Es Geeks

🛡️ Ciberseguridad | 🐧 Linux | ⚙️ Herramientas El recurso definitivo para SysAdmins y Pentesters. "sudo follow esgeeks" 👇

[Es Geeks @EsGeeks]

Manual de privacidad para gente normal: 22 capítulos, rutas exactas para Android, iPhone, Windows y Mac, y qué hacer si ya te hackearon. PDF + 3 bonos, 30 días de garantía. 9,99 USD hasta el 1 de octubre.
#privacidad #ciberseguridad #anonimato

👉 https://t.co/eycqPbUXl0

[Es Geeks @EsGeeks]

¿Tu película de Netflix no se abre fuera de la app? Así funciona Keeprix para Netflix en Windows y Mac, paso a paso. #Netflix #Keeprix #SinConexion
https://t.co/9WDla8GiyI

[Es Geeks @EsGeeks]

Modelo ligero, bajo ruido y 100 % defensivo.

Ideal para Linux y aprendizaje de seguridad ofensiva-defensiva sin herramientas pesadas.

https://t.co/LvFjWC78UZ

#ciberseguridad #ethicalhacking #infosec #blueteam #systemmonitoring #python #linux

[Es Geeks @EsGeeks]

🛡️📡🔍 NetSpecter | Exposición real de tu sistema en vivo

¿Qué procesos y puertos tiene tu máquina abiertos ahora mismo?

Monitorea en tiempo real puertos, exposición de red y actividad de procesos, clasificando el riesgo y alertando solo los cambios respecto a tu baseline.

[Alonso Eduardo Caballero Quezada @Alonso_ReYDeS]

🐞 Iniciamos la segunda sesión del Curso Análisis Forense + IA 🪲

📲 WhatsApp: https://t.co/rH5XSeYkyG

🌎 Información: https://t.co/zBVduHueE0

[Brut 🇮🇳 @wtf_yodhha]

⚡️Android Pentest Checklist
✅Download Full PDF - https://t.co/5LPo5ZoE8y

#android #BugBounty #cybersecurity #infosec

[TheCyberGeek @TheCyberGeek19]

https://t.co/ZDBbde7XfM
php2shell OOM in mod_php (CVE-2026-109618): the fake-HashTable fire only runs ~14-byte commands, too short for a shell. Poison a PHP session via upload_progress with <?php system(base64_decode())?>, then exec in 11 bytes: php /tmp/s* www-data shell. Full PoCs in my github repo!
#php2shell #CVE #InfoSec #PHP #RCE

[Steven Lim @0x534c]

🎯𝗔𝘁𝘁𝗮𝗰𝗸𝗲𝗿 𝗜𝗣 + 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗹𝗲 𝗣𝗛𝗣 = 𝗛𝗶𝗴𝗵-𝗖𝗼𝗻𝗳𝗶𝗱𝗲𝗻𝗰𝗲 𝗗𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻
​
🌐 DeviceNetworkEvents → Remote IP matches a GreyNoise-tagged 𝗽𝗵𝗽𝟮𝘀𝗵𝗲𝗹𝗹 𝗮𝘁𝘁𝗮𝗰𝗸𝗲𝗿
🛡️ DeviceTvmSoftwareVulnerabilities → The same endpoint has a 𝘃𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗹𝗲 𝗣𝗛𝗣 𝗶𝗻𝘀𝘁𝗮𝗻𝗰𝗲
​
Put them together:
𝗔𝘁𝘁𝗮𝗰𝗸𝗲𝗿 𝗶𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 → 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗹𝗲 𝗲𝗻𝗱𝗽𝗼𝗶𝗻𝘁 → 𝗛𝗶𝗴𝗵-𝗰𝗼𝗻𝗳𝗶𝗱𝗲𝗻𝗰𝗲 𝗱𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻 🔥
​
When both conditions are observed, the signal becomes significantly more actionable for defenders. This is a good candidate for a 𝗰𝘂𝘀𝘁𝗼𝗺 𝗱𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻 + 𝗮𝘂𝘁𝗼𝗺𝗮𝘁𝗲𝗱 𝗱𝗲𝘃𝗶𝗰𝗲 𝗶𝘀𝗼𝗹𝗮𝘁𝗶𝗼𝗻, helping defenders move quickly from threat intelligence to containment while investigation and remediation take place.
​
PHP2Shell ThreatLock KQL: https://t.co/wJvaqP9yhN
​
#Threathunting

[Tails @Tails_live]

Tails 7.15.1 is out:

https://t.co/5jSEaINeQ3

[The Hacker News @TheHackersNews]

🛑 A filename is enough to trigger OS command execution in Python's widely used Pillow image library.

CVE-2026-112900 abuses how Pillow passes EPS filenames to Ghostscript.

What you need to know ↓ https://t.co/WgsQv9TroW

[0xor0ne @0xor0ne]

UAF vulnerability in Samsung's Android kernel (@LucidBitLabs)

https://t.co/K1N2ye6wbN

#infosec

[Es Geeks @EsGeeks]

¿Te cansaste de que cualquiera con tu número te encuentre? Analizamos Morse Messenger: qué protege, qué no y para quién sirve. #privacidad #cybersecurity #mensajeria
https://t.co/O8Wl7HEpmb

[Es Geeks @EsGeeks]

Así analiza tu banco cada pago en milisegundos: perfiles, grafos y biometría. La IA en la detección de fraudes, explicada con datos. #ciberseguridad #IA #fraude #banca
https://t.co/SpjhAU3KRP

[Nextron Research ⚡️ @nextronresearch]

#Kimsuky (APT-C-55) is delivering persistent backdoors through multilingual LNK phishing lures

After reading the 360 Threat Intelligence Center's report on APT-C-55's multi-path delivery campaign, we found a cluster of nine related malicious LNK files submitted between September and October 2026, with detection ratios around 10-30 out of 60+ engines.

The LNK files execute a layered attack chain: base64-encoded batch scripts decoded via a renamed copy of certutil.exe, staging in C:\Users\Public, nircmd disguised as ntoskrnl.exe, and scheduled tasks running every 9 minutes for persistence. A parallel variant uses PowerShell with double hex-encoded payloads, and a third path poisons the open-source pybroker Python library as a supply chain attack.

Analysis & IOCs: https://t.co/QbhNDXUZvD

[sysxplore @sysxplore]

Networking in Linux - A Detailed Guide to VPN Kill Switches

In the previous guide in our Networking in Linux series, we followed a packet through a VPN tunnel and saw how WireGuard encrypts and encapsulates our traffic before sending it over the physical network.

But what happens if the VPN connection suddenly goes down?

Under normal circumstances, Linux can reach the internet through our physical network interface. If the VPN tunnel disappears, what's stopping Linux from simply using that interface again and sending our traffic outside the VPN?

That's where a VPN kill switch comes in.

In this final part of our Networking in Linux series, we'll explore how Proton VPN's Standard Kill Switch works under the hood.

We'll examine Linux network interfaces and routing tables to understand what happens when the VPN server becomes unreachable, when the tunnel interface disappears unexpectedly, and when we intentionally disconnect from the VPN.

Learn more in this guide:
https://t.co/oIfInnHRRB

[The Hacker News @TheHackersNews]

⚠️ LiteLLM’s release pipeline was hijacked.

Malicious v1.107.0 packages shipped a credential stealer and backdoor. Attackers later tested stolen AWS credentials.

LiteLLM suspects GitHub OAuth tokens were taken from logs on its exposed internal deployment.

Read ↓ https://t.co/H8ORkbfGO7

[Es Geeks @EsGeeks]

Motor de veredicto con scoring de confianza, anti-bot awareness, Wayback, TLS, DNS y generador de 60+ dorks.

Todo en Bash puro, compatible con Termux y sin runtimes pesados.

Para investigadores OSINT y pentesters en objetivos autorizados.

https://t.co/t32pwA9iKw

[Es Geeks @EsGeeks]

🎯🔍🛠️ TikTap | OSINT de TikTok + 75 plataformas en pure Bash

Un solo username de TikTok y obtienes más de 40 puntos de datos del perfil más enumeración cruzada en 75+ sitios.

#osint #ciberseguridad #redteam #ethicalhacking #tiktok #recon #infosec

[Mobile Hacker @androidmalware2]

Video Calls Without Internet

[TryHackMe @tryhackme]

🚨 Yesterday, PHP2Shell made headlines. Today, we're already teaching you how to exploit it. Yeah, we're THAT fast⚡ Two critical PHP vulnerabilities. 9.2 CVSS. Unauthenticated RCE.
And you can already exploit the chain, bypass ASLR, and pop a shell in our latest recent threat room.
Hackers don't wait. Neither do we 🟢 Go Get hands-on: https://t.co/76TcpTLxpr

[Es Geeks @EsGeeks]

Fuente: SecurityWeek / NVD - https://t.co/zEYRfVQj7W

[Es Geeks @EsGeeks]

🚨 Falla crítica en Signal (CVE-2026-113380): un interlocutor puede impedir que la llamada se cierre del todo. El mic (y posiblemente la cámara) sigue activo aunque creas que colgaste. Actualiza a la última versión ya. CVSS 9.3.

#Signal #Ciberseguridad #Privacidad #Messenger