S3cur3Th1sSh1t

@ShitSecure

Pentesting, scripting, pwning!

127.0.0.1

Joined January 2019

344 Following

29.3K Followers

Replies Reposts Media

Pinned
S3cur3Th1sSh1t
@ShitSecure
Oct 10
Input payload obfuscation is a real game changer here. No AMSI or ETW bypass needed and memory scanner evasion 👀
MSec Operations
@MSecOps
Oct 9
RustPack Release 1.8.0 was shipped to our customers recently. Short Blogpost with the most relevant new features for everyone here 🔥🔥 msecops.de/blog/posts/rus… #RedTeam #OST #Pentest #Maldev
2
S3cur3Th1sSh1t
@ShitSecure
Oct 6
When your only authorization is JavaScript client side. And you can make yourself admin in 20 minutes. Than you know this was vibe coded. What is happening in 2026? 🤣
S3cur3Th1sSh1t
@ShitSecure
Oct 6
Doing an WebApp Pentest today. And this WebApp is 95% likely fully vibe coded. Authorization issues everywhere. Logical issues everywhere. Its like an CTF. And big consulting company likely won a tender because of lowest price. Happy birthday the next years will be great! 🫡🤪
10
S3cur3Th1sSh1t
@ShitSecure
Oct 6
Doing an WebApp Pentest today. And this WebApp is 95% likely fully vibe coded. Authorization issues everywhere. Logical issues everywhere. Its like an CTF. And big consulting company likely won a tender because of lowest price. Happy birthday the next years will be great! 🫡🤪
13
S3cur3Th1sSh1t
@ShitSecure
Oct 3
1.5 days later Qwen 3.8 Flash Next finished the first exemplary driver exploit PoC for PPL disable. Not listed on loldrivers not on the MS Blacklist. I guess many more to follow. GLM 5.3 Flash was not needed for this one 🧐
12
S3cur3Th1sSh1t
@ShitSecure
Sep 29
Qwen 3.8 Flash is decompiling thousands of drivers 24x7 searching for vulnerabilities while in parallel trying to build PoC exploits for some found vulns. Partially reaching 160 tok/s on two Sparks. No limit, no guardrails. This is what local AI can be used for perfectly fine! 🔥
21