My IOActive, Inc hack::soho talk on wSAST is finally online! If static code analysis interests you then you may enjoy hearing a little about the journey, trials and tribulations of building a SAST engine from scratch! youtu.be/QEBRx42uk50?si…

Having a great time and enjoying the talks at Redtreat 😎

Our activation server had a problem updating which may have made activation of wSAST fail - if you encountered this please try again it should all be fixed now!

Code name: Invisiwiener 🌭🫥

Ready for some Thanks Giving reading? Nighthawk 0.3.3 Evanesco is now live for customers nighthawkc2.io/evanesco/ #happythanksgiving

Lots of stuff squeezed into this release, hopefully worth the wait!

I am excited to share with you my latest research - "DCOM Upload & Execute" An advanced lateral movement technique to upload and execute custom payloads on remote targets Forget about PSEXEC and dive in! deepinstinct.com/blog/forget-ps… github.com/deepinstinct/D…

January 27th 15:30 GMT. Join us for a live webinar showcasing some of Nighthawk's key features and evasive capabilities. Orgs can apply to register here: vimeo.com/event/4810278

What if DeepSeek is just ChatGPT o1 rebranded and this entire thing is just a move to make US tech stocks fall so the Chinese can buy up at bargain prices

Rasta Mouse Tim 😅 I made it public anyway, vimeo.com/1042032401?sha…

Stumbled on ServiceNow during a red team? If not you might want to check our latest post on Red Teaming with ServiceNow by Tim mdsec.co.uk/2025/03/red-te…

Kept this one under wraps for a while, but happy to finally say 0SKR and Luci are joining Peter Winter-Smith, @modexpblog, dylan and S4ntiagoP in the MDSec R&D team next week... big things are coming 🥳

Only a couple more weeks left on the early bird discount for our Black Hat training with myself, dylan and Tim - Lots of fresh new material for 2025. This course isn't just about tradecraft, the focus is on building capabilities that will help red teams succeed

Taha always working on something new 💪🏻🔥

I have launched YSoNet (ysonet.net) and added #SharePoint CVE-2025-49704 payload generator to it as the first thing. Here is how this can work: Running command: ``` ysonet.exe -p sharepoint --cve=CVE-2025-49704 -var 1 -c "calc" ``` Running C# code: ``` ysonet.exe

If it’s true that Soroush Dalili is looking for a new full-time position I recommend anyone wanting to hire an elite-level web/.NET researcher or consultant reach out to him immediately as he won’t be looking for long!

In our latest blog post, we detail how you can leverage the Nighthawk API to streamline your Red Team Ops.... Automating Operations with Nighthawk - nighthawkc2.io/automating-ope…

Amazing work from the team!

Nice work sabotage 🔥