@zerros666

give me pills and let me research

 Home
z3r0s6.github.io/
Joined October 2025
  • Tweets10
  • Following467
  • Followers78
3Media
VIETJACK: ActiveMQ exploitation toolkit with cross-platform Go backdoor targeting 14 architectures and a Veeam deserialization exploit. All sitting in an open directory. z3r0s6.github.io/posts/vietj…
2
1
8
207
I recently got 5 CVEs + a bug bounty: - rsync: 3 CVEs (chroot escape, DoS, CPU loop) - WordPress AWP Classifieds: payment bypass (CVE-2026-65469) - Gitea: draft release files leak (CVE-2026-58432) - Privy: wallet authorization bypass Writeups: z3r0s6.github.io/posts/
3
9
1
109
5,773
small update: had to pull the Privy writeup for now, the program's disclosure policy doesn't allow it yet. the other 4 are still up. hoping to share it later if they say ok :)
42
Found a C2 server with its directory left wide open. Inside: Sliver, a Java deserialization payload, a fake MySQL server, and stolen Active Directory creds. z3r0s6.github.io/posts/expos…
2
15
614
z3r0s6 retweeted
Smukx.E
@5mukxSep 10
No BloodHound? No PowerView? Query AD yourself. SpecterOps posts break down manual LDAP enumeration with dsquery/ldapsearch, covering filters, group nesting, SPNs, UAC bitmasks, trusts, and cross-domain relationships. Know LDAP, know AD. - specterops.io/blog/2021/06/0… - specterops.io/blog/2024/05/0…
4
74
387
12,532
z3r0s6 retweeted
Smukx.E
@5mukxAug 10
DEF CON 33 - Turning your Active Directory into the attackers C2. TL;DR: GPOs can turn Active Directory into a powerful C2 primitive. This talk dives into GPO internals, enumeration, persistence, privilege escalation, and advanced exploitation techniques.
6
175
1
880
34,584
Load more