@rustyphasm

rustyphasm has been a member of Linktree for 1 year and joined in July 2025. The social media accounts linked to from rustyphasm are: X, Bluesky, GitHub. Besides social media accounts, rustyphasm has populated their site with Hexacon24 - Advanced Active Directory and Azure exploitation, Typo3: leak to Remote code execution., Relaying Kerberos over SMB using krbrelayx, Finding gadgets like it's 2015: part 2, CVE-2024-26183, SSTIC24 - Action Man VS Octocat: GitHub action exploitation, Finding gadgets like it's 2015: part 1, GitHub Actions exploitation: introduction, Hijacking GitHub runners to compromise the organization, THC23 - Automating the extraction of secrets stored inside CI/CD systems, Finding gadgets like it's 2022, GitHub Actions exploitation: untrusted input, PTS22 - Finding Java deserialization gadgets with CodeQL, Injecting Java in-memory payloads for post-exploitation, GitHub Actions exploitation: repo jacking and environment manipulation, GitHub Actions exploitation: self hosted runners, GitHub Actions exploitation: Dependabot, CI/CD secrets extraction, tips and tricks.