Atsika
@_atsika
Followers
597
Following
4K
Media
76
Statuses
2K
Red Team enthusiast | Malware development enjoyer | Adversary Simulation at @quarkslab
Unknown
Joined April 2020
ProxyBlob is alive ! We’ve open-sourced our stealthy reverse SOCKS proxy over Azure Blob Storage that can help you operate in restricted environments 🔒. 🌐 Blog post for more details right below ⬇️.
Look at those cute little blobs in your internal network. They look harmless, but how about the one carrying SOCKS? It's ProxyBlob, a reverse proxy over Azure. Check out @_atsika's article on how it came to exist after an assumed breach mission ⤵️.👉
3
46
110
RT @ZeroMemoryEx: Last year, @orange_8361 discovered a PHP RCE. This year, I took it a step further delivering that RCE to local servers us….
0
50
0
RT @TrustedSec: Does your WAF use IP restrictions, or are they more like IP recommendations? @nyxgeek reveals the difference between Remote….
0
29
0
Excellent job @C5pider 👏 My personal favorite features are the full PIC agent with modular extensions and the VM-based post-exploitation as this offers so much flexibility 🔥.
Introducing Havoc Professional: A Lethal Presence. We’re excited to share a first look at Havoc Professional, a next-generation, highly modular Command and Control framework, and Kaine-kit our fully Position Independent Code agent engineered for stealth!.
0
0
17
RT @lastweekinfosec: Lenovo Applocker bypass (@Oddvarmoe), Citrix Bleed 2 (@SinSinology, @inkmoro, Aliz Hammond), A+ adversary simulation (….
0
5
0
RT @quarkslab: You finally pwned the Holy Confluence server. What now? Create a user? Reset a password? .🚨Best way to trigger an alert.What….
0
13
0
> Dissect Confluence's modules 🔬.> Replicate how they work ✍️.> Get a stealthy access 😶🌫️.> Profit 🤑.
You finally pwned the Holy Confluence server. What now? Create a user? Reset a password? .🚨Best way to trigger an alert.What if you craft your own Personal Access Token 🔑 for the Admin account?.Find out how in this blog post by Quarkslab's Red Teamer YV.
0
0
4
RT @rayanlecat: Writeups for the @Shutlock CTF 2025 web challenges (mostly blackbox) are up:. Thanks to the @EPITA….
0
2
0
RT @OutflankNL: BOFs are powerful, but error-prone! We dropped a post and new BOF linting tool to catch bugs early, and to prevent crashing….
0
58
0
RT @TrustedSec: Chrome Remote Desktop can offer red teamers a subtle way to bypass restrictions—if they know how to use it. In this blog, @….
0
84
0
Wanna talk about Maldev, Red Team or Pentest ? I’ll be with @rayanlecat at @quarkslab booth, come to see us 🔥. #lehack
🇫🇷 THREAD — Quarkslab @ leHACK 2025.1/ 🎉 leHACK 2025 est lanc�� à Paris !.Retrouvez @Quarkslab au stand 20 : sécurité embarquée, reverse engineering et défis techniques tout le week-end. 🔗 #leHACK #cybersécurité
0
8
31
RT @BallisKit: Here is a reminder that a Powerful DotNET obfuscator is available in MacroPack. Assembly level obfuscation (or course). Wit….
0
52
0
RT @trickster012: This is my research project in creating read, write and allocate primitives that can be turned into an injection in order….
0
96
0
RT @BallisKit: MacOS security is very different from Windows. DarwinOps, our redteam tool targeting MacOS can help you tackle that issue!….
0
16
0