Colton Knight

@vxunderground @cyberwarfarelab

Hello. I have partnered with @cyberwarfarelab to give away FOUR HUNDRED (400) vouchers to their Infinity Learning Pro Plan. This is worth $119,600. - 130+ hands-on labs, including advanced attack chains - Unlimited challenge time - Monthly new challenges & scenario updates - Leaderboards for nerds - ??? This is a massive giveaway. How to enter: 1. You NEED a Gmail account. IF YOU ARE SELECTED AS A WINNER authentication is performed via Gmail. It does NOT have to be your real Gmail. It can be a disposable email. However, if you DO NOT have a Gmail you WILL NOT be able to authenticate. 2. This is a pit of doom. You're all fighting. Leave a comment below with an IMAGE of your SILLIEST weapon of choice. 3. This giveaway will be active for the next 48 hours (unless I get bored). It is November 30th, 2025. If you comment AFTER December 2nd, 2025 then you're a big stinky nerd. You have missed the pit of doom. 4. Winners will notified by me commenting your comment. If you do not respond to the DM within 24 hours (if you're selected) you forfeit your win and someone else is chosen. PAY ATTENTION. Good luck in the pit of doom. Have fun. I expect lots of laughs from the silliness. Cheers,

🧵 THREAD: A federal whistleblower just dropped one of the most disturbing cybersecurity disclosures I’ve ever read. He's saying DOGE came in, data went out, and Russians started attempting logins with new valid DOGE passwords Media's coverage wasn't detailed enough so I dug into his testimony:

@vxunderground @vxdb May I obtain swag

Hi, we're on giveaway number ??? Thanks to @vxdb and 3kh0, we're giving away $220 worth of vx-underground merch (mini shopping spree?) - Winners will be selected randomly in the next 24 hours. - We will DM winners. - If you do not confirm your win in 24 hours a new winner will be selected - If your DMs are closed, you automatically forfeit your prize See subsequent tweet for merch store information

Just released Cable v1.0! New changes include but aren't limited to: reading/writing DACL entries on objects, a complete reformatting of the output into a tree style, adding computer accounts as apart of an RBCD attack, and writing DONT_REQ_PREAUTH. github.com/logangoins/Cab…

10月！　加筆＆再掲～

Me 12am October 1st

Created another write-up, this time on NTLM relay attacks to LDAP(S), including details of WebClient coercion, NTLM transport vulnerabilities, and finally device takeover after achieving authentication. You can read about it on my blog :) logan-goins.com/2024-07-23-lda…

@vxunderground X-Large Hoodie

We're doing a giveaway because of excess sponsor money. Option A. vx-uwu white t-shirt Option B. vx-uwu black hoodie Option C. vx-uwu black sweatshirt Comment which option you'd like and what size. Sizes available are Small - 2XL. We'll choose random nerds.

This was inspired by @x86matthew's now deleted blog post from 2022 on the subject

I spent some time today trying to write a POC for a self unpacking LNK payload.The python code is a bit convoluted, but the payload that it generates is fully functional and able to run without any external file dependencies. github.com/bcoltonknight/…

Why do I have a Cask of Amontillado soyjak. In what context would I need a Cask of Amontillado soyjak

@vxunderground Malware gaming

In less than 24 hours we will officially be 5 years old. We are giving away $1,000 worth of our "5 horsemen of the apocalypse" shirt. If you'd like a free shirt leave a comment below.

Some really cool analysis of the Palo vuln that dropped this weekend

@lauriewired @patrickwardle B o o k

Happy Holidays everyone! I'm giving away 5 copies of the Humble Tech Book Bundle: Hacking 2023 by No Starch Press! The bundle includes 19 excellent books, including some of my personal favorites such as: Art of Mac Malware by @patrickwardle Practical malware Analysis by @mikesiko and Andrew Honig Rootkits and Bootkits by @matrosov, @vxradius and @sergeybratus Leave a comment to enter!

@vxunderground @MalDevAcademy @mrd0x 👉👈

Hello, are you a nerd who likes malware? Us too! Our sponsor @MalDevAcademy has hooked us up with 3 lifetime licenses to their courses. Thank you to @mrd0x for the gifts! Leave a comment below for a chance to win!

We are GIVING AWAY a LAMB PC with @aftershockpcAU ! ✨️✨️✨️✨️ As a thank you to all the new Cult followers even if we're concerned about what you'll do with it if you win.🫡 ❤️Like 🔁 Retweet 👤 Be Following us for a chance to win!

@Malcoreio @vxunderground Gaming

Giveaway time. Prizes are as follows: - 1 Malcore hoodie - 1 reverse engineer lifetime plan - 1 complete @vxunderground sample db - 2 Cyber Analyst lifetime plans - 3 Analyst lifetime plans To win, comment on this post. Winners will be randomly selected from there. This giveaway ends Monday November 26th, 2023 12pm CST. Winners will be decided after giveaway end. Also, yes Malcore: malcore.io And join the community discord: discord.gg/ursPJGHdg8

@Malcoreio @vxunderground Give malware

We're doing a HUGE giveaway. We're giving away 20 copies of Black Mass Volume II by @vxunderground and 2 free paid plans (1 Analyst plan, 1 Cyber Analyst plan). In order to win, comment below until Sept 27th 2023 (one week and winners will be selected). This giveaway would not be possible without the generous donation from @Laughing_Mantis. Everyone thank them as well.

Dug into call stacks spoofing for the past few months and wrote something. Hopefully this is helpful. dtsec.us/2023-09-15-Sta…