I've been seeing posts all over about the state of CTFs post-LLM. I've seen many attempts to explain why this is just a new evolution of CTFs, but I fundamentally disagree. I believe the original spirit is gone and I've written why in my blog.
https://t.co/tgUZOGkhGV
[Defeating Jiagu Android packer the wrong way]
While testing an APK, i found that it was packed using Jiagu. This article serves as a quick documentation on how i unpack it the wrong way
Article: https://t.co/mJIfnZHE4A
Many are asking if they can move their Next.js projects from Vercel to Replit?
Yes!
- Go to Import then GitHub
- enter repo URL
- Agent will take care of the rest
It will set up the dev and deployment environments!
For companies moving lots of work, happy to help + discount.
AdaptixC2 v0.9 is out!
https://t.co/mL8AAS83TK
* New dock-based client
* Public Web-API
* New BOFs in Extension-Kit
Full changelog: https://t.co/9dlUFMQ8wU
@Gn0miez You can also connect the client through burp, which what i did during the MCP development in order to extract the APIs rather than digging into the code
@Gn0miez Hey, this is how they implemented the teamserver api, the code is mimicking the client, when the client send a custom bof it sends the binary also. As everything is stored and precompiled in the client side.
Israel murders five journalists in targeted airstrike in Gaza.
Al Jazeera journalists Anas al-Sharif and Mohammed Qreiqea, and camera operators Ibrahim Zaher, Mohammed Noufal, and Moamen Aliwa have been killed in a targeted Israeli airstrike.
Two weeks ago, UN Special Rapporteur Irene Khan warned that Israeli threats and smear campaigns were “a blatant attempt to endanger [Al-Sharif’s] life and silence his reporting on the genocide in Gaza.”
In July, the Committee to Protect Journalists said it was gravely concerned for his safety, warning he was being “targeted by an Israeli military smear campaign.”
Shortly before the strike, al-Sharif posted to X: “Non-stop bombing...For two hours now, the Israeli aggression has been intensifying on Gaza City.”
Well over 200 journalists and media workers have been killed in Gaza since October 2023.
@delete_exploits Its because you are accessing the front-end directly, what you need to do is accessing it via the reverse proxy (caddy) via https on port 443
In your case its https://localhost/internal
@delete_exploits Hey, its expected as you are browsing the “blocked page” any page you view is by default blocked unless you browse to the correct path, with you specified by -S option.
For example: -S internal -> https://t.co/1lOd80YsID
@hardc1dr @al3x_n3ff@0xcc00 As Alex stated, it doesn't actually "read" the file in that way, but I do think this should be easy enough for vendors to build detections for based on raw disk reading alone. I tested this with a top 5 EDR and it did not alert, even with dumping the extracted files to disk..
Dumping the NTDS.dit from disk - A new NetExec module💾
Isn't it super annoying when AV blocks your access to the SAM/SYSTEM hives?
The new "ntds_dump_raw" module made by @0xcc00 parses the disk image directly, allowing you to extract the NTDS.dit or SAM database🚀
Dumping the NTDS.dit from disk - A new NetExec module💾
Isn't it super annoying when AV blocks your access to the SAM/SYSTEM hives?
The new "ntds_dump_raw" module made by @0xcc00 parses the disk image directly, allowing you to extract the NTDS.dit or SAM database🚀
I've been playing with MCP, Releasing AdaptixC2_mcp a PoC that exposes Adaptix-C2 APIs to gemini-cli, enabling it to control a beacon and to simulate a threat actor behavior.
Code: https://t.co/ewqGuES5z4