Aels

Debugging - WinDBG & WinDBGX Fundamentals by Corelan corelan.be/index.php/2026…

🔎New #ABE #bypass spotted ITW #VoidStealer is the first #infostealer to weaponize a debugger-based technique that extracts the v20_master_key straight from browser memory, requiring neither privilege escalation nor code injection, making it significantly stealthier than existing methods – a truly elegant (and scary) technique. Full technical analysis ↓ gendigital.com/blog/insights/… IoC: f783fde5cf7930e4b3054393efadd3675b505cbef8e9d7ae58aa35b435adeea4 #infostealer #threatresearch #Chrome #malware #abe_bypass

Two bugs. One chain. Full RCE. New research by Aleksandr Zhurnakov on Dell Wyse Management Suite shows how business logic flaws can be chained into complete system compromise. Read the full writeup! swarm.ptsecurity.com/business-logic…

@vectrw @DarkWebInformer it's not. Btw you put my photo on your avatar.

@DarkWebInformer Ukrainian honeypot, owner should be executed for treason

RAMP Forum = TierOne Forum?

🚨Someone just open sourced a full satellite ground station - and it runs on a Raspberry Pi. It's called Ground Station. And it's not a simple tracker. It's a complete satellite monitoring suite, live spectrum waterfall, automated pass scheduling, antenna rotator control, signal decoding, AI transcription, and weather satellite image capture - all from a web browser. Here's what this thing actually does: → Tracks hundreds of satellites in real-time using high-precision orbital models (TLE auto-synced from CelesTrak) → Streams live SDR waterfall - RTL-SDR, HackRF, LimeSDR, USRP all supported → Automatically schedules and records satellite passes without any manual intervention → Controls antenna rotators to physically track satellites as they fly overhead → Applies Doppler correction to your radio in real-time during passes → Decodes SSTV, GMSK, BPSK, FSK, and AX25 packet framing live → Transcribes satellite audio in real-time via Gemini or Deepgram → Captures weather satellite images from METEOR-M2 automatically → Records raw IQ data in SigMF format with full satellite metadata Here's the wildest part: Professional satellite ground station software costs thousands of dollars and runs on enterprise hardware. This runs in Docker. On a Raspberry Pi. For free. 62 releases. Actively maintained. Built with Claude Code. 100% Open Source. GPL-3.0 License. (Link in the comments)

Bug write-up for "Google XSS part 3" ndevtk.github.io/writeups/2026/… \^o^/

this guy has 29 models on huggingface at page 2 ranking. no lab behind him. no sponsorship. $2,000 from his own pocket on GPU rentals. he compressed GLM-4.7 to run on a MacBook and quantized Nemotron Super the week it dropped. all public. all free. nvidia is a trillion dollar company with hundreds of teams but they are not the ones quantizing models middle of the night and pushing them out before sunrise. if nvidia stopped tomorrow their employees stop working. people like @0xSero would not. that is the difference between a paycheck and a mission. @NVIDIAAI you talk about making AI accessible. the people actually doing it are right here. 29 models deep burning their own compute with no ask except more hardware to keep going. you do not need to build another program. just look at who is already building for you. one GPU to this man would produce more public value than a hundred internal sprints. i am not asking for charity. i am asking you to invest in someone who already proved it.

We pointed @neo_ai_engineer at popular OSS projects and it found 22 zero-days across 13 of them, auth bypasses, RCE, SSRF, all validated against live running apps. See all findings 👇projectdiscovery.io/blog/everyone-…

#つぶやきGLSL for(float i,g,e,s;++i<65.;){vec3 p=vec3((FC.xy-.5*r)/r.x*.5+vec2(0,1.3),g-1.);p.zx*=rotate2D(t*.5+1.);s=1.8;for(int i;i++<18;p=vec3(0,4,.7)-abs(abs(p)*e-vec3(2.3,3.98+e*.12,4)))s*=e=5.4/dot(p,p*.5);g+=p.y/s;s=log2(s)+g*g;o.rgb+=.016-hsv(.25/p.y,p.z*.1,s/1e3);}

bemethyl is one of the most interesting compounds in the soviet pharmacology arsenal. developed in the 1970s by the same russian military-pharmaceutical complex that gave us bromantane and mexidol, bemethyl was designed for one specific purpose: maintaining peak cognitive and physical performance under extreme stress, fatigue, and hypoxic conditions. think soldiers, cosmonauts, special forces. the main thing you'll notice is that you simply don't fucking crash. you just keep putting up shots. it's not a stimulant, so it's not a focus spike. just the cognitive cliff that normally hits after sustained hard output gets pushed back significantly. you stay functional hours longer than you should. stress resilience is the other one. things that would normally scatter your focus land lighter. you stay composed without feeling blunted. the benefit is the absence of degradation. that makes it subtle but once you notice it you can't unfeel it. here's the mechanism that makes it interesting: bemethyl is an actoprotector - a class of compound with almost no western equivalent. just like bromantane. it enhances mitochondrial RNA synthesis and activates succinate dehydrogenase, shifting cellular energy production toward more efficient oxidative metabolism. it's increasing your cells' capacity to PRODUCE energy under stress rather than just stimulating output from existing capacity. it also induces synthesis of stress-protective proteins and enhances gluconeogenesis in the liver, which is why physical endurance under prolonged stress is dramatically improved. cognitively, it reduces the performance degradation that comes from sleep deprivation, hypoxia, and acute stress; and this might be the conditions where other cognitive enhancers can start failing you. you might be thinking... isn't this kind of similar to meldonium? not quite. both bemethyl and meldonium are soviet-era metabolic performance compounds, but they attack the problem from opposite angles. > meldonium restricts fatty acid oxidation to force more efficient glucose metabolism. > bemethyl directly enhances mitochondrial machinery to increase energy output capacity. one optimizes the fuel source, the other upgrades the engine. stacked together? they're basically covering the full metabolic picture. it's fucking beautiful. 250-500mg, take with food in the morning. 5 days on, 2 days off for a few weeks. swisschems.is/product/bemeth…

Introducing LiteParse - the best model-free document parsing tool for AI agents 💫 ✅ It’s completely open-source and free. ✅ No GPU required, will process ~500 pages in 2 seconds on commodity hardware ✅ More accurate than PyPDF, PyMuPDF, Markdown. Also way more readable - see below for how we parse tables!! ✅ Supports 50+ file formats, from PDFs to Office docs to images ✅ Is designed to plug and play with Claude Code, OpenClaw, and any other AI agent with a one-line skills install. Supports native screenshotting capabilities. We spent years building up LlamaParse by orchestrating state-of-the-art VLMs over the most complex documents. Along the way we realized that you could get quite far on most docs through fast and cheap text parsing. Take a look at the video below. For really complex tables within PDFs, we output them in a spatial grid that’s both AI and human-interpretable. Any other free/light parser light PyPDF will destroy the representation of this table and output a sequential list. This is not a replacement for a VLM-based OCR tool (it requires 0 GPUs and doesn’t use models), but it is shocking how good it is to parse most documents. Huge shoutout to @LoganMarkewich and @itsclelia for all the work here. Come check it out: llamaindex.ai/blog/liteparse… Repo: github.com/run-llama/lite…

Still working on my AV scanner without submit samples. w00t w00t

Hacking prison doors remotely, like in movies: vulnerabilities in Net2 ACUs from Paxton. 🚪💳🔗👩🏻‍💻🔓 More details on: LinkedIn: linkedin.com/posts/dlaskov_… Substack: it4sec.substack.com/p/hacking-pris…

#ESETresearch analyzed more than 80 EDR killers, seen across real-world intrusions, and used ESET telemetry to document how these tools operate, who uses them, and how they evolve beyond simple driver abuse. welivesecurity.com/en/eset-resear… 1/6

(EXCLUSIVE) New investigation: Who runs Cl0p ransomware? Months of reporting, cross-referencing forum records, dossiers, and confidential sources identifies the group's operators, developers, access brokers, and infrastructure. rmoskovy.github.io/posts/who-runs… #Ransomware #Cl0p #ThreatIntel #osint #clop #security #research

@rmoskovy 2) I’ve helped them, they helped me when I felt in trouble. It’s a gentlemen’s act from their side. We all are humans after all.

@rmoskovy 1) I’m kinda surprised. My relationship to cl0p was the same as to hundreds of other ppl and tens of teams I’ve helped over the years with technical stuff. Don’t think that we only doing things for money. it’s a joy for me to solve complex challenges.

This is wild. 143 million people thought they were catching Pokémon. They were actually building one of the largest real-world visual datasets in AI history. Niantic just disclosed that photos and AR scans collected through Pokémon Go have produced a dataset of over 30 billion real-world images. The company is now using that data to power visual navigation AI for delivery robots. Players didn't just walk around with their phones. They scanned landmarks, storefronts, parks, and sidewalks from every angle, at every time of day, in lighting and weather conditions that staged photography would never capture. They documented the physical world at a scale no mapping company with a fleet of vehicles could have replicated on the same timeline or budget. Niantic collected this systematically, data point by data point, across eight years, while users thought the only thing at stake was catching a rare Charizard. The most valuable AI training datasets in the world aren't being assembled in data centers. They're being built by people who have no idea they're building them.

«Reverse engineering»

This blog walks through Android deep link and WebView exploitation, bypassing host validation to exfiltrate credentials from shared_prefs via JavaScript: 8ksec.io/android-deepli… Tested on InsecureShop using ADB + Frida.