Narcis_fcu

- Really? Well, we can do better than this...
- Oh, boy, so you actually learned something today? What is this, Full House?

[0xor0ne @0xor0ne]

Reverse engineering the precompiled Wi-Fi stack of ESP32 SoC to recreate an open source version

Part 1: https://t.co/ZGtu0ZIaAk
Part 2: https://t.co/tTTLNn8D6a
Repo: https://t.co/25ezvSu2Fw

#esp32 #cybersecurity

[Hacking Articles @hackinarticles]

Offensive Linux Security Tools

#infosec #cybersecurity #pentesting #redteam #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #security #oscp #cybersecurityawareness #bugbounty #bugbountytips

[X @TheMsterDoctor1]

The Complete Ethical Hacking
Course Beginner to Advanced...

"🔐 Excited to announce 'The Complete Ethical Hacking Course - Beginner to Advanced'! 🚀 Uncover the secrets of cybersecurity, master penetration testing, and become a pro ethical hacker. 💻🛡️ Join the cybersecurity revolution! #EthicalHacking #Cybersecurity #TechYou"

100% Free For First 1000 User's..

Simply:
1. Follow (So I Will Dm) 📥
2. Like and Repost
3. Send me a private message and comment “ Send ” to receive your copies!! 📚

"I do not own this content. For any issues or concerns, please contact the rightful owner directly."

[☣ KitPloit - Hacker Tools @KitPloit]

ThievingFox - Remotely Retrieving Credentials From Password Managers And Windows Utilities https://t.co/fOvswmLNoI

[Rick and Morty @RickandMorty]

Happy Tuesday #rickandmorty

[Dark Web Intelligence @DailyDarkWeb]

#Spain 🇪🇸 - #RansomHub ransomware group has announced Polaris Informática y Comunicaciones on the victim list

This company is formed by a group of professionals with extensive experience in the custom application development sector, they design programs and websites exclusively for the client, computer maintenance, multimedia marketing, etc.

#DarkWeb #ransomware #Polaris #technology

[Hunter @HunterMapping]

🚨Alert🚨CVE-2024-3400: Zero-Day Exploitation of Unauthenticated Remote Code Execution Vulnerability in GlobalProtect(CVSS: 10)
⚠It enables an unauthenticated attacker to execute arbitrary code with root privileges on the firewall.
📊 371K+ Services are found on https://t.co/ZkWaUVRSkG
🔗Hunter Link: https://t.co/rcGRBxBwGk
📰Deep Dive: https://t.co/HrQisBf6lB
👇Query
Hunter: /product.name="GlobalProtect Portal"
FOFA: app="paloalto-GlobalProtect"
SHODAN: title:"GlobalProtect Portal"
#paloalto #GlobalProtect #hunterhow #infosec #infosecurity #Infosys #Vulnerability

[Dark Web Intelligence @DailyDarkWeb]

#Spain 🇪🇸 - RansomHouse #ransomware group has announced Lopesan Hotels on the victim list

Lopesan Hotel Group pone a disposición de sus clientes dos cadenas de prestigio internacional -Lopesan Hotels & Resorts e IFA Hotels & Resorts- con un total de 21 hoteles situados en entornos privilegiados.

#DarkWeb #hotel #RansomHouse

[Dark Web Informer @DarkWebInformer]

🚨URGENT🚨A Zero-day exploit for Android and iOS is up for sale.

#DarkWebInformer #DarkWeb #Cybersecurity #Cyberattack #Cybercrime #Infosec #CTI #0Day #ZeroDay #Android #iOS #Exploit

Details:

RCE
Attack type - 0click/1Click
Payload - Image/SMS
Control Over Device

No Price Given

[Bipin Jitiya @win3zz]

CVE-2024-3400: OS Command Injection Vulnerability in GlobalProtect Gateway

Severity: CRITICAL (10/10) ⚠️

Poc: https://t.co/IMw8YQap2q

Other info:
https://t.co/VBttcYwwoJ
https://t.co/0YsIHHirTX

[Cybernetic Research @cybernetic_res]

SQLMap from Waybackurls
waybackurls target | grep -E '\bhttps?://\S+?=\S+' | grep -E '\.php|\.asp' | sort -u | sed 's/\(=[^&]*\)/=/g' | tee urls.txt | sort -u -o urls.txt && cat urls.txt | xargs -I{} sqlmap --technique=T --batch -u "{}"

By:@gudetama_bf
#bugbountytips #bugbounty

[Cybernetic Research @cybernetic_res]

Bypass access controls by appending a url-encoded hash sign,resulting in an idor w/ pii disclosure

/api/v2/user/123 —> 403
/api/v2/user/123%23 —> 200

it may be worth appending %00-%ff to see if the logic or regex in use can be terminated

By:@0xphsi

#bugbountytips #BugBounty

[Dark Web Intelligence @DailyDarkWeb]

xzbot

Notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094).

https://t.co/C3EtATAg1M

#cybersecurity #infosec #linux

[Cybernetic Research @cybernetic_res]

Google Dorks to Find Sensitive data or dir by @sumit_cfe

#bugbountytips #BugBounty

[☣ KitPloit - Hacker Tools @KitPloit]

Sicat - The Useful Exploit Finder https://t.co/JHd1lPeU5U

[Hunter @HunterMapping]

🚨Alert🚨CVE-2023-6317~6320: Researchers Discover LG Smart TV Vulnerabilities Allowing Root Access
⚠Multiple vulnerabilities have been disclosed in LG webOS running on its smart televisions that could be exploited to bypass authorization and gain root access on the devices.
📊 415K+Services are found on https://t.co/ZkWaUVRSkG
🔗Hunter Link: https://t.co/Wj7cywpFLX
📰Refer: https://t.co/22jEPEadCb
👇Query
Hunter: /product.name="LG Webos TV"
FOFA:app="LG-WebOS"
SHODAN: product:"LG Webos TV"
#TV #LG #hunterhow #infosec #infosecurity #Infosys #Vulnerability

[Dark Web Intelligence @DailyDarkWeb]

#Spain 🇪🇸 - A threat actor claims to be selling Spain's citizen database

The alleged database covers people born between 1926 and 2004 and includes 39.8 million rows of name, surname, DoB address, and more.

Price: $10,000

#DarkWeb

[Dark Web Intelligence @DailyDarkWeb]

#Spain 🇪🇸 - EMorocco, aka EvilMorocco, group claims to have hacked into Punto de Acceso General (https://t.co/RhZfmcN0aL)

The group says that its intention is not malevolent but rather to shed light on the discrepancies prevalent within various countries and their manipulation of media.

#DarkWeb

[tetsuo @tetsuoai]

Windows exploit development https://t.co/meGum5Hh1Q

[☣ KitPloit - Hacker Tools @KitPloit]

GAP-Burp-Extension - Burp Extension To Find Potential Endpoints, Parameters, And Generate A Custom Target Wordlist https://t.co/gH1qAhpVIa