Payload Forge @payloadforge
Joined July 2012-
Tweets68
-
Followers25
-
Following892
-
Likes2K
Original PoC by Aniq F. github.com/aniqfakhrul/CV… Patched forks if you want to test before the PRs merge. github.com/GregDurys/CVE-… github.com/GregDurys/impa…
With both patched, the CA cleared both callbacks and issued a certificate. A workstation target completed PKINIT and returned its NT hash and ccache. Three PRs followed. Impacket github.com/fortra/impacke… CertiGhost fix github.com/aniqfakhrul/CV… Debug github.com/aniqfakhrul/CV…
CertiGhost (CVE-2026-54121) was published on 24 July by H0j3n and Aniq F. I expected to spend five minutes running their PoC in my Ludus lab. Every run failed in the same place with STATUS_NOLOGON_SERVER_TRUST_ACCOUNT. gist.github.com/H0j3n/a5ef2609…
I bypassed Skillable's per-user lab limit by changing a userId the browser hands over, then used a colleague's allocation with his consent. Skillable says it is SCORM's fault, not theirs, and will not fix. So I disclosed it. CVE-2026-56877. payloadforge.io/beyond-crto-sk…
A real root-level bug chain, acknowledged by the maintainer and the deployment operator. Still no CVE. Declined on scope, rejected twice as “appears to be a test”, now parked at MITRE. Fixed and merged upstream; the ID field still blank. payloadforge.io/beyond-crto-pw… #cve #CRTO
Passed the CRTO. Five years late, but passed. Retrospective on what changed between 2020 and 2026: platform, tradecraft, exam. Plus two security issues reported under coordinated disclosure. payloadforge.io/crto-lifetime-…
Same appliance tested twice at two different orgs. First time: 20+ findings from VA scans and a ChatGPT prompt. Second time: 5 CVEs in 5 days, vendor patches, halted go-live. I wrote up what changed. payloadforge.io/why-infra-pent…
2/2 Grok cited 119 sources with CLI flags that don't exist. Claude caught the hallucination… then suggested its own unverified workarounds. The actual fix? Plain old human debugging instinct. Full write-up: payloadforge.io/i-asked-two-ai….
1/2 War diary from LLM-assisted pentesting: needed a vulnerable che-machine-exec instance for my Metasploit PR (CVE-2025-12548, unauth RCE in Eclipse Che). Asked Grok 4 and Claude Sonnet 4.6. Both confidently wrong.
@Filzime @Filzime @MakeItAQuote Quote
CitrixBleed. Yep, that's it, the whole exploit. github.com/assetnote/expl…
@_RastaMouse Some men just want to watch the world burn.
@mpgn_x64 Thanks for your hard work 🫡
@snovvcrash Or Winfoom on *win (which supports PAC and Kerberos auth)
@DKaufmann_ @NextDNS @Pug50 Same issue here on pfSense since ~9h ago.
I think lots of developers find it surprising that resource limits apply across setuid/setgid/filecap exec boundaries. Here is the quick and dirty tool I use to find interesting errors to investigate. github.com/taviso/scanlim…
So… it’s time! Official launch of the 2020 SANS #HolidayHack challenge and KringleCon 3: French Hens is NOW!!! Please join us at holidayhackchallenge.com for the fun! Happy holidays from Santa and all the Elves! @KringleCon
пинг00 (e/acc) @DoYouEvenBrown
255 Followers 3K Following japes and general tomfoolery | red-teaming, hard-tech, synbio, anthropological history, linguistics, theories of life, etc | hmu at ping00 at protonmail dot com
Lunaaa @lunaqtprettylz
31 Followers 848 Following Flirting? I just operate on 'adorable mode'. 18/yo
Emmastar ⭐ @sweetemma4947
75 Followers 2K Following cute but I cry to songs often 🎵 100% follow back always
cammy certified silly @bebebi_bi
7 Followers 520 Following soft like morning light, chaotic like my timeline 🌅 follow back
Kathleen Grace @KathleenGr18101
3 Followers 170 Following Recruiting webshell engineers to pe netrate websites, with a monthly salary of up to $100,000. If interested, please contact https://t.co/CNjnjmD3DR
Student Of Things @studentofthings
2K Followers 2K Following Freedom focused cognitive dissonance creator.
nugxperience @nugxperience
303 Followers 1K Following
a V34v1 @v34v1a
2 Followers 489 Following
Violet @coffey_violet43
221 Followers 3K Following
Brett Johnson @GOllumfun
12K Followers 10K Following Former US Most Wanted Cybercriminal Turned Good Guy. Speaker, Consultant, Writer, Podcaster. Now Protecting you from the type of person I used to be.
EMBA Firmware Analyze... @securefirmware
2K Followers 1K Following Open Source Firmware Security Scanner
Ryan Stephenson @ryanstvnson
119 Followers 204 Following
Ben the Pyro Guy @pyr... @PyroGuy_UK
3K Followers 4K Following Fire Spinnin Security Engineering Leader, Breaker of things, Builder of stuff, Model builder, @BSidesNcl & @dc44191 Elder, @infosecbots Technowomble, he/him
GrimSaxon @FarmerHacker
79 Followers 592 Following 2nd career IT Support Tech. InfoSec degree student. Self Reliant Off-Grid Homesteader. A Polymath of Contradictions.
MicahKBrown @micahkbrown
721 Followers 757 Following Smoker of fine foods & finer drinks, Technologist, Hacker, ITSec Presenter, @ThreatReel podcast, Queen City Con organizer, Millionaire Playboy, aspiring Stoic.
Israel G @ipartner_
638 Followers 5K Following . ..: I love solve problems for which there is no obvious answer
Smittix @smittix1
2K Followers 689 Following Hive Red Team Lead @ CovertSwarm and Ex Head of Offensive Security at Bridewell + Fedora Linux UK ambassador Tweets my own of course.
ΜΔDΞRΔS @hackermaderas
21K Followers 14K Following Home of #CyberpunkisNow. Hacker, researcher, writer, creating original #Technology #InfoSec #OSINT #Privacy content & analysis.
Security Illusions - ... @SecIllusions
27 Followers 39 Following Strictly Security Podcast. Nothing is safe, everything is risk, and everyone is liable. We are: @_sil0_ @bsdbandit @Suprn8
Chris Hanlon @ChrisHanlonCA
17K Followers 18K Following Security Engineer Google Security Hall of Fame Presenter & Workshop host at #BSidesLV and #DEFCON
Rob Fuller @mubix
78K Followers 25K Following Dad / Husband / Marine / Student / Teacher / @Hak5 / @NoVAHackers / @SiliconHBO / @NationalCCDC / @MARFORCYBER Auxiliary
ThreatWire @ThreatWire_
1K Followers 148 Following 🚨 Breaking cybersecurity news • CVEs • Zero-days • Exploits • Web3 & Crypto Security • Threat intelligence in real time.
Emilio 🇪🇺 @norbemi
975 Followers 1K Following SecureFlag | GTFOBins | Weevely | Former Red Teamer @[email protected]
AИDREA @cyrus_and
1K Followers 546 Following uid=0(root) gid=0(root) groups=0(root) GTFOBins ~ gdb-dashboard ~ chrome-remote-interface ~ mysql-unsha1
Gavin Baker @GavinSBaker
328K Followers 6K Following Managing Partner & CIO, @atreidesmgmt. Husband, @l3eckyy. No investment advice, views my own. https://t.co/pFe9KmNu9U
Sandy Petersen 🪔 @SandyofCthulhu
91K Followers 1K Following Game Designer and Father of Lovecraftian gaming. CEO of Petersen Games. Also Doom, Age of Empires, etc. Subscribe for exclusive game insights & history!
tanuki42 @tanuki42_
7K Followers 362 Following Independent on-chain analyst | Contributor @zeroshadow_io & @SEAL_911
Clint Gibler @clintgibler
26K Followers 579 Following 🛡️ Leading Cyber at @OpenAI 📚 Creator of https://t.co/xwtIAI0CuJ newsletter
Tom Jøran Sønstebys... @L1v1ng0ffTh3L4N
2K Followers 272 Following #CyberSecurity Researcher from Norway. Research has been carried out in my sparetime, and the views expressed are solely my own, not those of my employer.
That Privacy Guy @alexanderhanff
6K Followers 3K Following Globally respected Privacy expert and host of @ThatPrivacyShow - also, a reassuringly expensive consultant. @[email protected]
ClaudeDevs @ClaudeDevs
663K Followers 2 Following Official updates for developers building with @ClaudeAI
Arena.ai @arena
218K Followers 219 Following Where AI meets the real world. We measure and advance the frontier of AI through community-driven evaluation. We’re hiring → https://t.co/XBZCrsdD77
Kevin Naughton Jr. @KevinNaughtonJr
101K Followers 303 Following building @ferrymanio, prev eng @google
Tom Dörr @tom_doerr
218K Followers 3K Following Follow for posts about GitHub repos, DSPy, and agents Subscribe for top posts DM to share your AI project (Due to volume of DMs I'll prioritize subscribers)
Nav Toor @heynavtoor
150K Followers 252 Following Helping you master AI daily with step-by-step AI guides, latest news, & practical tools • DM for Collabs
Tib3rius @0xTib3rius
73K Followers 663 Following Cybersecurity Content Creator | UwU-Anointed Wapp King | DEF CON Gameshow Host | Ex-Brit | https://t.co/04RRExvxXj (he/him) 🇺🇸 @TheRealC3rul34n is bae 🥰
Mahmoud Al-Qudsi @mqudsi
34K Followers 701 Following My name is my watermelon. Tech tweets on hold while we fight for 🇵🇸. Don’t forget Syria, Sudan, and Congo.
Florian S @airesearch12
5K Followers 1K Following
Lior Alexander @LiorOnAI
117K Followers 3K Following Founder @AlphaSignalAI (300k devs) • Ex-MILA researcher focusing on solving the explosion of information in AI.
PJ Ace @PJaccetturo
97K Followers 2K Following Viral AI ad madman - CEO of https://t.co/YBc1Zfp6GN - 300M+ Views | Featured in Variety, Hollywood Reporter. || Steal my playbook & 100x views on your AI videos 👇🏼
Magnific @magnific
89K Followers 1K Following The pro platform for creative visionaries who set the bar high. 110M+ users. 1M subscribers. Be Magnific.
Mohit Gupta @_Skybound
161 Followers 62 Following Principal Security Consultant @ Reversec focusing on all things AWS, CI/CD and Kubernetes More active on Slack than here (links at bottom of personal website)
Daniel Cuthbert @dcuthbert
33K Followers 2K Following Documentary photographer, old creaky hacker. Co-author of @OWASP ASVS standard. Blackhat/Brucon Review Board & Co_chair UK Gov Cyber Security Advisory Board
Michael Niedermayer @michael__ni
2K Followers 95 Following
Justin Murphy @jmrphy
55K Followers 639 Following Independent scholar. New book: The Independent Scholar (2026), a history from Plato to Nietzsche.
Dr. Insensitive Jerk @DrInsensitive
28K Followers 863 Following PhD Economist and sci-fi author. If you like my writing, you will like my writing and you'll love my audiobook, Waffle Irons vs. the Horde.
The Lunduke Journal @LundukeJournal
35K Followers 657 Following Tech Journalism with zero ads, & zero Big Tech influence. We cover the Big Tech stories that other publications are afraid to touch.
Mandiant (part of Goo... @Mandiant
129K Followers 4K Following We’re determined to make organizations secure against cyber threats and confident in their readiness.
Luke Turvey @TurvSec
8K Followers 383 Following Professional Hacker. Founder of PenTest reporting tool https://t.co/wU45D4wCUG Collects infosec tools like Pokémon cards at: https://t.co/HUC8oTdRCo
freefirex @freefirex2
2K Followers 168 Following Research Practice Lead @Trustedsec gamer and nature enthusiast
cr0@Defensive-Securit... @cr0nym
3K Followers 3K Following Focus on Linux/Kubernetes Attack/Detection/Forensics/Incident Response/Threat Hunting/Active Defense. Learning hard every single day.
Brett Hawkins @h4wkst3r
3K Followers 506 Following Leader | Red Team | Conference Speaker | Security Researcher | Tool Developer | current @armadinsecurity | prev @xforce @mandiant @chase
Sam Bent @DoingFedTime
20K Followers 418 Following Agorist. Counter-economist. Privacy maximalist. Student of OPSEC. Anti-authoritarian. Free speech absolutist. Logician. Ex-Darknet Vendor. Youtuber.
Zeek Arkham 🇺🇸 @ZeekArkham
516K Followers 9K Following 20 year NYPD Lieutenant (retired). Conservatarian. The truth, and nothing but the truth. All Lives Matter.
urlscan.io @urlscanio
14K Followers 136 Following A sandbox for websites - Find malicious websites and phishing - https://t.co/LfPJPBGXFV - https://t.co/XjI4zJaBBp - #threatintel #cybercrime #infosec #web #phishing
International Cyber D... @IntCyberDigest
207K Followers 273 Following Independent reporting on cybersecurity, tech, AI & digital policy.
SpaceXAI @SpaceXAI
2.1M Followers 6 Following
Flo Crivello @Altimor
51K Followers 1K Following Founder @getlindy. "Striving to remember the obvious over grasping the esoteric."
WDNC @CareWeDoNot
342 Followers 108 Following Freedom. Pattern Recognition. Cyber Security. Music Theory. Hardware and Software hacking. Do not follow me I post nonsense. PUBG enjoyerYou might like
