Mayfly

Goad v3 merged into the main branch 🥳 Github : github.com/Orange-Cyberde… Doc : orange-cyberdefense.github.io/GOAD/

Excited to share our research on Process Parameter Poisoning with Max Hirschberger! We detail a novel process injection technique using parameters as an attack surface & released ⁠p3-loader⁠ (PoC). sensepost.com/blog/2026/proc… github.com/Orange-Cyberde… #Malware #WindowsIntetnals

Just open-sourced CredSpy Couldn't find any tools that allowed unauthenticated enumeration of auth methods for @Microsoft accounts, so I created it. Shows whether target accounts use Passkeys, certificate auth, passwordless push, etc... Find it here: github.com/RedByte1337/Cr…

CI/CD pwnage with a pre-auth RCE in #ArgoCD by @hugow_vincent 💥 Discover how a single misconfiguration in a Helm chart can lead to a full cluster compromise sprinkled with some CodeQL shenanigans! 🥷 synacktiv.com/en/publication…

I was playing around AMSI and came up with some interesting bypass techniques. 6 techniques validated with a live reverse shell on a fully patched Windows 11, Defender on. bl4ckarch.github.io/posts/One-Bool… #AMSI #RedTeam #WindowsSecurity #ReverseEngineering #Pentest

Onelogon: Taking over Active Directory Accounts via Netlogon🔑 We analyzed Netlogon, bypassed the Zerologon patch, resulting in a full auth bypass. An attacker can leverage this to compromise computer accounts, or even the entire AD. Non-standard config must be present tho 🧵

I’m sharing my slides from @x33fcon 2026. Inside ~15 examples of abusing traitorware to execute your payload via trusted & signed binaries (e.g. VLC Player, SublimeText) and how to find more of them. Recording will be published soon. github.com/Print3M/MyTalk…

Ludus Feature Friday! The new 2.2.0 release brings "sources" which allow you to easily add blueprints, templates, and roles to your Ludus host. We even converted @M4yFly GOAD to a fully Ludus-native blueprint! Check out the full change log and video here: ludus.cloud/changelog/2.2.0

MSSQL has always been a favorite target. Now it ships its own egress channel. @gershsec's latest research breaks down how SQL Server 2025's native AI features enable exfil, NTLM coercion, and C2 transport, all functioning as intended. Read more 👇 ghst.ly/4e2L3JX

🎙 Retrouvez ce vendredi à Bordeaux nos speakers à l'événement @Sthack 🔸 @0x3lk : "Runtime blindspot : Abusing .NET Runtime Internals to Evade EDRs " 🔸 @M4yFly : Red Team : "20 missions plus tard : Autopsie de quatre années de mutation offensive" 👉 ow.ly/Zp1Y50Z4XkJ

@M4yFly Successfully Found my way up to Domain Admin I made a walkthrough on how i did that here bl4ckarch.github.io/posts/GOAD-DRA… Feel free to come and discuss about it 😉

@bl4ckarch Very nice ! GG 🔥

🔥🐉 New GOAD Lab: DRACARYS I’ve just released a new free lab environment on GOAD: DRACARYS. The challenge includes 3 VMs and the objective is simple: Start with no authentication and work your way up to Domain Admin. Have fun exploiting it! 🔥🐉 mayfly277.github.io/posts/Dracarys…

@Octoberfest73 I remember you once posted a quirk of impacket that could be used as an ioc so I thought you’d like this list of 50+ impacket IOCs😄 github.com/ThatTotallyRea…

@bl4ckarch Yes sure ! GG 👍

@M4yFly Successfully found my way to DA, are we authorized to publish a walkthrough?

This second blogpost concludes @yaumn_'s research on #Windows authentication reflection. He discloses the new Kerberos authentication coercion technique he discovered to remotely compromise Windows systems 💥 A little bonus is even included at the end 👀👇 synacktiv.com/en/publication…

Authentication reflection attacks are still not dead! In our new blogpost series, @yaumn_ shares his journey into bypassing the mitigations of CVE-2025-33073 to pop SYSTEM shells again🚀 👇 synacktiv.com/en/publication…

If you want to contribute to Hacker Recipes: github.com/The-Hacker-Rec… Guide for authors: thehacker.recipes/contributing/w…

@sekurlsa_pw The site needs more authors, anyone has interesting techniques to share —> PR plzzzzzz 🙏

Just shipped GraphSpy v1.7.0 ✨ Mostly under-the-hood work this time with major refactoring to speed up future development ⚙️ Huge shoutout to n3rada for leading the effort! More exciting features coming soon 🚀 github.com/RedByte1337/Gr…

@theart42 Sure, come on discord discord.gg/gMuxqbEdz

@M4yFly Is there a way to get a hint for Dracarys?

Publicly disclosing the bluehammer exploit, at the time of writing this, this vulnerability is still unpatched. Full PoC source can be found here - deadeclipse666.blogspot.com/2026/04/public…