directories beacon/session info.
#AGI #PromptInjection #DFIR































