CaptainHacX

🚩Jai Shree Ram🚩 🖥️RedTeamer💻Pentester 🔍

[CaptainHacX @CaptainHacX]

Hi Xiaomi Team,
Today I got Xiaomi 12 Pro phone from Amazon, and I noticed a problem regarding camera moisture. So I called Mi customer and their response was really bad. They don't even acknowledge the problem.
@MiIndiaSupport
@XiaomiIndia
@Xiaomi
@amazonIN
@manukumarjain

[CaptainHacX @CaptainHacX]

@TheSecOpsGroup @RemindMe_OfThis remind me on 19th November 2025

[The SecOps Group @TheSecOpsGroup]

🚨 𝙏𝙝𝙚 𝘾𝙤𝙢𝙢𝙪𝙣𝙞𝙩𝙮 𝘿𝙖𝙮𝙨 𝙎𝘼𝙇𝙀 𝙞𝙨 𝙇𝙄𝙑𝙀! 🚨
✨ 𝘓𝘪𝘬𝘦, 𝘙𝘦𝘴𝘩𝘢𝘳𝘦 & 𝘛𝘢𝘨 𝘺𝘰𝘶𝘳 𝘱𝘢𝘭𝘴 🎁 3 𝘓𝘶𝘤𝘬𝘺 𝘞𝘪𝘯𝘯𝘦𝘳𝘴 𝘸𝘪𝘭𝘭 𝘨𝘦𝘵 𝘢 𝘍𝘙𝘌𝘌 𝘴𝘦𝘢𝘵 𝘰𝘧 𝘵𝘩𝘦 𝘦𝘹𝘢𝘮 𝘰𝘧 𝘵𝘩𝘦𝘪𝘳 𝘤𝘩𝘰𝘪𝘤𝘦!

At 𝗧𝗵𝗲 𝗦𝗲𝗰𝗢𝗽𝘀 𝗚𝗿𝗼𝘂𝗽, we believe cybersecurity opportunities should be within everyone’s reach. That’s why we’re excited to announce that our 𝗖𝗼𝗺𝗺𝘂𝗻𝗶𝘁𝘆 𝗗𝗮𝘆𝘀 𝘀𝗮𝗹𝗲 𝗶𝘀 𝗼𝗳𝗳𝗶𝗰𝗶𝗮𝗹𝗹𝘆 𝗹𝗶𝘃𝗲! 🎉

💡 𝗪𝗵𝗮𝘁 𝗮𝗿𝗲 𝗖𝗼𝗺𝗺𝘂𝗻𝗶𝘁𝘆 𝗗𝗮𝘆𝘀?
It’s a 𝗼𝗻𝗲-𝗱𝗮𝘆-𝗼𝗻𝗹𝘆 𝗲𝘃𝗲𝗻𝘁 where you can take our selected hands-on penetration testing exams at a 𝘀𝗶𝗴𝗻𝗶𝗳𝗶𝗰𝗮𝗻𝘁𝗹𝘆 𝗿𝗲𝗱𝘂𝗰𝗲𝗱 𝗰𝗼𝘀𝘁.

📚 𝗘𝘅𝗮𝗺𝘀 𝗔𝘃𝗮𝗶𝗹𝗮𝗯𝗹𝗲:
1. Certified AppSec Pentester (CAPen)
2. Certified AppSec Practitioner (CAP)

✅ Limited seats
✅ No reschedules
✅ No retakes
✅ Just one shot to prove your skills 🔥

🗓️ 𝗘𝘅𝗮𝗺 𝗗𝗮𝘁𝗲: 26th September 2025

🔗 𝗕𝘂𝘆 𝗻𝗼𝘄: https://t.co/oFnlOP0SLu

[CaptainHacX @CaptainHacX]

@StormBreaker_AB @tmperfumehouse CFBR

[Amiya Behera 🇮🇳 @StormBreaker_AB]

Ordered perfumes from @tmperfumehouse on July 4th, paid ₹2300, and it’s been a month with no delivery. Their customer service is unresponsive and not helping at all. Really disappointed with the experience.
#PoorService #NoDelivery

[CaptainHacX @CaptainHacX]

@Niva_Bupa I’m extremely disappointed. My wife’s claim ID: 2314846 under Policy #36116667202500 was unfairly rejected after 1.5 months, despite full disclosure, valid medical need & constant coordination with your agent. This has caused me emotional & financial stress.
#nivabupa

[CaptainHacX @CaptainHacX]

@Sharma_Ok9 Now everything is stable. Customer fund & data are 100% safe. Our treasury fund is sufficient and healthy. Everything is good now.
Keep Trading with CoinDCX 😊

[Hunter @HunterMapping]

🚨Alert🚨CVE-2025-33073 : Windows SMB Client Elevation of Privilege Vulnerability
🧐Deep Dive : https://t.co/ZvrDo46TYe
📊2.7M+Services are found on the https://t.co/g3tSyh1Boc yearly.
🔗Hunter Link:https://t.co/hBnEwBftKm
👇Query
HUNTER : https://t.co/yFFcJwegJK=="SMB"
📰Refer:https://t.co/80b27M271b
#hunterhow #infosec #infosecurity #OSINT #Vulnerability

[Hunter @HunterMapping]

🚨Alert🚨 CVE-2025-31137: React Router Vulnerability Exposes Web Apps to Cache Poisoning and WAF Bypass Attacks
🧐Deep Dive from @zhero___ & @inzo____:https://t.co/zxbzD8zdCj
📊 11K+ Services are found on the https://t.co/g3tSyh1Boc yearly.
🔗Hunter Link:https://t.co/r8hihfEHme
👇Query
HUNTER : https://t.co/yFFcJwegJK="React Router"
📰Refer:https://t.co/WIIhvhKjYf
#REACT#hunterhow #infosec #infosecurity #OSINT #Vulnerability

[HTTPVoid @httpvoid0x2f]

Checkout our new blogpost! In this post we talk about SAML and the recent Ruby-SAML Auth bypass.

CVE-2024-45409: Ruby-SAML Auth Bypass in GitLab

https://t.co/VYZ3YG0oXD

[HackGit @hack_git]

Top Secret Detection Tools

Powerful tools designed to detect secret leaks

• https://t.co/xQNU4jtYbh
• https://t.co/ng5zSq2NUw
• https://t.co/GaphTYs30M
• https://t.co/aWp1D5ch66
• https://t.co/8L5NhzwXPo
• https://t.co/o99VNcVogx
• https://t.co/pqT0wUV8Cw

#cybersecurity

[CaptainHacX @CaptainHacX]

@harshleenchawl2 Hi

[Hunter @HunterMapping]

🚨Alert🚨CVE-2024-37032: Probllama—Ollama Remote Code Execution Vulnerability
🔥PoC: https://t.co/QDCjubHCHx
⚠The issue relates to a case of insufficient input validation that results in a path traversal flaw. An attacker could exploit to overwrite arbitrary files on the server and ultimately lead to remote code execution.
📊1.3K+ Services are found on https://t.co/g3tSyh1Boc
🔗Hunter Link: https://t.co/KUHl4nsU3r
📰Refer: https://t.co/5ZhPeqnJhm
👇Query
Hunter: /product.name="Ollama Web"
FOFA: app="Ollama-Web"
#Ollama #AI #RCE #hunterhow #infosec #infosecurity #Infosys #Vulnerability

[Cybernetic Research @cybernetic_res]

Subdomain Enumeration from different sources

By:@wtf_brut

#bugbounty #bugbountytips

[VAIDIK PANDYA @h4x0r_fr34k]

LLM Hacking?

Resources you must need to Learn:

1. https://t.co/A6XD8e0dSm
2. https://t.co/Ji3wT3Yvdb (Short Course)
3. https://t.co/FOagDWSqyO
4. https://t.co/Lv8YBVqUVB
5. https://t.co/JnCVZd4yEY

[The SecOps Group @TheSecOpsGroup]

🎖️ FREE Certified Network Security Practitioner (CNSP) Exam!🎖️

**No discount code needed**

Here's how to claim your offer:
1️⃣ Like and share this post.
2️⃣ Fill out this Google form: 📝https://t.co/oM5DRMpGKO
3️⃣ After submitting the form, we will email you the exam details. 💯

🔗For more information, click here:
https://t.co/F1ovV9MQkB

[Laxita Purbia @PurbiaLaxita]

To bypass 403 restrictions

1. Use patterns like in the URL path
/*
/%2f/
/./
/
/*/

2. Adding Headers in request with value 127.0.0.1
X-Custom-IP-Authorization
X-Forwarded-For
X-Remote-IP
Forwarded-For
X-Client-IP

3. Switch from GET to POST (or other methods)
#CyberSecurity

[Nicolas Krassas @Dinosn]

PoC Exploit Released for Microsoft Outlook RCE Flaw – CVE-2024-21413 https://t.co/VRVSMp0vLH

[Clandestine @akaclandestine]

GitHub - 0x4D31/awesome-threat-detection: ✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️ https://t.co/mtQZaEy3LV

[Het Mehta @hetmehtaa]

Getting Started In Cybersecurity (FREE Course)

-Defensive Cybersecurity
-Offensive Cybersecurity
-Tools and Technologies
-Best Practices in Cybersecurity
-Emerging Trends in Cybersecurity
-Career Development in Cybersecurity
-1 on 1 Coaching

https://t.co/RypkHHPrWY

[X @TheMsterDoctor1]

😎😎FBI-TOOLS!!!😎😎

#DAY13
OSINTk.o is a customized Kali Linux-based ISO image with pre-installed packages and scripts

https://t.co/5Kz7JfMOhG
CyberPunkOS is a virtual machine that incorporates several tools for Open Source Intelligence (OSINT) to dismantle Fake News

https://t.co/5mm6fLkhe2
One-click face swap
This software is designed to contribute positively to the AI-generated media industry, assisting artists with tasks like character animation and models for clothing.

https://t.co/xb8zv5XJfr
Short OSINT automation courses, each of which requires only one hour of reading to learn:
Linux for OSINT. 21-day

https://t.co/7nOApZASaC
Python for OSINT. 21-day

https://t.co/sGdajoibcg
Alfred is a advanced OSINT information gathering tool that finds social media accounts based on inputs

https://t.co/jJjC7NqiT6
Prying Deep - An OSINT tool to collect intelligence on the dark web.

https://t.co/S2tdxm4nf2
This Python script is an OSINT (Open Source Intelligence) tool called "Ominis OSINT - Information Gathering." It performs online information gathering by querying Google for search results related to a user-inputted query.

https://t.co/CkkgpdOYIo
Cheat Sheet - OSINT 🕵🏽‍♂️

https://t.co/SP5ePaPjgu
An online tool to visualize the relationships of different entry points in an investigation (domain, email, phone, person etc). Extreme simplified analog of Maltego.

https://t.co/2zomC5wBnZ
Social Media #OSINT Tools Collection 👨🏽‍💻

🔗https://t.co/Wfs1zvcmAb
Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes.

https://t.co/LUwjScA86b
OSINT Toolkit is a full-stack web application designed to assist security analysts in their work

https://t.co/spNVzx0SaX
imago-forensics 🕵️

Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. https://t.co/RMSosMcDZi
🕵️ Collection of 4000+ OSINT resources

https://t.co/R7Aligso6C
Avilla Forensics 3.0 / Tool for pollice investigation forensics Whatsapp-Signal other poppular apps message

https://t.co/BrPMPFYp8Q
BBHTv2
A single script for all the tools you need for bug bounty. Thanks to the original creator of bbhtv1 for the idea >> https://t.co/7XDfuLqDDp
Bug Bounty Hunting Tools is a script to install the most popular tools
One-Liner Install curl https://t.co/f02AATgG23 | sudo bash
Tools OSINT/FORENSICS MOBILE

Features
A collection of tools (+ some theory) for cell phone related investigations

https://t.co/BqAaR8BGcO
So what is this all about? Yep, its an OSINT blog and a collection of OSINT resources and tools. Suggestions for new OSINT resources is always welcomed.

https://t.co/A3tJTXxojr
Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension

https://t.co/jGx0cxnCFh
A tool to quickly identify relevant, publicly-available open source intelligence ("OSINT") tools and resources, saving valuable time during investigations, research, and analysis.

https://t.co/4rm6unzPAE
Geospatial Intelligence Library

This repository contains a curated list of open source intelligence tools and resources focused on geolocation and chronolocation. A bookmark version of the most recent iteration of the following recourses is also available. https://t.co/LbvlAvSHWm
Protintelligence is a Python script for the Cyber Community. It also uses NeutrOSINT made by Kr0wZ. Will help you get info on Protonmail accounts and users, ProtonVPN IP adresses, ProtonMail users' PGP Keys, Digital Footprints left by the ProtonMail user on the Clear and Dark Web

https://t.co/rEQ6VdlfzP
Current links from the OSINT Inception start-me project

https://t.co/k8OZa58O50
Bevigil-cli provides a unified command line interface and python library for using BeVigil OSINT API.

https://t.co/74SwGwdVVv
cURL Tool Usage for OSINT (Open-Source Intelligence)

https://t.co/jRVre7sg9r
Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process.

https://t.co/G1QTe6FcGs
Complete list of sites where you can download the Distros that may be useful to those who are about to or are already in an advanced state in the context of OSINT, Penetration Testing, Digital Forensics and therefore also of Information Security.

https://t.co/8dFCwzTTtE
A set of social media OSINT tools that I use when participating in Trace Labs Search Party CTF

https://t.co/bw623FWU9T
About

This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices https://t.co/JhYnWCkQaA
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.

https://t.co/L2VhBZKXs7
LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping.

https://t.co/cHBTHhD3vR
OSINT ADVANCING YOUR EMAIL INVESTIGATIONS USING IKY

https://t.co/t5FQztqjlU

#BugHunter
#BugBounty
#CyberSecurity
#InfoSec
#EthicalHacking
#SecurityResearch
#VulnerabilityManagement
#WebSecurity
#PenTesting (Penetration Testing)
#AppSec (Application Security)
#HackersCommunity
#BugFix
#Hacking
#BugDisclosure
#ZeroDay
#SecureCoding
#CyberThreats
#CyberAware
#InfoSecurity
#SecurityFlaws