iiinova — where your digital self keeps evolving

KL3FT3Z @toxy4ny.bsky.social · 22/09/2026

Tuesday's fuck up - Now Windows - Windows Exploitation Techniques: Dangling COM Object Registrations projectzero.google/2026/09/wind... // This post is about abusing a privilege escalation bug that Microsoft recently fixed in Windows 11 (CVE-2026-66804) #redteam #exploit #0day #windows #LPE #COM

projectzero.google

Windows Exploitation Techniques: Dangling COM Object Registrations

This short blog post is about abusing a privilege escalation bug that Microsoft recently fixed in...

000

KL3FT3Z @toxy4ny.bsky.social · 21/09/2026

Monday's redteam tool collection: LPE quartet of Linux local root: DirtyAH6 CVE-2026-80844 github.com/manizada/Dir... TUNderflow CVE-2026-81000 github.com/manizada/TUN... PPPoEject CVE-2026-68121 github.com/manizada/PPP... DiagSpill CVE-2026-74469 github.com/manizada/Dia... #redteam #LPE

github.com

GitHub - manizada/DirtyAH6: https://heyitsas.im/posts/lpe-quartet/

https://heyitsas.im/posts/lpe-quartet/. Contribute to manizada/DirtyAH6 development by creating an account on GitHub.

000

KL3FT3Z @toxy4ny.bsky.social · 19/09/2026

I have over 400 followers! A huge thank you to everyone who reads my posts! You are the best followers I could ask for! It’s truly gratifying to know that I’m read by both everyday people and professionals in their fields! #bluesky #follow #friend #following #followers #cool #man #girl

static.klipy.com

Gjirlfriend

ALT: Gjirlfriend

010

KL3FT3Z @toxy4ny.bsky.social · 17/09/2026

Wednesday's fuck up - Now Windows - 0xCr0ssCrush - Windows Ring 0 Exploit github.com/DeathShotXD/... Both drivers were documented by eSentire's Threat Response Unit in August 2026 as components of the Cruciferra malware-as-a-service loader, which terminates AV/EDR processes before payload delivery

github.com

GitHub - DeathShotXD/0xCr0ssCrush: Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opportunities.

Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opportunities. - DeathShotXD/0xCr0ssCrush

000

KL3FT3Z @toxy4ny.bsky.social · 14/09/2026

Finally, the great magician has revealed himself! Respect and admiration for him for this and for the explanation of why he started writing exploits for Windows and other systems. He's a really cool dude! x.com/MSNightmare2... #MSNightmare #windows #0day #exploit #PoC #cybersecurity #real #people

x.com

000

KL3FT3Z @toxy4ny.bsky.social · 11/09/2026

New redteam tool - GPOddity - Simulating legitimate Active Directory services on the network: the case of GPO exploitation www.synacktiv.com/en/publicati... GPOddity - github.com/synacktiv/GP... #redteam #tool #GPO #NTLM #relay #AD #attack #vector #service #exploit

synacktiv.com

Simulating legitimate Active Directory services on the network: the

000

KL3FT3Z @toxy4ny.bsky.social · 08/09/2026

Track of the Day - Naïve - To lose and to Die For - www.youtube.com/watch?v=Y6BJ... #redteam #track #music #my #vibe #playlist #post-rock

youtube.com

Naïve - To Lose and to Die For

YouTube video by NewGenerationSlave

000

KL3FT3Z @toxy4ny.bsky.social · 05/09/2026

VMware threat emulation techniques virtualattack.reversec.com A reproducible catalogue of 86 atomic actions against vCenter, ESXi, SDDC Manager & the wider VCF ecosystem — sourced from threat intelligence reporting, mapped to MITRE ATT&CK & paired with the log sources where evidence is expected.

virtualattack.reversec.com

Virtual//Attack

000

KL3FT3Z @toxy4ny.bsky.social · 02/09/2026

AD-PathFinder is an open-source tool for constructing attack paths in corporate infrastructure using BloodHound CE. It is especially useful for red teams, pentests, and AD audits, when the standard BloodHound graph is no longer sufficient. github.com/NetSPI/AD-Pa... #redteam #tool #windows #AD #ADCS

github.com

GitHub - NetSPI/AD-PathFinder: Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.

Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data. - NetSPI/AD-PathFinder

000

KL3FT3Z @toxy4ny.bsky.social · 01/09/2026

Tuesday fuck up - let's move on to antiviruses - PrettyPrague - GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability. Another zeroday in an antimalware provider, I'm not sure but I believe this vulnerability affect other GenDigital products as well. github.com/MSNightmare/...

github.com

GitHub - MSNightmare/PrettyPrague: GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability

GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability - MSNightmare/PrettyPrague

000

KL3FT3Z @toxy4ny.bsky.social · 27/08/2026

Track of the Day - Obsidian Swing - Crossroads - www.youtube.com/watch?v=4FfV... #track #music #redteam #post-rock #playlist #my #vibe

youtube.com

Crossroads

YouTube video by Obsidian Swing - Topic

010

KL3FT3Z @toxy4ny.bsky.social · 25/08/2026

My new article, research and redteam tool. dev.to/toxy4ny/sam-... Sam The Butcher is a single-file, standalone Windows executable that extracts credential hives, bypassing file locks, EDR minifilters, and standard Windows access controls. #redteam #windows #tool #education #credential #dumping #EDR

dev.to

Sam The Butcher: Extracting Locked Windows Credentials via Raw Disk Access

A deep dive into bypassing file locks, EDR filters, and Windows access controls by reading NTFS...

010

KL3FT3Z @toxy4ny.bsky.social · 22/08/2026

My new research, article and redteam-tool: RinHit-How we built an open-source macOS reconnaissance framework that turns Wi-Fi artifacts, Bluetooth pairings, and USB history into a narrative of cross-device identity, physical movement, and trust boundaries. dev.to/toxy4ny/rinh... #redteam #tool #iOS

dev.to

RinHit: Drilling into the macOS Ecosystem for Red Team Reconnaissance

"How we built an open-source macOS reconnaissance framework that turns Wi-Fi artifacts, Bluetooth...

030

KL3FT3Z @toxy4ny.bsky.social · 20/08/2026

@darinor.com Thanks for adding AI and Cybersecurity to the starter pack. I checked it out and found some very knowledgeable specialists. I recommend subscribing to it if you want to stay up to date. #bluesky #starter #pack #follow #expert #ai #cybersecurity

120

KL3FT3Z @toxy4ny.bsky.social · 20/08/2026

Wednesday’s fuck up - Again Windows - As always, what should protect is a leaky bucket! - NachoMDM - Weaponising Windows MDM for UAC Bypass and SYSTEM Execution via Malicious Enrollment. POC: github.com/AmberWolfCyb... #redteam #tool #MDM #windows #bypass #systemnt

github.com

GitHub - AmberWolfCyber/NachoMDM

Contribute to AmberWolfCyber/NachoMDM development by creating an account on GitHub.

000

KL3FT3Z @toxy4ny.bsky.social · 17/08/2026

Monday’s redteam tool - RelayKing A tool for detecting and enumerating relay attacks in Active Directory environments. Scans SMB, LDAP/S, MSSQL, HTTP/S, RPC, and WinRM. Detects WebDAV WebClient, CVE-2025-33073 (NTLM reflection), NTLMv1 + PrinterBug / PetitPotam, and more. github.com/depthsecurit...

github.com

GitHub - depthsecurity/RelayKing-Depth: Dominate the domain. Relay to royalty.

Dominate the domain. Relay to royalty. Contribute to depthsecurity/RelayKing-Depth development by creating an account on GitHub.

010

KL3FT3Z @toxy4ny.bsky.social · 17/08/2026

A very interesting attack vector on the PC processor itself - skitter-creek-bath-salts Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. github.com/xoreaxeaxeax... #redteam #cpu #exploit #AMD

github.com

GitHub - xoreaxeaxeax/skitter-creek-bath-salts: Unlocking _everything_ on the CPU with DRAM scrambling

Unlocking _everything_ on the CPU with DRAM scrambling - xoreaxeaxeax/skitter-creek-bath-salts

001

KL3FT3Z @toxy4ny.bsky.social · 17/08/2026

Monday’s fuck up - This Time - cPANEL - CVE-2026-41940 cPanel and WHM authentication bypassing tool - They're going to be tearing down websites running on this CMS on an industrial scale right now. I recommend upgrading! github.com/pemarine/cve... #critical #exploit #cve-2026-41940 #poc #cpanel #whm

github.com

GitHub - pemarine/cve-2026-41940-PoC: A cPanel and WHM authentication bypassing tool

A cPanel and WHM authentication bypassing tool. Contribute to pemarine/cve-2026-41940-PoC development by creating an account on GitHub.

000