Log inSign up
Log inSign up
Northwave Labs
52 posts
Northwave Labs profile banner
@NorthwaveLabs

Northwave Labs

@NorthwaveLabs
Official Twitter account of the RED, BLUE, CERT & RE teams of Northwave Cyber Security. Sending tweets into the cybernetic universe.
github.com/NorthwaveSecur…
Joined March 2020
131 Following
265 Followers
RepliesRepliesRepostsRepostsMediaMedia

Log in or sign up for X

See what’s happening and join the conversation

Continue with phone
or
Log in with username or email
Terms·Privacy·Cookies·Accessibility·US TIDA·Ads Info·© 2026 X Corp.
  • @NorthwaveLabs
    Northwave Labs
    @NorthwaveLabs
    Dec 11, 2023
    Last weekend @tijme presented Elevate & Conquer: A Journey Into Kernel Exploitation, at @BSidesLondon. The presentation explores his and Alex's research on exploiting a zero-day in VPN software, used by 40,000+ organisations worldwide! (1/2)
    northwave-cybersecurity.com
    Ivanti/Pulse VPN privilege escalation exploit
    Ivanti/Pulse VPN privilege escalation exploit
    1
  • @NorthwaveLabs
    Northwave Labs
    @NorthwaveLabs
    Feb 21, 2023
    Our red teamer @Expl0itabl3 ported MDI check instance to Python. Use it to your advantage, check if your target uses Microsoft Defender for Identity during your recon phase. github.com/expl0itabl3/ch…
  • @NorthwaveLabs
    Northwave Labs
    @NorthwaveLabs
    Nov 17, 2022
    Northwave has conducted research into the psychological effects of a ransomware crisis on people involved in mitigating a ransomware attack. The findings reveal the deep marks that a ransomware crisis leaves on all those affected. northwave-security.com/wp-content/upl…
    1
  • @NorthwaveLabs
    Northwave Labs
    @NorthwaveLabs
    Jun 25, 2022
    Cobalt Strike BOF foundation for kernel exploitation using CVE-2021-21551. In its current state, as a PoC, it overwrites the beacon token with the system token (privesc).
    GitHub - NorthwaveSecurity/kernel-mii: Cobalt Strike (CS) Beacon Object File (BOF) foundation for...
    From github.com
  • @NorthwaveLabs
    Northwave Labs
    @NorthwaveLabs
    Mar 15, 2022
    While this may sound too simple, we've managed to escalate across domains on several occasions by accounts with blank passwords 🔥! In this blog we describe how it works, and which popular spraying tools we've updated to support empty password spraying: northwave-security.com/abusing-empty-…
    1