mk0

I started digging into npm packages auth logic a few days ago and got my first critical CVEs ^^ #event-573678" target="_blank" rel="nofollow noopener">github.com/parse-communit…

When your mindset shifts from “What tool or tactic should I use?” to “What will this action generate? How will it be seen?” you are advancing your #RedTeam operations❣️ #SEC665 teaches you to adapt your tradecraft, especially when it fails. 🧙 Read on: sans.org/cyber-security…

[TALK] My latest Black Hat Europe talk is now publicly available. If you can look past the painfully obvious anxiety and a speaker who occasionally sounds like his brain has stopped cooperating, you might find something useful. Who knows? youtube.com/watch?v=tOVcSc…

Today, we’re releasing rCTF v2, an open-source platform for hosting cybersecurity capture-the-flag competitions.

In conducting a 0-day research project against #SharePoint, Rapid7 Labs discovered 2 new vulns that, when chained together, achieve RCE against a vulnerable server. Today, Rapid7 and Microsoft are disclosing CVE-2026-55040 – the first vuln in this chain: r-7.co/4f2HpQO

I got permanently banned from @Hacker0x01. Account deleted. No explanation. Years of work gone overnight. Submission history, achievements, leaderboard ranks, every contribution I made to the security and crypto ecosystems through HackerOne. Wiped, like I was never there.

Cloudflare Drop just launched, temporary static site hosting (expires after 60 minutes) without an account, just drop your assets and go. Red Teamers... GO GO GO GO!!! cloudflare.com/drop/ Example: …p-4638acd5-ef1.aback-arch.workers.dev

My online alias is "smelly". It has slowly over the years mutated by people to be; "stinky", "smelly smellington", "crazy cat guy", "schnelli", "schmelly", etc. It is still mostly "smelly". It is not a cool or badass alias. However, the name was assigned to me from my wife. Ages ago my wife called me her "smelly man". She would walk into my office when I was working and, because room was small, poorly ventilated, and the door was closed, the room would get incredibly hot. I would get stinky from body odor. She would come in, kiss me on the cheek, call me her "smelly man", and give me a snack or something. I would then resume work. She has always been extremely supportive of my malware collecting, writing, reversing, etc. Hence, when I made vx-underground in 2019, and decided to start the journey of malware collecting and stuff, I said, "I need a cool name that is tough and everyone will think I'm totally awesome and badass". Then I remembered my wife called me "smelly"... so I went with that.

@hxuu0 incredible work - gg!

Sekai challenges done :) Moving onto the next thing. All web writeups can be found here: vhxuu.xyz/tags/sekai26/

pretty good writeup - go take a look at it!

@MushroomWasp will read this rn - congrats! :3

Lesgo! 🔥🍄 Writeup link: Mushroom.Cat/ctf/http-desyn…

How to deliver reflected XSS via HTTP request smuggling vulnerability! 👇 Try this Practitioner lab now: portswigger.net/web-security/r…

Defeating Windows DEP Using ROP Chains Leveraging VirtualAlloc TLDR: Windows Exploit Development Certification Notes and hands-on research focusing on exploitation and protection bypass techniques. Best for OpSeC Exams & real world References. Blog:- screetsec.com/blog/defeating…

My Reverse Engineering of the Intel NPU Windows Driver Hopefully this helps to those thinking of beginning with the npu_kmd.sys tfll37.github.io/posts/Reverse-… #ReverseEngineering #Windows #WindowsDrivers #Intel

New blog about some recent findings in Windows Defender blog.projectnightcrawler.dev/posts/2026-07-… It seems to be leaking few bytes when attempting to open some files + visiting a malicious SMB (possibly webdav too) can cause Defender to completely exhaust your disk space.

A researcher discovered a vulnerability in ETW, the Event Tracing for Windows system that underpins most of Windows’ security tooling. The bug caused a kernel pointer to be returned to usermode callers. Microsoft had tried to fix the issue by zeroing out the pointer, but they used a 4-byte write instead of clearing the full 8-byte value. This left the upper half of the kernel address intact and fully leakable. The researcher reported the bug. Microsoft initially classified it as Important but refused to pay a bounty for it. Later they marked it as “won’t fix.” The researcher noted that fixing the issue would have taken less time than writing the email declining to address it. It was eventually assigned CVE-2021-24107 and patched.

Wake me up when it's patch tuesday

Our technical walkthrough -> nebusec.ai/research/ionst…

It looks like the <selectedcontent> vector can solve this impossible lab listed in portswigger.net/research/docum…: "innerHTML assignment where you can't use =" PoC: portswigger-labs.net/impossible-lab…

There's a lot of misinformation and panic going around about the Windows GDID (Global Device ID), let's talk about what it actually is. 🧵