mon3L

Just another Infosec Addict, a Student & Teenager interested in Web, Network, CTF's, IOT Security & RE stuffs.

[V12 @v12sec]

And here's postgres bidirectional RCE

no admin required, client infects server, server infects client ♻️🐛

[NDevTK @ndevtk]

Bug write-up for "AI Studio Auth bypass" https://t.co/Ej5e0KkwGO (。_。)

[DirectoryRanger @DirectoryRanger]

The Mimikatz Missing Manual, by @Carlos_Perez
https://t.co/iJ5bRJXudv

[mon3L @0xmon3L]

@SinSinology Buffer Overflow 😂😂

[A Green Being @a_green_being]

@XBToshi Okay, grok has uploaded my entire user directory to xAI's servers. It contains my SSH keys, my password manager database, my documents, photos, videos, everything...

[Cyber Advising @cyber_advising]

CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys

PoC
https://t.co/TivY9jSEl6

[blackorbird @blackorbird]

AI-Red-Teaming-Guide
https://t.co/PqjCaM37L9

[blasty @bl4sty]

aaaaaand we just finished a dumb request smuggling PoC for (Open)LiteSpeed httpd live on stream: https://t.co/cgqOg0OB82

their commit hygiene is designed to hide security fixes, didn't manage to find a CVE/report anywhere.

all results will be published on https://t.co/qTIDNWhAWS -- beware, minimal curation! ;^)

[Smukx.E @5mukx]

https://t.co/smMUQYcOrC

[blackorbird @blackorbird]

SpotifyC2 is a cybersecurity research project that demonstrates cloud-based command communication using Spotify playlists for command retrieval and Telegram for output delivery, without requiring the Spotify Web API.

[mon3L @0xmon3L]

@hackerfantastic @HuntressLabs Damnn

[kmkz @kmkz_security]

Oracle VM VirtualBox - VM escape via VGA device: https://t.co/ZijlgcaatK

[mon3L @0xmon3L]

@UK_Daniel_Card Damnn 😂

[Charly Wargnier @DataChaz]

🚨 Yarchi just published an awesome guide on building an AI "second brain" using Claude and Obsidian

Based on @karpathy's LLM Wiki concept, the idea is to stop starting from a blank chat window and start building a compounding knowledge graph.

Obsidian handles the local storage.

Claude acts as the brain.

I wrote down the condensed notes on how to wire them together:

The Stack:
→ Install Obsidian (your free, local text storage) and Claude Desktop Pro (the engine that reads and writes files).

The Bridge:
→ Install the "Local REST API" plugin in Obsidian, copy the key, and use Claude’s MCP framework to connect them (claude mcp add-json obsidian-vault...).

The Context:
→ Ask Claude to interview you. Have it ask about your goals, projects, and working style, then save it all to a CLAUDE.md file so it never forgets who you are.

The Structure:
→ Create specific project folders (Inputs, Process, Outputs, Feedback) and open them as isolated vaults so Claude stays focused on one job at a time.

The Automation:
→ Save repeated workflows as markdown "skills" and use Claude's schedule tab to trigger daily vault maintenance.

Voilà!

You end up with an AI that organizes your files, summarizes your notes, and remembers your entire context.

Full guide from Yarchi here ↓

[0xor0ne @0xor0ne]

Extracting plaintext wallet keys from the dGEN1 Ethereum phone (@hhj4ck)

https://t.co/hLBSkpLu9w

#infosec

[Wietze @Wietze]

🫯 New entry added to the #LOLBAS Project:
Proxy execution via system-native scp.exe. Takes any remote destination, doesn't actually have to run an SSH server.

👉 https://t.co/jLCiaB1fuM
Thanks @BinFault

[mon3L @0xmon3L]

@PwnFunction On hugging face 😂😂

[mon3L @0xmon3L]

@hasherezade LoL 😂

[mRr3b00t @UK_Daniel_Card]

"GreatXML
GreatXML bitlocker bypass vulnerability

Steps to reproduce,

If defender offline scan was initiated in the victim machine at any point then there is no need to login, the machine is automatically vulnerable. You will have to copy "unattend.xml" and "Recovery" directory to the root of the recovery partition then reboot to WinRE using shift + click on restart button, if everything was done correctly, a shell with unrestricted access to the bitlocker volume will spawn.
If defender offline scan was never initiated then you have to either login and initiate it yourself or figure out a way to boot into WinRE in offline scan state (I believe it should be very possible to do so without logging in) and follow steps above
If everything is done properly, this should be the result"

#bitlocker #hacks