Rahul Vashisht

🚨 A public PoC has been released for CVE-2026-54121 affecting Microsoft Active Directory Certificate Services (AD CS). The vulnerability allows an authorized attacker to escalate privileges over the network. 🔗 github.com/aniqfakhrul/cv… #Microsoft #ADCS #PrivilegeEscalation

🔴ADIÓS A LOS DE CIBERSEGURIDAD! Acaba de salir un repositorio con cientos de herramientas de seguridad para IA en un repositorio open source. Muestran técnicas y herramientas para poner a prueba sistemas de IA: ↳ Frameworks de jailbreak para LLMs ↳ Testers de prompt injection ↳ Agentes de red team para IA ↳ Herramientas de extracción de modelos ↳ Vectores de ataque a la supply chain ↳ Pentesting automatizado para aplicaciones con IA Las MISMAS herramientas que usan los equipos de seguridad para defender sistemas. Ahora están disponibles para cualquiera. Dejo el enlace al repositorio en los comentarios↓

Speed up your Active Directory pentesting with ADScan and ADPulse hackers-arise.com/offensive-secu… @three_cube @_aircorridor @co11ateral

BitlockMove. Lateral Movement via Bitlocker DCOM & COM Hijacking, by @ShitSecure github.com/rtecCyberSec/B…

I trained a 3.5M param LLM from scratch that only knows how to be a cat 😹. Check it here: github.com/phanii9/MeowLLM

Cirro, a new attack path tool, is open source now. Go look at it. 😁 Cirro: github.com/bishopfox/cirro CirroDash: github.com/bishopfox/cirr… Cirro Azure CLI extension: github.com/BishopFox/cirr…

GodPotatoBOF Cobalt Strike BOF used to perform privilege escalation by exploiting the SeImpersonate privilege. OPSEC safe alternative to the .NET version. Based on the original GodPotato github.com/incursi0n/GodP… #pentesting #redteam

ADeleginator. tool to find insecure trustee and resource delegations in Active Directory, by @techspence github.com/techspence/ADe…

🚀 New project drop — DFMI: Fileless Execution via MSI Installers github.com/ccelikanil/DFMI

🚨This just killed the voice AI business model. ElevenLabs charges up to $1,320/month. An open-source model just beat it. Meet VoxCPM2: Clone any voice From seconds of audio In 30 languages At studio quality For $0. No API. No subscription. Runs locally. Even crazier: It can invent voices from text “Soft, calm female voice” → generated instantly And benchmarks? VoxCPM2: 85% similarity ElevenLabs: 61% Let that sink in. A free model just outperformed a $1,300/month product. Voice actors. Studios. SaaS platforms. Everything just changed. Repo github.com/OpenBMB/VoxCPM

Adaptive web scraping framework with anti-bot bypass github.com/D4Vinci/Scrapl…

🟥𝗟𝗟𝗠 𝗥𝗲𝗱 𝗧𝗲𝗮𝗺𝗶𝗻𝗴 𝗥𝗲𝘀𝗼𝘂𝗿𝗰𝗲𝘀 🔗 Red Teaming LLM Applications by DeepLearning :- deeplearning.ai/short-courses/… 🔗Planning red teaming for LLMs by Microsoft :- learn.microsoft.com/en-us/azure/ai… 🔗Red teaming LLMs by HuggingFace :- huggingface.co/blog/red-teami… 🔗LLM Red Teaming by KLU :- klu.ai/glossary/red-t… 🔗Red Teaming LLMs Nihad Hassan :- techtarget.com/searchenterpri… 🔗Red-Teaming to make LLMs robust and safer :- @sasirekharameshkumar/red-teaming-to-make-llms-robust-and-safer-1c3bc1d0f6fa" target="_blank" rel="nofollow noopener">medium.com/@sasirekharame… 🔖#infosec #cybersecurity #hacking #pentesting #security

I built tidbit: a CLI that turns any URL, PDF, EPUB, screenshot, or clipboard content into a structured Markdown note (and a JSONL training dataset) using your LLM of choice. Schema-driven. MCP-enabled. MIT. Python. github.com/phanii9/Tidbit

Fuck me, no point going into work on Monday then!

MSSqlPwner. advanced and versatile pentesting tool designed to seamlessly interact with MSSQL servers github.com/ScorpionesLabs…

Based on prior research by @Jonas_B_K, @harmj0y, @PyroTek3, @_dirkjan, @gentilkiwi and prior work from @SAERXCIT and many impacket contributors!

@s4dbrd @hasherezade Very cool work! Regarding 2., I used github.com/eversinc33/drv… in the past to quickly trace virtualized drivers

[Tool Release] DLLHijackHunter - Automated DLL hijacking detection with canary confirmation github.com/ghostvectoraca…

Neglected my BofAllTheThings repo (github.com/N7WEra/BofAllT…), just added Adrenaline (@atomiczsec) , Extension-Kit (@hacker_ralf) and Awesome-BOF site (@chryzsh ) chryzsh.github.io/awesome-bof/si…