#Exploitdev

Awesome-Red-Teaming just hit 1k stars. phase map, not a 2018 graveyard. AD/Entra · EDR bypass · C2 · AI red team · fuzzing shoutout @hetmehtaa @PadhiyarRushi for the push. #RedTeam #ExploitDev #InfoSec

PS5 14.10 — The research is entering a critical stage. WebKit primitives, heap stability and memory disclosure are the main focus. The biggest remaining challenge is a reliable kernel exploit chain. No finish line yet, but progress matters. #PS51410 #PS5Jailbreak #ExploitDev

Best books, tutorials and courses to learn about exploit development #infosec #pentest #exploitDev

🚨 another potato just dropped CouchPotato: SeImpersonate → SYSTEM ETW + AMSI patched. indirect syscalls. service account or admin → NT AUTHORITY\SYSTEM #ADSecurity #ExploitDev #InfoSec

Inject .Net payloads into other .Net assemblies on disk #infosec #pentest #exploitDev

You can also subscribe to @eLearnSecurity YouTube channel to watch my "Offensive Software Exploitation" course for free: #Exploitdev #OSE #exploitation

Exploiting Format Strings in Windows #infosec #pentest #exploitDev

Full linux LPE just popped in my lab. uid=0 on the demo. full writeup + PoC after disclosure. tech details stay closed until then. #Linux #LPE #ExploitDev #InfoSec

IIS AppPool RCE is not the end of the story. AppPool hits AD CS RPC → Windows promotes it to the machine account → Machine cert → TGT → S4U2Self admin. no Potato required. #ADSecurity #ExploitDev #InfoSec

PROLAPSE // PS5 14.10 WebKit UAF. Heap manipulation. Memory primitives. Kernel research. Still reversing. Still digging. "0x14.10 ≠ GAME OVER" 🔬 #PS5Jailbreak #ExploitDev #Codex

🚨 Redis server RCE PoC dropped use-after-free in tlsProcessPendingData() patched in 8.8.2 #ExploitDev #BinarySecurity #InfoSec

🚨 CVE-2026-43786 macOS CoreServices local app to root. CVSS 7.8. Apple's line is short. an app may be able to gain root privileges. Malwation shipped the C PoC and a video of it landing. #macOS #ExploitDev #InfoSec

Interested in Software Exploitation? This course is for you and will take you from knowing nothing, to understanding how exploits work and how to write them... I hope it will be useful to someone out there! #Offsec #Cybersecurity #ExploitDev #Debugging

New blog post - "QuickZip 4.60 - Win7 X64 SEH Overflow (Egghunter) With Custom Encoder" - #infosec #exploitdev #seh

Uploaded all my Offensive Security & Reverse Engineering (OSRE) course labs (docx) to my repo found below. Most of them have very detailed instructions and should be great to get you started in Software Exploitation. 1/n #Offsec #SoftwareExploitation #RE

All the Assembly and #RE labs have now been shared. I just need to find the reference to the Crackme(s) I used and then it should be 100% complete. #Offsec #ExploitDev #SoftwareExploitation

This should be the final set of labs published publicly. That's all folks for now... #RE #Offsec #ExploitDev #SoftwareExploitation

🚨 Rasterfall just dropped Satori → Sharp → librsvg 0day RCE XML inject via title/desc text UAF in librsvg/libxml2 → ROP on Node 24.20.0 OG image pipelines are RCE sinks. credit @sybr1d_ #VulnerabilityResearch #ExploitDev #InfoSec

Linux Exploit Development Techniques #infosec #pentest #exploitDev

Smashing the Stack Part 2 - Building the ROP Chain #infosec #pentest #exploitDev

Interactive shellcoding environment to easily craft shellcodes #infosec #pentest #exploitDev

Course materials for Modern Binary Exploitation by RPISEC - outstanding material !!! Thank you for sharing @RPISEC #infosec #pentest #exploitDev