Vix

I did some further research on @kfosaaen's blog (all kudos to them): "We Know What You Did (in Azure) Last Summer." Hopefully you can take a look, the research took around 5 or 6 days: vix-w1zzer.gitbook.io/vixwizzer/tech…

@Jr0dR87 big YES!

Here is the video for this blog. Let me know if you want to see more content like this. youtu.be/rptKP7W9Elc?is…

yeah idk, probably intended but you can name it to microsoft or whatever, still not sure why this is allowed

so uh am I cool now?

@Cthulhu_Answers damnn that's dope asf

Elder God version of the Cthulu badge!

‼️ Nightmare-Eclipse just dropped "LegacyHive," a new Windows privilege-escalation zero-day PoC that targets the Windows User Profile Service, the component that loads a user's settings during sign-in. The PoC reportedly uses a carefully timed path-switching trick to make Windows mount another user's Registry file, potentially an administrator's, under a standard "helper" account. Nightmare-Eclipse claims it works across supported Windows desktop and server builds patched through July 2026. Nightmare-Eclipse says a private version could load arbitrary Registry hives, but that broader version has not been published. Interestingly, Nightmare-Eclipse previously told us that vulnerability names are inspired by random events in his life. "LegacyHive" appears to break from that convention. Deja vu: Microsoft patched this broad ProfSvc trust-boundary failure in 2015 as CVE-2015-0004, which also loaded another user's hive. LegacyHive appears to use a new path-swap to revive that bug class. As of writing: no CVE, no Microsoft advisory, no comment.

cybersecurity community is gotta be the best and the worst community ever

@LowLevelTweets haha sometimes

IS TWITTER SAVED?

I'm 80% away from finishing the book, it's been great so far, learned so much

>be Google >slowly work on Gemini >have all the data anyway >anthropic, openai, and xai completely self-immolate due to sheer greed >win It’s so easy when you’re patient. It doesn’t matter who is first.

@IntCyberDigest microsoft cooked that fish

Last month I took Nightmare-Eclipse out for dinner. He's the person behind all those Windows zero-day PoC drops. He wanted to eat fish — a specific kind of fish. I'm not really fond of fish, so I had no idea where you could even get it; it's always something my brain skips over when reading a menu. I took him to a restaurant where he could have fish and I could have steak. When he took his first bite, he almost choked — he hadn't expected the bones to still be in it. I'd forgotten to warn him. After that, he started picking the fish apart with nothing but his knife. He went at it so methodically you'd think he ate fish like this for a living. He's a bright young fella, to say the least: very calm and professional. And after hearing his story, it sounds to me like Microsoft really screwed him over and sent him off the rails. I'm not allowed to say more, but this story still hasn't ended — that's for sure. Things will keep going like this for a while.

‼️ BREAKING: xAI's Grok Build CLI was uploading entire Git repositories to a Google Cloud bucket, private codebases and unredacted secrets included. The uploads quietly stopped via a hidden server-side flag, and xAI still has not said a word about scope, retention, or deletion. The scale is staggering. On a 12 GB test repo, 5.1 GB flew out the door to xAI's grok-code-session-traces bucket while the actual coding task needed just 192 KB. The tool grabbed whatever repository it ran in, not the files it needed. The fix arrived as a hidden flag, disable_codebase_upload: true, a day after a researcher's wire-level analysis. The "Improve the model" opt-out never stopped the uploads. Still no advisory, no scope, no word on whether already-uploaded code gets deleted. For anyone pointing AI coding agents at proprietary code, what crosses the wire matters more than what the settings page says.

brother what is this 😭😭

🧙 NEW LINUX EXPLOIT🧙BIG AI🧙 SMOL AI 🧙 AI HACKS THE PLANET🧙ROBOTS TAKING OVER 🧙 AI HACKS THE PLANET🧙 x.com/i/broadcasts/1…

I had Ads back on the channel and he did NOT disappoint! He hacked a major retailer's AI chatbot over DNS and walked me through the whole thing live. Also built a free lab so you can try it new ep 👇 🎥 Video youtu.be/w7cH0xZp5oc 💻 Lab: app.hackinghub.io/hubs/ecorp-ai

so uh my PR just merged into Internal All The Things, well that's pretty cool. I'll do more ig. btw this is what I edited if you're curious about it: swisskyrepo.github.io/InternalAllThe…

📖 CloudSecList Issue 346 is live, with content from @Cloudflare @wiz_io @datadoghq @UberEng @NomaSecurity and more! cloudseclist.com/issues/issue-3…

this is really stupid

this was like 2 weeks ago, and I forgot to post it here vix-w1zzer.gitbook.io/vixwizzer/note…

I was reading Pentesting Azure by David and Karl, some parts are deprecated as of now, so I made a tool that's not being maintained. The tool is pretty simple and it's something I'll actually use it. Like it or hate it, idk what I'm doing. More tools? github.com/V1xW1zz3r/azur…