S3cur3Th1sSh1t (@ShitSecure) / X

Pinned

S3cur3Th1sSh1t

@ShitSecure

Oct 10

Input payload obfuscation is a real game changer here. No AMSI or ETW bypass needed and memory scanner evasion 👀

MSec Operations

@MSecOps

Oct 9

RustPack Release 1.8.0 was shipped to our customers recently. Short Blogpost with the most relevant new features for everyone here 🔥🔥 msecops.de/blog/posts/rus… #RedTeam #OST #Pentest #Maldev

When your only authorization is JavaScript client side. And you can make yourself admin in 20 minutes. Than you know this was vibe coded. What is happening in 2026? 🤣

S3cur3Th1sSh1t

@ShitSecure

Oct 6

Doing an WebApp Pentest today. And this WebApp is 95% likely fully vibe coded. Authorization issues everywhere. Logical issues everywhere. Its like an CTF. And big consulting company likely won a tender because of lowest price. Happy birthday the next years will be great! 🫡🤪

Doing an WebApp Pentest today. And this WebApp is 95% likely fully vibe coded. Authorization issues everywhere. Logical issues everywhere. Its like an CTF. And big consulting company likely won a tender because of lowest price. Happy birthday the next years will be great! 🫡🤪

1.5 days later Qwen 3.8 Flash Next finished the first exemplary driver exploit PoC for PPL disable. Not listed on loldrivers not on the MS Blacklist. I guess many more to follow. GLM 5.3 Flash was not needed for this one 🧐

Qwen 3.8 Flash is decompiling thousands of drivers 24x7 searching for vulnerabilities while in parallel trying to build PoC exploits for some found vulns. Partially reaching 160 tok/s on two Sparks. No limit, no guardrails. This is what local AI can be used for perfectly fine! 🔥

20