@Bandrel If you look real close you can see a domain admin on someone else’s network.
English
Mike Felch (Stay Ready)
9.3K posts
Mike Felch (Stay Ready)
@ustayready
Offensive @ TrustedSec | Hacking since Renegade BBS backdoors | Prior CrowdStrike/BHIS | In Christ's grip | Fighter for truth | K1HAQ
USA Katılım Temmuz 2013
1.9K Takip Edilen17.2K Takipçiler
Nice WP RCE poc. Haven’t tried it but the code checks out at first glance and it’s not using multi_query
siri@fu4k1@sirifu4k1
wp2shell: Completely bypassing two hard limitations of MySQL: 1. No need for multi_query - do not perform INSERT/UPDATE, just use UNION SELECT to return fake data 2. No FILE permission is required - no files are written, let WordPress's own code create users
English
@ustayready Nice man. Neutered POC ... You and you "Ethics". 😉 Keep it up!
English
And.... its live. git.projectnightcrawler.dev/NightmareEclip…
English
The teams at @TrustedSec are the most humble, yet experienced, consultants I’ve ever met.
TrustedSec@TrustedSec
What does it take to thrive at TrustedSec? According to @HackingDave, it starts with being exceptional at your craft and equally humble in how you show up for your team and clients. Explore our careers page to learn more and see current openings 👉 trustedsec.com/about-us/caree…
English
@hackerfantastic We had a private conversation with a bunch of offsec researchers about hosting one awhile back and moving off GitHub. we should probably recirculate that conversation.
English
@ustayready I notified the project and sent them the PoC. I will post the technical details in the future. I'm unsure about our future on Github though, we may move our resources elsewhere.
English
Don't believe that this is real? OpenWRT pre-auth remote root exploit 0day (CVSS 9.6, CRITICAL). Submitted this morning to the project. Technical details with-held for future publication. I have so far ran against OpenWRT, Horde, Django, WordPress, Gitlab, Dropbear & more.
hacker.house@hackerfantastic
I've documented at a high-level the AI/LLM vulnerability discovery pipeline I am using for finding confirmed vulnerabilities (0day). Here is example of Stage1 output, the modelling phase is important as it provides guidance for the inference fuzzing recursive loop.
English
Bad move.
Dave Kennedy@HackingDave
This stuff needs to be fixed pronto. @X @nikitabier @elonmusk Security research is not a violation, there's a reason this place is heavily used and has been heavily used for the security industry to promote defense and offense. If X continues to ban legitimate security professionals, researchers, I'm out of this place for sure.
English
@Flangvik Thanks! Biohacking for the path forward lets gooo 💪🏼
English
@ustayready This is amazing news! So glad you have found what seems to be an effective treatment 🥳🥳
English
Great news and update from my wife:
Nontoxic treatment is working, zero chemo!
Tumor shrunk by 26.3% in 2 months. She has clear margins. 7 swollen lymph nodes to 3 (she misspoke). May have surgery approval from 2nd opinion. Tumor burden is low! Dysbiosis almost gone! Praise God!
English
@ustayready So happy for you and your family. Love, strength and support to you guys!
English
@Siefe I appreciate it bro. I’m in Tampa all the time now 😂 we should grab lunch
English
@ustayready If there’s anything I can do please reach out. I’ve worked with a few great cancer centers in FL.
English
@Siefe Bro… it’s wild! We are so pumped to press in for phase 2. The hardest part has been navigating mainstream cancer processes and big medical, I’m so disappointed with how she has been treated.
English
I’m so thankful for everyone’s support. This has had a huge emotional toll. So many messages, calls, and financial support from the infosec community has helped in so many ways. THANK YOU for the GiveSendGo support, this stuff isn’t cheap.
English
@IceSolst I still love Defcon *the event* for the community and that we all go see each other there, but the con itself lost my love a few years back. I tell people that, these days:
* Defcon is the new Black Hat
* Black Hat is the new RSA
* RSA is the new CompUSA
English
A hacker conference should be for everyone. This is how you get corpo execs and sales, that’s what Blackhat is for, and I hate it.
Defcon should be cheap and accessible if you want the right people there
English
You know what I miss in offsec cloud? AWS pentests from 2012.. I rarely find blatant exploitable conditions in 2026. Might just be because I'm testing mature places after @confused_binary already rocket them lol Really have to dig nowadays ..
English