p4p1

Will write a blog post about this soon: github.com/p4p1/skr_c_json but for now here is the complete product a C json parser useful for red teaming.

p3ng0s devlog #2: leosmith.wtf/blog/p3ng0s-de… #pentest #redteaming #physicalsecurity #hacking

wow more p3ng0s devlogs for those who want to know more about the arch based physicall access platform I'm building: leosmith.wtf/blog/p3ng0s-de… #pentest #redteaming #redteam #hacking #physicalsecurity

Back after babysitting for a year here is what I cooked up tell me what you think? #pentesting #redteaming #hacking #infosec leosmith.wtf/rice/

blog post on hiding openvpn traffic through SSL to bypass firewalls in environments that only permit SSL on 443 #redteam #pentest #infosec leosmith.wtf/blog/hiding-op…

small blog post on llm prompt injection ^^ leosmith.wtf/blog/generatin…

New havoc store plugin released today available directly inside of Havoc from MaldExe over on github allows you to impersonate thanks to the ditto tool on infected agents github.com/MaldExE/Havoc_… p4p1.github.io/havoc-store/ havocframework.com #pentest #redteam #hacking

New havoc store plugin released today available directly inside of Havoc from @jenaye_fr allows you to run sharppersist on infected agents github.com/matro7sh/havoc… p4p1.github.io/havoc-store/ havocframework.com #pentest #redteam #hacking

New havoc store plugin released today available directly inside of Havoc from @jenaye_fr to run gosecretsdump on victim machines and collect good loot :) store: p4p1.github.io/havoc-store/ repo: github.com/matro7sh/havoc… havocframework.com #pentest #redteam #infosec #hacking

“Paris 2024 Olympics” is the app built by the IOC for the Olympics. We decided to reverse it and here’s what we found: blog.malcore.io/p/paris-2024-o…

@xCipher007 @mrd0x The yearly Skyrim playthrough was more important before i could start working again lol

@p4p1_wt7 @mrd0x The fact showed me this technique more than 2 months ago and told you were gonna make a blog , glad to see it's finally out 😂

Made a quick blog post about PWA and phishing! check out also @mrd0x post on the same matter he was quicker than me to release and amazing work on his end! leosmith.wtf/blog/pwa-phish… #redteaming #infosec #pentest #phishing

First day at Crowdstrike, pushed a little update and taking the afternoon off ✌️

How I discovered and exploited an unauthenticated SSRF in the Havoc C2 teamserver, allowing attackers to leak origin IPs of teamservers behind redirectors and much more! blog.chebuya.com/posts/server-s… github.com/chebuya/Havoc-…

@antoniozekic "bug bounty hunter" with photoshoped screenshot of bounty for analyzing with wireshark http requests

It's my first DLL Payload Loader with my learnings from @MalDevAcademy ! Check it out -> github.com/Cipher7/ApexLdr

After completing the beginner and intermediary modules on Maldev Academy, I created my first evasive shellcode loader. It executes a payload using mapping injection via direct syscalls with Hell's Gate and includes several anti-analysis features. github.com/jakobfriedl/Be… #maldev

@rootxaman @C5pider You dont kiss your homies goodnight?

@p4p1_wt7 @C5pider Bro what is that header image on the blog😭😭

Havoc + Metasploit heresy some would say but I still did it. In this new blog post I showcase how to use metasploit to execute havoc shellcode. #pentesting #redteam #hacking #cybersecurity #infosec leosmith.wtf/blog/metasploi…