All posts in Uncategorized

■■■□□ AMSI/ETW Bypass from Unprivileged Context: Assumed Breach Without Admin. https://github.com/osherjacobs/AD-Lab-Research/blob/main/amsi-etw-lowpriv.md

■■□□□ OSINT: China Anti Nuclear Base. https://www.reuters.com/graphics/CHINA-MILITARY/NUCLEAR/zjpqmbrlqpx/

■■■□□ Website to test the risk your browser possesses: https://ckure.org/rx/FROST/ Result comes as Low, Medium or High and you will get JSON response which you can copy for checking on any AI for more clarity. 👮

■■■■■ Websites have a new way to spy on visitors: Analyzing their SSD activity. Telltale SSD activity can be measured in the browser using simple JavaScript. https://arstechnica.com/security/2026/05/websites-have-a-new-way-to-spy-on-visitors-analyzing-their-ssd-activity/

😔 Mini Plasma Zero-Day by Chaotic Eclipse (aka Nightmare Eclipse) with a total of 6 0-Days in 6 weeks. Official blog: https://deadeclipse666.blogspot.com https://blog.barracuda.com/2026/05/19/nightmare-eclipse-zero-days-grudge

 BTMOB Android malware service generates custom phishing payloads An Android remote access trojan named BTMOB is offered to cybercriminals with a builder interface for generating malware payloads tailored to phishing lures. […] https://www.bleepingcomputer.com/news/security/btmob-android-malware-service-generates-custom-phishing-payloads/

■■■□□ Python-based web vulnerability scanner utilizing Acunetix vulnerability database. https://codeberg.org/neolead/acuscan.git https://github.com/neolead/acuscan

■■■□□ Open-source LLM Red-Team lab. 159 transforms, 25 tool surfaces, BYOK gateway. Runs in your browser. https://github.com/m4xx101/cryptex-oss

■■■■■ GHSL-2026-140: Heap Buffer Write Overflow in 7-Zip. https://securitylab.github.com/advisories/GHSL-2026-140_7-Zip

■■■□□ GitHub has terminated the account of “Nightmare-Eclipse,” an anonymous rogue security researcher known for dropping critical unpatched Windows vulnerabilities since Microsoft left them “homeless with nothing.” The vigilante has now moved to GitLab, releasing more threats. https://cybernews.com/security/github-bans-researcher-releasing-windows-zero-days