@Defender0x58

Spending quality time with my 13 year old daughter 😀hacking Blue on hackthebox.eu. #hackthebox #FatherAndDaughterHacking #GirlsWhoHack

You can explain exactly what CreateProcess does. What happens when you type ls on Linux? On Aug 17 I'm teaching a 4-hour live tiny masterclass mapping Windows internals onto Linux. Hands-on labs, $59, includes a $59 TrainSec course voucher. trainsec.net/events/linux-i…

🤓 After 15 years of threat research, I am building something new! Today, @SecurityBreakAI officially becomes a company focused on AI Threat Intelligence and AI Security! The new website is live! Check it out :) securitybreak.io

Congratulations to John Tear & Ahmed Alshammari (@ahmed_vapt) for becoming the first two SANS SEC760 "advanced exploit dev" students to earn the post-course challenge coin. Students must identify multiple Windows Kernel exploit primitives, chaining them together to elevate privs!

I just published the materials of my MIPS reverse engineering workshop from Recon, enjoy :) I've got this strange obsession with cross-architectural malware, and now you can too! github.com/pinkflawd/MIPS…

Windows Kernel Driver Code & Exploitation Techniques x.com/i/broadcasts/1…

It's alive!

I am really excited about this one and honored to be presenting our @_CPResearch_ research at @SLEUTHCON next week 🤗💯💪 It's gonna be a ride 😉😁 See you in Washington 💙

@patrickwardle @jbradley89 @naehrdine @Helthydriver 6️⃣ "macOS Vulnerability Research" macosvuln.training Taught by @theevilbit and @gergely_kalman, this *new* training focuses on macOS vulnerability research (VR), with an emphasis on logic flaws and understanding Apple’s unique protections and attack surfaces.

I'm excited to announce that I'll be returning to Vegas for @BlackHatEvents with the FLARE team to help deliver our 4 day advanced class! This is an almost entirely rewritten course that now features: ✅ Reversing GO and Rust binaries ✅ Leveraging time-travel debugging ✅ Deobfuscating scattered control flow 👉 #the-flare-teams-advanced-guide-to-defeating-modern-malware-50978" target="_blank" rel="nofollow noopener">blackhat.com/us-26/training… Hope to see you there! DMs are open if you have any questions.

New Post: Exploit Writing Tutorial Part 2 - Jumping to shellcode - The Video corelan.be/index.php/2026…

New Post: Mona, tellme - AI-assisted crash triage 🧠 corelan.be/index.php/2026…

You may have found that some tools offering legacy HTTP+SSE MCP interfaces are fault prone and have connections that break in your agents. I wasted a lot of time on debugging this last year, now I'm publishing some modular middleware to take care of this: github.com/FuzzySecurity/…

The wait is over! mona v3 is now available. Supports Python 2 & 3, 32- and 64-bit targets, WinDBG/WinDBGX. Faster, leaner, broader built for modern Windows debugging and exploit development. #mona #corelan github.com/corelan/mona3 Sharing is caring 💛

For those who scored #BSidesCharm 2026 training seats, please be in your seats at least 15 minutes prior to session start - if not in seat, you will be considered a NO SHOW and your seat will be given to next in line

AirTouch from @hackthebox_eu is a wireless box featuring SNMP enumeration, WPA2-PSK capture and crack, WireShark traffic decryption, client-side cookie role bypass with a phtml upload, and an evil twin via eaphammer to capture a crackable challenge. 0xdf.gitlab.io/2026/04/18/htb…

I am excited to announce that I will be speaking at @bsidesnash on May 15th. Be sure to attend to see all the latest @volatility 3 plugins against the most sophisticated and devastating malware from the wild!

Memory-only malware leaves no trace on the file system & is commonly used by threat actors ranging from criminal organizations to ransomware operators to APTs. In our @volatility 3 training, students gain deep hands on experience analyzing such threats: memoryanalysis.net/courses-malwar…

New episode 📢 Ep 172 "SuperBox" What if there was a device which gave you endless movies and TV shows without ads? Ok great sign me up! In this episode we interview "D3ada55", who found such a device, but as she gazed into it, she discovered it gazing back at her. darknetdiaries.com/episode/172/

Speakeasy emulator v2.0.0b2 just dropped. Many more improvements by @williballenthin. Please provide feedback before we release v2 in the upcoming weeks. - pypi.org/project/speake… - github.com/mandiant/speak…

Join me tomorrow, April 3rd at 8AM PT for the next @offby1security stream with @psifertex (Jordan Wiens) for a session on "Reversing and Binja: What's New; What's Next!" youtube.com/watch?v=bJxEtx…