Guess what... @fortraofficial / @_ZeroPointSec are looking for a new content developer to join our ranks. fortra.wd12.myworkdayjobs.co…

Diesel over £2 a litre now. New taxes on pensions next year. This country is so cooked.

Wicked coin

Too funny 🤣

We released our first two lockpicking challenges, it teaches the basics of lockpicking in a fun and interactive way. Hope to see you at the villa! More updates are coming, if you have any idea about other cool challenges let us know. check it out at hackdevilla.nl

Bastard horses broke into the back field

Need to circumvent Constrained Language Mode while operating in an environment with App Control for Business enabled? gist.github.com/enigma0x3/22… (Was reported, is by design). Enjoy!

I've just released the first video in the Evilginx Pro Tutorials series, where I'll be providing hands-on tutorials on how to use Evilginx Pro and develop phishlets. The first video teaches how to set up Evilginx Pro locally and test the Google phishlet from the official phishlet database. It lays the foundation for the upcoming videos, in which I'll explain, step by step, how to create your own phishlets from scratch. Enjoy, and happy phishing! 💗 You can find the YouTube link in the post below. 👇

Been digging deep into the Windows Endpoint Security Platform (WESP) in Win11 25H2, definitely one of the most fascinating security features Microsoft has built in a while. The concept is neat: compile rules to decision graphs in user mode, hand them to wesp.sys, and let the kernel evaluate them in-path while telemetry streams asynchronously in the background. I did an AI-assisted reverse engineering dive into the whole stack (wesp.sys, espclient.dll, and wesp_elam.sys), documented the wire protocols, disposition tables, and the enforcement gate, and built esptool, a research harness with 118 XML rule docs so anyone can test live telemetry and in-kernel blocking. Repo: github.com/marcosd4h/wesp_re… Tech doc: github.com/marcosd4h/wesp-re… Thanks to @yarden_shafir for putting this on my radar

[TALK] Tomorrow, Fabian and I will be presenting some of our latest research on device emulation and exploitation on Windows. Come say hi if you’re around! mcttp.de/2026-mosch-und-magn…

Tomorrow I'll be speaking at CRESTCon in Manchester. If you're heading over, come say hello (or boo me off stage?). See you there o/

Not a bad view for a quick one

Story time...

Nightmare Eclipse, the person who has been dropping Windows zero-days, has finally decided to share his story. He's an ex-Microsoft employee, we had dinner together, and I've known him and his story for some time. His real name is Abdelhamid Naceri. He's a very talented and intelligent individual, and he came across as someone who'd be a real professional to work with. "If only I didn't pour my soul into that job with countless of stupid non sleep nights, i would have gotten over it..." - Naceri He loved Microsoft. I wouldn't say that what he did, releasing all those zero-days, was normal, but he felt he had no other option because of the injustice Microsoft did to him. They fired him, and you can read the vague reason they gave in the email sent to him by the Vice President of Engineering at MSRC, below. According to Abdel's account, VP Tom Gallagher met with him after the firing to tell him they were blacklisting him from Microsoft and writing him a bad reference so he'd never be able to get a job again. Normally you'd think, well, big deal, just find another job, right? But Abdel doesn't have a European passport, and he was only a couple of months away from getting permanent EU residence. So instead of granting him those couple of months, Microsoft fired him for a reason that, as far as we can tell, was never made clear, then fought him in court and offered him €55,000 plus a year's pay to drop the case. All while Abdel was releasing zero-days. Abdel continued suing Microsoft for unfair termination in Germany, a fight that has cost him over $200,000. He says Microsoft refused to reveal any details about the security breach and went another direction. If you are reading this, and you can offer him a LEGAL job, this is his e-mail: msnightmare@proton.me

Super excited to see WESP land in public preview. I spent the past couple of days reverse engineering wesp.sys and espclient.dll, along with building a consumer POC. Here is a writeup on my initial analysis: jonny-jhnson.dev/blog/a-firs… GitHub POC: github.com/jonny-jhnson/Wesp…

We're looking forward to Beacon 2026, where RastaMouse will present "Yet Another Crystal Palace Talk: Evasion Tradecraft in the Cobalt Strike Ecosystem". info.fortra.com/beacon-2026 📍 St Ethelburga's, London, UK 📅 September 23, 2026

lmao is there not a better picture of me 🤣

Finally got a POC working. Working on a blog now, hopefully out in a couple of days 😀