Dhiraj

C2 over... Google Calendar and AWS X-Ray? @RandomDhiraj built MeetC2 and XRayC2, two frameworks that hide command and control inside services your defenders will never think to block. Encrypted, trusted, and hiding in plain sight. 🔎

VirtualBox CCID: four bytes in, 255 bytes read (CVE-2026-47043). somelab.ai/virtualbox-usb…

VirtualBox xHCI: eight bytes allocated, 8192 bytes copied (CVE-2026-46974). somelab.ai/virtualbox-xhc… #infosec #AI

Model quality matters but context is king. While everyone’s hyped about Mythos finding a 27-year-old bug, I tried a similar workflow with current available models. somelab.ai/openbsd-ftpd #infosec #AI

@RandomDhiraj Congratulations, @RandomDhiraj!

w00t w00t!🎉

w00t! Microsoft Patch Tuesday included my (CVE-2026-54124). msrc.microsoft.com/update-guide/v… #infosec

Here is my write-up on (CVE-2026-12374) LPE in Cato Networks client for macOS via XPC auth bypass + TOCTOU. somelab.ai/cato-securesto… #infosec #AI

I made a POC on how to abuse git's `filter.<name>.clean` helper for initial access. github.com/RootUp/git-cle… #infosec #redteam

AI teams and security teams should be finishing each other's sentences. Join @RandomDhiraj, Security Manager at @Derivdotcom and @czech_pawel, @lablabai Co-Founder & @Surgexyz_ CEO as they share exactly how to make it happen LIVE.

@D0rkerDevil Give a try with SSD-Disclosure it's better than ZDI (Triaging process)

Found multiple 0days in a basedband , reported to a well known broker ;) but seems that they are on resource limitations Any suggestions or any brokers ???

Part-2, Here is the write-up for my recent work RCE in AWS Kiro IDE (CVE-2026–5429). @dhiraj_mishra/part-2-cve-2026-5429-aws-kiro-webview-xss-to-remote-code-execution-b1099cb7c945" target="_blank" rel="nofollow noopener">medium.com/@dhiraj_mishra… #infosec #AI

.@p1ngfl0yd & me would be running 2-day training program on fuzzing at DEFCON this year. Sign-up for the early bird discount - (training.defcon.org/collections/de…) #infosec #fuzzing #defcon

Not from AI, just read the existing advisory/patch from VIM (github.com/vim/vim/securi…) replaced `scp://` URI to `file://`.

Found command injection via `file://` URI handling in VIM. Fixed Commit - github.com/vim/vim/commit… #infosec

Identified a vulnerability in dtprobed (DTrace) where a crafted USDT provider names lead to arbitrary file creation outside intended paths, leading to LPE. linux.oracle.com/errata/ELSA-20… #infosec

The red team tradecraft behind hard-to-detect AI phishing. derivai.substack.com/p/red-team-tra… #infosec #redteam