Pinned Tweet
[Blog] Abusing .NET Core CLR Diagnostic Features (+ CVE-2023-33127)
- Analysis of .NET diagnostic features and tradecraft
- Walkthrough of a .NET Cross-Session Local Priv Esc (LPE)
- Defensive Recommendations
bohops.com/2023/11/27/abu…
- Analysis of .NET diagnostic features and tradecraft
- Walkthrough of a .NET Cross-Session Local Priv Esc (LPE)
- Defensive Recommendations
bohops.com/2023/11/27/abu…
4
84
207
46,780
bohops retweeted
more hackers you should follow:
@v3ga_hax
@lauriewired
@domchell
@chompie1337
@_subTee
@S1n1st3rSecuri1
@ShitSecure
@rvrsh3ll
@0xBoku
@bohops
@v3ga_hax
@lauriewired
@domchell
@chompie1337
@_subTee
@S1n1st3rSecuri1
@ShitSecure
@rvrsh3ll
@0xBoku
@bohops
6
14
99
3,842
Awesome seeing great folks win like this. Congrats @dreadnode team!
CrowdStrike has signed a definitive agreement to acquire Dreadnode.
As part of the Falcon platform and @CrowdStrike's Cyber Superintelligence Lab, we'll bring automated AI security testing to every enterprise, so teams can find and fix weaknesses in their models and agents before they reach production.
We've always run Dreadnode like a lab, and now we get to build with one of the largest security companies in the world. This isn't an exit for us. It's a call-up to the big leagues, with more resources and a higher bar.
Thank you to our customers, partners, and community for getting us here. The mission doesn't change: ensure AI strengthens defenders faster than it strengthens their adversaries.
Read the full announcement ⬇️
0
1
12
1,041
bohops retweeted
Fifteen years ago, I co-founded MDSec. Today, that journey comes to an end.
In that time, we’ve written books, spoken at almost every major conference, and discovered and exploited more 0-days than I could count. We’ve hacked banks, $tock exchanges, tech giants, frontier AI orgs nies in between. We’ve jackpotted ATMs, intercepted money from payment systems, compromised mainframes, beaconed mobile devices and got r00t more times than I can remember.
A huge thank you to everyone on the MDSec team and all the MDSec alumni, who helped make it such a wild ride. I’m immensely proud of what we built. And to all our customers, past and present, thank you for the trust and opportunities you gave us.
I’m excited for the next chapter. If the next 15 years are anything like the last, it’s time to strap in.
In that time, we’ve written books, spoken at almost every major conference, and discovered and exploited more 0-days than I could count. We’ve hacked banks, $tock exchanges, tech giants, frontier AI orgs nies in between. We’ve jackpotted ATMs, intercepted money from payment systems, compromised mainframes, beaconed mobile devices and got r00t more times than I can remember.
A huge thank you to everyone on the MDSec team and all the MDSec alumni, who helped make it such a wild ride. I’m immensely proud of what we built. And to all our customers, past and present, thank you for the trust and opportunities you gave us.
I’m excited for the next chapter. If the next 15 years are anything like the last, it’s time to strap in.
62
30
511
21,542
bohops retweeted
The bypass of LDAP Signing Through Reauthentication described in @SpecterOps blog also works with pure Kerberos relay. too ;-)
2
70
297
11,099
bohops retweeted
Video of my @UnpromptedAU & Bsides Canberra talks out now
I built an autonomous N-Day exploit pipeline for the Windows kernel w/ mix of deterministic and AI-led stages. Results were comparable to what Anthropic achieved with Mythos using a much less powerful model.
I built an autonomous N-Day exploit pipeline for the Windows kernel w/ mix of deterministic and AI-led stages. Results were comparable to what Anthropic achieved with Mythos using a much less powerful model.
Now online from BSides Canberra 2026: @chompie1337 presents “Building an Autonomous N-day Exploit Generation Pipeline”.
Watch now: youtu.be/03Xh_6_6U4M
10
61
263
16,567
bohops retweeted
New talk up OAIC 2026: Vibe Fuzzing with Sam Lovejoy @_dinolover38 of IBM X-Force Offensive Research.
Sam explores how graph-based inputs, program state, and LLM guidance come together in an AI-guided fuzzing engine- and the tradeoffs behind it.
Watch the full talk: offensiveaicon.com/vibe-fuzzing
#OAIC #OffensiveAI #Fuzzing
Sam explores how graph-based inputs, program state, and LLM guidance come together in an AI-guided fuzzing engine- and the tradeoffs behind it.
Watch the full talk: offensiveaicon.com/vibe-fuzzing
#OAIC #OffensiveAI #Fuzzing
2
19
90
5,946
bohops retweeted
Reposting because it’s good (you might have seen this before but it gets updated)
”UltimateWDACBypassListPublic
A centralized resource for previously documented WDAC bypass techniques”
Author: @bohops
”UltimateWDACBypassListPublic
A centralized resource for previously documented WDAC bypass techniques”
Author: @bohops
1
2
13
1,154
This is quite the sanctimonious line from inside the building.
However, I do agree with the advice to get help and leadership buy-in to address the basics. Hygiene has never been more important in cyber, and it will still be important in 18 months.
However, I do agree with the advice to get help and leadership buy-in to address the basics. Hygiene has never been more important in cyber, and it will still be important in 18 months.
@hinapansari yes. it was always going to be this way. we tried to warn the world.
2
3
10
1,176
bohops retweeted
🦛🦛🦛Microsoft patched PetitPotam this October: EFSR now only resolves local paths. This means WebDAV to LDAP Coercion is fixed!
Remaining methods for clients are WSP (coercing SMB) and PrinterBug (coercing RPC), but both cannot be relayed to LDAP 💀💀💀
Remaining methods for clients are WSP (coercing SMB) and PrinterBug (coercing RPC), but both cannot be relayed to LDAP 💀💀💀
9
99
287
19,709
bohops retweeted
We're hiring a Principal Security Research Engineer (AI Security)! Looking for someone with a strong background in threat research, detection & offensive security, and a passion for detecting and preventing AI threats.
Apply here: tinyurl.com/2pd2u8sr
Apply here: tinyurl.com/2pd2u8sr
3
13
40
5,136