Kyle Avery

@0xTriboulet #eliteballknowledge

@kyleavery I substituted with two bud heavies and I’ve never felt more alive

This is the average American breakfast in case anyone was wondering. Typical accompaniments include: A Bud Light/Heavy, 16 lbs of Bacon (approx 1000 kilos), or a white Monster

@iamdamianb gvisor mentioned 🤩

@tszzl @CFGeek apparently not lol

@CFGeek is it working?

Everyone tryna automate AI R&D now

@eastdakota big elevator doesn’t want you to see this

Fact the U.S. doesn’t allow direct drive elevators (where they’re powered by two motors connected to the cab, as opposed to a cable or hydraulic system) is completely stupid. They’re faster, as safe, take less space, and a lot cheaper. Allowed everywhere else in the world.

@LittleJoeTables @h4wkst3r @evan_pena2003 @ArmadinSecurity codex goated

@kyleavery @h4wkst3r @evan_pena2003 @ArmadinSecurity Maybe I'm bias but Codex :) it wrote 98% of github.com/sliverarmory/b… from ~one prompt.

LLMs have changed the way offensive security practitioners reason about problems and build offensive capabilities. @evan_pena2003 and I wrote how our @ArmadinSecurity red team approaches this in the new age of LLMs ⬇️ armadin.com/blog-posts/thi…

@0xTriboulet @CyberWarship like ??

@CyberWarship > C is a limitation 😭

''The New Chapter of Egress Communication with Cobalt Strike User-Defined C2 | White Knight Labs'' #infosec #pentest #redteam #blueteam whiteknightlabs.com/2026/01/06/the…

@M4yFly @SkelSec @0xdab0

🔥🐉 New GOAD Lab: DRACARYS I’ve just released a new free lab environment on GOAD: DRACARYS. The challenge includes 3 VMs and the objective is simple: Start with no authentication and work your way up to Domain Admin. Have fun exploiting it! 🔥🐉 mayfly277.github.io/posts/Dracarys…

@0xTriboulet pip of javascript

npm is just so bad...how do people use this?

@iamdamianb They wrote a blog as well: cognition.ai/blog/blockdiff

@kyleavery Interesting!

We need a special filesystem for sandboxes. Why are we trying to shoehorn fancy dedup features on to ext4?

@_EthicalChaos_ @mariuszbit or we skip that stage and switch to inline COFF execution 😁

@mariuszbit @kyleavery AMSI patches all over again MacOS style

I'm not sure when this started, but macOS seems to scan JXA scripts at runtime using the Yara rules in: /var/protected/xprotect/XProtect.bundle/Contents/Resources/XPScripts.yr

@L0Psec @howardnoakley found yours as well 🔥 x.com/L0Psec/status/…

@kyleavery Started recently. Was shared by @howardnoakley last month, some pretty cool rules in there. I took a look at some of them recently too. :) eclecticlight.co/2026/02/03/app…

@L0Psec @howardnoakley Nice, thanks for sharing!

@hullabrian lol

@S_OhEigeartaigh maybe once they have a frontier model again

So when are we going to hear from Demis Hassabis?