We've been waiting 5 years for this: objection has been updated to 1.12.x with Frida17+ support. Thank you so much @leonjza.bsky.social and everyone who contributed! github.com/sensepost/ob... Thanks to @ipmegladon.bsky.social for updating the MASTG accordingly (OWASP/mastg/pull/3378)

It's... been a while since the last objection release got tagged. We finally landed a 1.12 release today which also means pypi is up to date again, and for the foreseeable future! Work never really stopped, and plenty of bug fixes are included. More in 🧵 github.com/sensepost/ob...

Made this last night, it’s useful for finding a large number of domains hosting phishing kits or malware based on a consistent pattern github.com/singe/domain-p… Might be useful for some of you.

Need to open doors from the outside without touching anything? Turns out thats possible with no touch sensors as @shifttymike.bsky.social details in his latest blog post. sensepost.com/blog/2025/no...

Landed a new gowitness release, this time focussing on performance! 🎉 v3.1.0 github.com/sensepost/go...

Tradecraft Engineering with Aspect-Oriented Programming @rastamouse.me pretty much predicted what was coming in his last blog post. attach (Win32 APIs), redirect (local funcs), capability right-sized IAT hooks, and PICO function exports. Yes, attach can incept its PIC. aff-wg.org/2025/11/10/t...

I've also updated Crystal Loaders to benefit from some of the new CP features github.com/rasta-mouse/...

ATT&CK v18 is now out! Today marks the release of Detection Strategies, where we've moved from single-sentence notes to structured, behavior-focused strategies across the board. A new blog post describes the changes medium.com/mitre-attack... with details at attack.mitre.org/resources/up....

Just added SOCKS support to this reverse tunnelling tool github.com/singe/contun...

github.com/singe/contun.p… this was a fun nerd snipe - how do you build a listed:listen connect:connect reverse tunnel that can handle concurrent connections when you only have Perl.

🚀 Insomni’hack 2026 is coming! 🗓️ March 16-20 @ SwissTech, Lausanne Mon-Wed: Workshops | Thu-Fri: Talks | Fri-Sat: CTF 👉 More details soon: https://ow.ly/S3uv50XgSuS 🔔 Save the dates & stay tuned! #INSO26 #cybersecurity #CTF #event #Lausanne

Working on a new PICO! This one is an in-memory CLR hoster that uses the same technique as execute-assembly/donut to invoke a .NET assembly without touching the disk.

📢Insomni'hack Call for Paper is now open! The CFP 2026 is now accepting submissions. Want to speak, lead a workshop, or present a case study? We want to hear from you! 🔗 Submit: https://ow.ly/nNov50Xbylu #InsomniHack #CFP #Cybersecurity #Infosec #TechTalks

pagedout.institute ← we've just released Paged Out! zine Issue #7 pagedout.institute/download/Pag... ← direct link lulu.com/search?page=... ← prints for zine collectors pagedout.institute/download/Pag... ← issue wallpaper Enjoy! Please please please share to spread the news - thank you!

Romhack was absolute 🔥! The conference, the community, the vibe - all of it was just something else. Special mention to merlos1977@x and the CybersaiyanIT@x team for making the speaking experience excellent too. 🙃

🇮🇹👋

Soon™ Private invites at Romhack next week, public release a while later.

added a cheat sheet to the official Git website (with a lot of help from other folks who work on the website) git-scm.com/cheat-sheet

I've been hacking on a new Windows Named Pipe tool called PipeTap which helps analyse named pipe communications. Born out of necessity while doing some vulnerability research on a target, its been super useful in reversing it's fairly complex protocol. :)

Did you know your MacBook has a sensor that knows the exact angle of the screen hinge? It’s not exposed as a public API, but I figured out a way to read it and make it sound like an old wooden door.

Using @radareorg.bsky.social to dynamically get the virtual address of a @golang.org embed.FS structure to extract some sus embed's with go-embed-extractor¹ in this "dodgy-go-bin" 🔥 ¹ github.com/BreakOnCrash...

Phrack turns 40. The digital drop is live. Download it. Archive it. Pass it on. 💾 www.phrack.org #phrackat40 #phrack72

Hah! Made it to a @badsectorlabs.com LWiS release with my collection of bloatware exploits released @defcon.bsky.social earlier this month! Check out the POC's for CVE-2025-3462, CVE-2025-3463, CVE-2025-27812, CVE-2025-27813, CVE-2025-5491 and CVE-2025-27811 here: github.com/sensepost/bl...

Always dig the @defcon.bsky.social artwork around the convention center.

👋 Vegas! 🔥👀

Reverse engineering Microsoft’s SQLCMD.exe to implement Channel Binding support for MSSQL into Impacket’s mssqlclient.py. Storytime from Aurelien (@Defte_ on the bird site), including instructions for reproducing the test environment yourself. sensepost.com/blog/2025/a-...

Had a fairly complex exploit for an LPE, when @ipmegladon.bsky.social showed me a way to make it a one-liner last night. Gosh I love working with the people @sensepost.com.

[BLOG] My thoughts (and code examples) for writing modular PIC C2 agents. rastamouse.me/modular-pic-...

The Apple Watch has a closed down ecosystem, only compatible with the iPhone. Nils reverse engineered its interfaces to open it up for Android! ✨ WatchWitch ✨ allows using your Apple Watch ⌚ on Android devices, interpreting your health data, answering messages on the Watch & more. (1/2)

This was fun to see coming to life given the situation Adriaan found himself in! And in no time, he made a plan 🙃

Introducing the BloodHound Query Library! 📚 @martinsohn.dk & @joeydreijer.bsky.social explore the new collection of Cypher queries designed to help BloodHound users to unlock the full potential of the BloodHound platform by creating an open query ecosystem. ghst.ly/4jTgRQQ

Quite stoked to be speaking at @defcon.bsky.social 33 this year, presenting: "7 Vulns in 7 Days: Breaking Bloatware Faster Than It’s Built". Reversing, exploits, disclosure pain - it has it all, and it's going to be fun! 💥 See ya soon Vegas. ☀️

I was talking with someone about dependency confusion and suply chain attacks and I was confused myself with the feasibility of doing this in 2025, so I decided to take a practical aproach and create my own tool 🔨 to detect Orphan and Mispelled packages 📦: sensepost.com/blog/2025/de...

[BLOG] Integrating Tradecraft Garden PIC loaders into Cobalt Strike rastamouse.me/harvesting-t...

Looking for the keys to BeaconGate? In our latest blog, get a walk through of techniques that show how BeaconGate can be used to quickly PoC, debug, and weaponize custom call stack spoofing routines in Cobalt Strike. www.cobaltstrike.com/blog/instrum...

So, here's a little thread on my new open source project: The Tradecraft Garden. tradecraftgarden.org It's Crystal Palace, an open-source linker and linker script specialized to writing PIC DLL loaders. And, a corpora of DLL loaders demonstrating design patterns building tradecraft with it.

Excited by this proposal to gate access to local network resources in browsers. It would block at least one exploit chain I found this year as an example. github.com/explainers-b...

Great thread that challenges what you know about modern WiFi hacking. The next iteration of our BlackHat Las Vegas course takes it further — you do the hacking, hands-on, in the cloud. Sign-up link at the end of the thread.

llm-llama-server now supports tools, which means this demo should work (if you have 3.2GB free): brew install llama.cpp llama-server --jinja -hf unsloth/gemma-3-4b-it-GGUF:Q4_K_XL uvx --with llm-llama-server llm -m llama-server-tools -T llm_time 'what time is it?' simonwillison.net/2025/May/28/...

I’m seeing a large disconnect between “thought leader” takes about AI aiding attackers versus hands-on practical use - but I’d love a wider view. If we look at deepfakes, malware & phishing as the most common places people believe attackers are advantaged by AI one by one 1/5

🆕 New blog post! It's a rather short one, nothing crazy. Just wanted to share a random finding I made recently. 🤷‍♂️ 'Hijacking the Windows "MareBackup" Scheduled Task for Privilege Escalation' 👉 blog.scrt.ch/2025/05/20/h... #pentest #pentesting #redteam #windows #privilegeescalation

Punching through NAT like it’s paper 💥✉️ – Tailscale connects your devices peer-to-peer even behind NATs. Curious how? Our “How NAT Traversal Works” blog unpacks the tricks (STUN, hole punching, and more) we use to get through firewalls and routers. 🔗 tailscale.com/blog/how-nat-traversal-works

We are very excited to announce that Volatility 3 has reached parity with Volatility 2! With this achievement, Volatility 2 is now deprecated. See the full details in our blog post: volatilityfoundation.org/announcing-t...

I’m really enjoying nerve for building agents, but found myself wanting to limit tool output to reduce input tokens or avoid tripping message length limits, so I made this PR https://github.com/evilsocket/nerve/pull/58 For example, this page parameter was auto added by nerve.

CLion Is Now Free for Non-Commercial Use | Discussion

mitmproxy 12 is out! 🚀 It’s now possible to modify the prettified representation of binary protocols. Editing Protobufs is now as easy as editing YAML, no .proto schema needed. 🙌 mitmproxy.org/posts/releas...

Working with s/mime on macOS has first class support with the "security cms" command and keychain. Here's how to replace openssl with it, with the mutt mail client being the specific use case github.com/singe/smutt