Work like hell, Share all you know, Abide by your handshake, Have fun. - Dan Geer
The World
- Tweets 1,529
- Following 317
- Followers 8,999
- Likes 752
Orange Cyberdefense's SensePost Team retweeted
I put up a writeup of our @sensepost annual artwork up here sensepost.com/blog/2026/sens… Free downloads if you like it.
2
4
6
926
Orange Cyberdefense's SensePost Team retweeted
We've documented a new EDR-bypassing process injection technique from @z3ro2504 & Max Hirschberger on the @sensepost blog. Link to post and code in the replies.
5
91
423
20,965
Orange Cyberdefense's SensePost Team retweeted
A clip introducing our new Binary Instrumentation with Frida course, aimed at getting you more comfortable with the @fridadotre ecosystem - coming to a conference near you!
More in 🧵👇
1
4
12
1,484
Orange Cyberdefense's SensePost Team retweeted
In Portswigger's Burp I needed a way to do Match & Replace globally across all utilities, not just the proxy so I wrote an extension github.com/singe/burp_global…
5
19
120
7,155
Orange Cyberdefense's SensePost Team retweeted
Really excited to present this Frida training @1ns0mn1h4ck with @IPmegladon and myself! If you've dabbled with @fridadotre before, but want a practical learning opportunity to improve your usage and understanding, this one is for you!
Learn how to bypass security controls using Frida at #InsomniHack workshop. "Binary Instrumentation with Frida" is led by SensePost and it is made for reverse engineers & pentesters. Get your ticket: ow.ly/bPNA50XVBIx
#Cybersecurity #INSO2026 #Cyberworkshops
3
6
2,074
A huge post detailing the discovery of 6 CVE's, and another announcing pipetap, a new Windows named pipe proxy/tool!
Two blog posts just dropped - one with the details on the bloatware pwning shenanigans I was up to earlier in the year, and another on pipetap, a new Windows named pipe proxy/tool.
sensepost.com/blog/2025/pwni…
sensepost.com/blog/2025/pipe…
3
24
4,769
Orange Cyberdefense's SensePost Team retweeted
It’s almost time for my @BSidesCapeTown talk, and I’ve just open sourced pipetap. My Windows named pipe proxy & multi-tool. Excited to see what you do with it!
github.com/sensepost/pipetap
I've been hacking on a new Windows Named Pipe tool called PipeTap which helps analyse named pipe communications. Born out of necessity while doing some vulnerability research on a target, its been super useful in reversing it's fairly complex protocol. :)
ALT The proxy view for PipeTap, a Windows Named Pipe Analysis Tool
3
38
120
15,128
Orange Cyberdefense's SensePost Team retweeted
When Szymon Ziolkowski (@TH3_GOAT_FARM3R) turned his attention to OpenINTEL, he discovered a dataset with surprising power for recon, OSINT, and vulnerability research.
His talk Making OpenINTEL open up, is recon candy. So bring your notebook and your curiosity..
4
7
657
Need to open doors from the outside without touching anything? Turns out thats possible with no touch sensors as @shifttymike details in his latest blog post. Link in 🧵👇
1
5
15
4,014
Orange Cyberdefense's SensePost Team retweeted
Landed a new gowitness release, this time focussing on performance! 🎉 v3.1.0
github.com/sensepost/gowitne…
9
19
1,965
Orange Cyberdefense's SensePost Team retweeted
Anyone got a vulnerable Fortinet they can test this scanner against? github.com/sensepost/CVE-202…
2
1
1,845
Orange Cyberdefense's SensePost Team retweeted
A major upgrade for a major year.
@orangecyberdef went Platinum.
That’s right, they’ve upgraded from Gold to Platinum for BSides Cape Town 2025, backing the community harder than ever and helping us raise the bar for this year’s conference.
@sensepost
5
8
915
Orange Cyberdefense's SensePost Team retweeted
A browser that reboots your machine? That’s not a feature, that’s Leon Jacobs’ kind of fun. In 7 Vulns in 7 Days, he unpacks a week-long dive through bloatware and bad privilege boundaries. Join him at BSides Cape Town 2025 for bugs, exploits, and a few laughs at vendor expense.
5
10
1,449
Orange Cyberdefense's SensePost Team retweeted
Forget awareness training — Mooncake’s tackling phishing with Whack A Phish! Join Geoffrey Chisnall (@GeoffChisnall) at BSides Cape Town 2025 to learn real-world techniques for dismantling phishing sites.
6
6
905
Orange Cyberdefense's SensePost Team retweeted
🧡 We’re proud to welcome @OrangeCyberZA back as a Gold Sponsor for #BSidesCPT 2025!
A long-time supporter of the local infosec community, they’re once again helping us create spaces to learn, connect and grow.
3
6
642
Orange Cyberdefense's SensePost Team retweeted
I've been hacking on a new Windows Named Pipe tool called PipeTap which helps analyse named pipe communications. Born out of necessity while doing some vulnerability research on a target, its been super useful in reversing it's fairly complex protocol. :)
ALT The proxy view for PipeTap, a Windows Named Pipe Analysis Tool
18
144
994
71,902
Reverse engineering Microsoft’s SQLCMD.exe to implement Channel Binding support for MSSQL into Impacket’s mssqlclient.py. Storytime from Aurelien (@Defte_), including instructions for reproducing the test environment yourself.
(link below)
ALT A screenshot of two windows. The top is a view of the Microsoft SQL management GUI showing that “Extended Protection” is enabled for NTLM authentication. The bottom is a terminal showing an invocation of Impacket’s mssqlclient.py successfully connecting using channel binding.
4
116
357
24,077