1. X
  2. Hakai Offsec
Log inSign up
Hakai Offsec
153 posts
Hakai Offsec profile banner
user avatar

Hakai Offsec

@HakaiOffsec
We discover security flaws that your team would never have thought of. hakaisecurity.io/research-blog/
hakaioffensivesecurity.com
Joined June 2023
275
Following
1,219
Followers
RepliesRepliesMediaMedia

Log in or sign up for X

See what’s happening and join the conversation

Continue with phone
or
Log in with username or email
Terms·Privacy·Cookies·Accessibility·Ads Info·© 2026 X Corp.
  • Pinned
    user avatar
    Hakai Offsec
    @HakaiOffsec
    Jun 22, 2023
    After some hard work, coffee has been released! Our newest Rust COFF Loader! If you want to check it out: github.com/hakaioffsec/co… Don’t forget to check our blog post for more details: labs.hakaioffsec.com/coffee-a-coff-…
    Image
    GitHub - hakaioffsec/coffee: A COFF loader made in Rust
    From github.com
  • user avatar
    Hakai Offsec
    @HakaiOffsec
    Aug 24
    During DefCon 34, the Hakai Security team presented and publicly released four new tools developed to enhance offensive security research, evasion, obfuscation, and mobile pentesting. Check out the summary of what was just added to our GitHub: Mirage: Agnostic network traffic
    Image
    00:00
  • user avatar
    Hakai Offsec
    @HakaiOffsec
    Aug 24
    Hakai Security dominated Las Vegas! Our team had a massive presence on stage at BSides Las Vegas and DEF CON 34. We delivered 7 high-level technical talks, bringing cutting-edge research on exploit development, reverse engineering, detection evasion, mobile hacking, and APT
    Image
    00:00
  • user avatar
    Hakai Offsec
    @HakaiOffsec
    Aug 14
    How much memory should be required to change the tag of an NPM package? Just a few bytes, right? During research conducted by Yokai, Hakai Offensive Security's research team, analysis of Gitea's Package Registry revealed that a seemingly harmless endpoint could be abused to cause
    Image
  • user avatar
    Hakai Offsec
    @HakaiOffsec
    Aug 9
    Teams. Outlook. Half your enterprise software. They're all quietly shipping a Chromium browser inside them called WebView2. Murilo Caixeta shows how to turn that trusted, signed process into a genuine red team asset. Murilo Caixeta @Murilo.caixeta_ Red Team Village
    Image
Advertisement
Advertisement