@nu11charb

Security Research @Confidential. Youtube: https://xitter.cf/t.co/K5TdVRtOPY Founder of Ask-Academy: https://xitter.cf/t.co/Cq8I2yW96Z

 Brisbane, Queensland
null-char.com/
Joined June 2016
  • Tweets1.4K
  • Following389
  • Followers2.9K
120Media
Hello Friends, I am thrilled to announce a new training "Offensive Development and Tradecraft". ask-academy.live/courses/off… Pre Sales content being released now with a price of 429 USD valid till 15th April. Details in the slides below: 1/5
4
7
2
44
10,757
Team Perth’s Caught Pals Team Prison Charges Pending Team… abc.net.au/news/2026-08-27/t…
4
8
42
4,238
Mid-year sale: 35% OFF every course at Ask Academy. 🔬 The Art of Malware Analysis — 60 lessons of hands-on reverse engineering. ⚔️ Offensive Dev & Tradecraft — 112 lessons on the fundamentals of building loaders & understanding evasion. No fluff. Just real labs. 🧵👇 1/2
1
1
361
2/2 15+ years of malware analysis & offensive tooling experience, distilled into practical, lab-based courses. 🎟️ Use code midyear2026 to save 35% 👉 ask-academy.live/ #Cybersecurity #MalwareAnalysis #ReverseEngineering #RedTeam #InfoSec

Hands-on malware analysis and offensive engineering—without fluff | Ask Academy Live

Hands-on malware analysis and offensive engineering training built by a Microsoft and CrowdStrike alum. Labs, code, and workflows you can use at work.

ask-academy.live
263
Looks like redhat-cloud-services npm packages compromised. Till now 30 npm packages compromised pushing stealers. github.com/RedHatInsights/ja…

SECURITY: @redhat-cloud-services packages compromised — malicious preinstall payload (credential...

SECURITY: @redhat-cloud-services/[email protected] is compromised — malicious preinstall payload (credential stealer / worm) Summary @redhat-cloud-services/[email protected] (published 2026-06-01...

github.com
1
1
2
333
Looks like the whole antv account on github hosting npm repos is compromised. In the last hour a lot of thier repos infected.
2
5
513
Expect every package maintained by antv maintainers to be compromised. Echarts for react is huge there.
89
Trojanized Lightning Package - Supply Chain Attack @vxunderground
369
Initial details only: lightning==2.6.3 on PyPI is possibly compromised. It silently downloads a JS runtime and executes an 11MB obfuscated credential stealer on import lightning. Targets AWS/GCP/Azure creds, browser data, .env files, GitHub tokens. Reported to PyPI security.
1
1
5
1,086
also reported a bug on the github repo, but it was closed. Also reported on their discord.
142
Hey, I'm open-sourcing Clicky. Go forth into the wild and build the future of education and the future of AI interfaces, my friends. I'm happy to have given a spark. Enjoy! github.com/farzaa/clicky

GitHub - farzaa/clicky

Contribute to farzaa/clicky development by creating an account on GitHub.

github.com
Farza 🇵🇰🇺🇸
@FarzaTVApr 7
I built this thing called Clicky. It's an AI teacher that lives as a buddy next to your cursor. It can see your screen, talk to you, and even point at stuff, kinda like having a real teacher next to you. I've been using it the past few days to learn Davinci Resolve, 10/10.
280
417
105
5,898
645,122
I built this thing called Clicky. It's an AI teacher that lives as a buddy next to your cursor. It can see your screen, talk to you, and even point at stuff, kinda like having a real teacher next to you. I've been using it the past few days to learn Davinci Resolve, 10/10.
1,302
1,170
583
15,730
3,001,152
Our growth team is hiring two software engineers! Partner with our team to run experiments in @code :) apply.careers.microsoft.com/… apply.careers.microsoft.com/…

| Microsoft Careers

See all open jobs at Microsoft

apply.careers.microsoft.com
10
18
2
116
9,293
Ahmed NB retweeted
Jamie Levy🦉
@gleedaFeb 12
We're looking for a Principal Threat Intel Incident Commander here at @HuntressLabs ! Do you love to: 🔍 Conduct #DFIR analysis? 👀 Track threat actors? 🕸️ Work with others across different departments? ✍️ Write about your findings? 👩‍💼 Present your work? 👇
4
31
1
89
17,588
BYOVD (Bring Your Own Vulnerable Driver) attacks are still an effective way to abuse kernel trust on Windows. I put together a hands-on walkthrough showing how a legitimately signed but vulnerable driver can be loaded and abused to perform privileged kernel actions — specifically, terminating a protected high-privilege process. 1/2
1
3
10
992
Full walkthrough + code here 👇 youtu.be/aIHJhuAiR6E github.com/nullcharb/BYOYD_Y… The demo walks through: Loading a vulnerable signed driver Interacting with exposed IOCTLs from user mode Abusing driver functionality to kill a privileged process 2/2
10
19
1,252
Ahmed NB retweeted
Evan Boyle
@_Evan_BoyleJan 14
Today we're open sourcing a technical preview of the GitHub Copilot CLI SDK. Build agents with custom tools in Go, Python, TypeScript, and C#. Built on the same agent loop that powers the Copilot CLI and GitHub Coding Agent. Supports BYOK, and any model. Here is the Copilot CLI driving Excel:
27
98
8
649
184,608
🎄 Holiday Week Offer 🎄 Level up your skills with 35% off my courses: 🔹 Offensive Development & Tradecraft 🔹 The Art of Malware Analysis Built for real-world security work — no fluff. 💸 Code: askholidays25 🔗 courses.ask-academy.live/ Valid for a limited time ⏳
1
6
7
963
Revamped my courses website, I was tired of maintaining wordpress and all the drama that comes with it. So this new one is based on Eleventy and I love it. Check it out: ask-academy.live/ Also year end discount will be announced on Monday, you would not want to miss it.

Hands-on malware analysis and offensive engineering—without fluff | Ask Academy Live

Hands-on malware analysis and offensive engineering training built by a Microsoft and CrowdStrike alum. Labs, code, and workflows you can use at work.

ask-academy.live
2
4
488
Next video on the channel where we analyze a CobaltStrike Loader, extract the xor encoded shellcode and then analyze that. This was a fun video to work on, I hope you enjoy. 1/2
3
3
4
1,078
Video Link: youtu.be/sPTsyzHg4Q4?si=vcE5… 2/2

Cobalt Strike Loader Internals: From Loader to Shellcode Execution

In this video, we analyze a Cobalt Strike Loader — a powerful compo...

youtube.com
2
4
273
Load more