iiinova — where your digital self keeps evolving

Reposted by Lee Chagolla-Christensen

Hex-Rays @hex-rays.bsky.social · 02/08/2026

🏠 idalib is now available in IDA Home. Now hobbyists & enthusiasts can call IDA's analysis engine as a library. We're offering 30% off IDA Home until Aug 14.* Use code HOME30 at checkout. 👉 Learn More: hex-rays.com/ida-home *Offer not available for corporations, agencies or resellers.

011

Reposted by Lee Chagolla-Christensen

SpecterOps @specterops.io · 24/06/2026

What happens when a new Mythic agent can be generated, tested, and deployed in ~2 hours? @xpnsec.com explores "disposable tooling" and the implications for offensive operations and defenders alike. Check out the latest from GhostWorks ⬇️ ghst.ly/4oMyrdC

ghst.ly

Disposable Tooling: Building LLM-Generated Mythic Agents from Prompt to Deployment

Using Claude Opus to autonomously generate Mythic C2 agents from prompt to deployment—and what that means for defenders.

052

Reposted by Lee Chagolla-Christensen

SpecterOps @specterops.io · 21/11/2025

AI tooling and MCP servers are entering enterprises fast, often faster than security teams can assess the risks. During a recent engagement, @xpnsec.com found a new Claude Code vuln (CVE-2025-64755) while exploring MCP abuse paths. 👀 Read the details: ghst.ly/49ybl4W

ghst.ly

An Evening with Claude (Code) - SpecterOps

This blog post explores a bug, (CVE-2025-64755), I found while trying to find a command execution primitive within Claude Code to demonstrate the risks of web-hosted MCP to a client.

0104

Reposted by Lee Chagolla-Christensen

SpecterOps @specterops.io · 23/10/2025

Credential Guard was supposed to end credential dumping. It didn't. Valdemar Carøe just dropped a new blog post detailing techniques for extracting credentials on fully patched Windows 11 & Server 2025 with modern protections enabled. Read for more: ghst.ly/4qtl2rm

ghst.ly

Catching Credential Guard Off Guard - SpecterOps

Uncovering the protection mechanisms provided by modern Windows security features and identifying new methods for credential dumping.

01710

Reposted by Lee Chagolla-Christensen

harmj0y @harmj0y.bsky.social · 28/06/2025

Happy Friday! @tifkin.bsky.social and I are happy to announce that we have cut the release for Nemesis 2.0.0 - check out the CHANGELOG for a (brief) summary of changes, and dive into our new docs for more detail! We're extremely proud and excited for this release github.com/SpecterOps/N...

github.com

GitHub - SpecterOps/Nemesis: An offensive data enrichment pipeline

An offensive data enrichment pipeline. Contribute to SpecterOps/Nemesis development by creating an account on GitHub.

0126

Reposted by Lee Chagolla-Christensen

SpecterOps @specterops.io · 05/03/2025

BIG NEWS: SpecterOps raises $75M Series B to strengthen identity security! Led by Insight Partners with Ansa Capital, M12, Ballistic Ventures, Decibel, and Cisco Investments. ghst.ly/seriesb #IdentitySecurity #CyberSecurity (1/6)

1159

Lee Chagolla-Christensen @tifkin.bsky.social · 07/02/2025

Ghidra 11.3 is out! There's some awesome new features, but I want to highlight how responsive the dev team is to questions, issues, and feature suggestions. They've addressed several issues I've opened, notably a bunch of quality of life UI/UX things I've had while using Ghidra.

182

Lee Chagolla-Christensen @tifkin.bsky.social · 31/01/2025

@tiraniddo.dev Did you by chance check if the MUP redirector supports port specification in UNC paths?

120

Reposted by Lee Chagolla-Christensen

SpecterOps @specterops.io · 31/01/2025

SlackPirate sets sail again! 🏴‍☠️ In his latest blog post, Dan Mayer intros his new PR to SlackPirate that lets you loot Slack again out of the box, a BOF to get you all the data you need to do it, & how to bee the most active slacker in your group chat. 🐝 ghst.ly/4hgwMIt

ghst.ly

SlackPirate Set Sails Again! Or: How to Send the Entire “Bee Movie” Script to Your Friends in Slack

TLDR: SlackPirate has been defunct for a few years due to a breaking change in how the Slack client interacts with the Slack API. It has a…

055

Reposted by Lee Chagolla-Christensen

James Forshaw @tiraniddo.dev · 30/01/2025

New blog post on the abuse of the IDispatch COM interface to get unexpected objects loaded into a process. Demoed by using this to get arbitrary code execution in a PPL process. googleprojectzero.blogspot.com/2025/01/wind...

googleprojectzero.blogspot.com

Windows Bug Class: Accessing Trapped COM Objects with IDispatch

Posted by James Forshaw, Google Project Zero Object orientated remoting technologies such as DCOM and .NET Remoting make it very easy ...

26541

Reposted by Lee Chagolla-Christensen

SpecterOps @specterops.io · 16/12/2024

The Misconfiguration Manager DETECT section has been updated with fresh guidance to help defensive operators spot the most prolific attack techniques. Check out the blog post from @bouj33boy.bsky.social to learn more. ghst.ly/3VJ5y4F

ghst.ly

Misconfiguration Manager: Detection Updates

TL;DR: The Misconfiguration Manager DETECT section has been updated with relevant guidance to help defensive operators identify the most…

054

Reposted by Lee Chagolla-Christensen

Dirk-jan @dirkjanm.io · 12/12/2024

Want to run roadrecon, but a device compliance policy is getting in your way? You can use the Intune Company Portal client ID, which is a hardcoded and undocumented exclusion in CA for device compliance. It has user_impersonation rights on the AAD Graph 😃

34520

Reposted by Lee Chagolla-Christensen

Andrea P @decoder-it.bsky.social · 25/11/2024

I'm glad to release the tool I have been working hard on the last month: #KrbRelayEx A Kerberos relay & forwarder for MiTM attacks! >Relays Kerberos AP-REQ tickets >Manages multiple SMB consoles >Works on Win& Linux with .NET 8.0 >... GitHub: github.com/decoder-it/K...

36343

Reposted by Lee Chagolla-Christensen

SpecterOps @specterops.io · 19/11/2024

If you missed Part 4 in our What is Tier Zero webinar series hosted by Jonas Bülow Knudsen, @martinsohn.dk & @tifkin.bsky.social last week, you can watch the full presentation on demand now! 👀: ghst.ly/4eSssxL

Defining the Undefined: What is Tier Zero, Part 4
On Demand

022

Reposted by Lee Chagolla-Christensen

Barry Dorrans @blowdart.me · 12/11/2024

Tomorrow, 10am, BinaryFormatter dies.

169325

Reposted by Lee Chagolla-Christensen

Clément Labro @itm4n.bsky.social · 11/11/2024

🆕 New blog post! "Exploiting KsecDD through Server Silos" In my latest mini research project, I've been working with my teammate @PMa1n (X) on extending the work of @floesen_ (X) on the KsecDD driver. I'm thrilled to finally share the results. 👉 blog.scrt.ch/2024/11/11/e...

blog.scrt.ch

Exploiting KsecDD through Server Silos – SCRT Team Blog

1117