netbiosX Add us as a preferred source on Google
Make a deal with netbiosX
🔒 Paid proposals held safely in escrow — released only when the work's approved.
📊 Post engagement
🔥 Top post: Offensive PowerShell https://screetsec.com/blog/offensive-powers · 2 likes + reposts
📊 Activity & format
Recent posts
View on Mastodon ↗
📝 Earlier this week, I wrote an article about how to abuse AMSI for persistence and detection guidance.
You can find the visualization diagram below.
🔗https://ipurple.team/2026/07/13/amsi-provider/
#redtean #purpleteam
📢 AMSI Provider - Playbooks & Detection Strategies
🎙️ Threat actors with elevated permissions could abuse this behaviour and register a fake AMSI provider to establish persistence.
𝑫𝒆𝒕𝒆𝒄𝒕𝒊𝒐𝒏 𝑺𝒕𝒓𝒂𝒕𝒆𝒈𝒊𝒆𝒔
✅ 7 - Sysmon Fake AMSI Provider DLL
✅…
Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender https://github.com/Chaelsoo/nimcrypt
A stealthy and modular Windows loader designed to bypass modern EDR solutions using Module Stomping, Stack Duplication, and Advanced Sleep Obfuscation. https://github.com/xec412/XeraLdr #redteam
Windows Service - Playbook & Detection Strategies https://ipurple.team/2026/07/06/windows-service/ #redteam #purpleteam
iPurple playbooks are now mapped to ATT&CK. The custom navigator has:
1️⃣ New Techniques with new ATT&CK IDs
2️⃣ Techniques and Sub-Techniques mapped to the iPurple playbook
So if you are looking for a purple team playbook or detection gu…
📢 New Article: QoS Policies to Restrict EDR Traffic and Detection Strategies
🎙️ QoS Policies are a legitimate Windows networking feature for capping the outbound bandwidth of a process, port, or protocol. Threat actors with elevated privil…
📢 WinGet - Code Execution, Persistence and Detection Strategies
🎙️ WinGet is a Living-off-the-land binary that enables threat actors to execute code by using malicious YAML files.
𝐃𝐞𝐭𝐞𝐜𝐭𝐢𝐨𝐧 𝐒𝐭𝐫𝐚𝐭𝐞𝐠𝐲 - 𝐄𝐯𝐞𝐧𝐭 𝐈𝐃𝐬
✅️️ 1, 3 & 7 - Sysmon Even…
Detection of EntryPoint Hijacking consists of the following:
1️⃣ EntryPoint address escapes the module’s DllBase range
2️⃣ MEM_IMAGE → MEM_PRIVATE transition
3️⃣ OriginalBase fails validation
🖊️ https://ipurple.team/2026/05/13/entrypoi…
🐘 Community & instance
💡 Facts
🕵️ Fake follower check
Estimated- Est. 73% real, active audience · Medium fake-follower risk.
- Low engagement (~0.3% of followers engage each post) — a sign of an inflated or inactive audience.
- Established account (3+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
More like this
Find more →Frequently asked questions
How much does netbiosX charge for a sponsorship?
How do I contact netbiosX for a brand deal or collaboration?
How many followers does netbiosX have?
✉ Message netbiosX
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with netbiosX
Booking an event / appearance is a Pro feature. Upgrade to book netbiosX for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ netbiosX gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.
Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove