Fz3r0

Senior Network Engineer | NOC L3 | Wireless Specialist | NetSec
|💀🛰️🛜📡🦈🕵🏻🔍💊🐝💉💣💥🔑🧱🛡️|
'cOnCaT((ಠ ͜ʖರೃ),(Im/../0xF0==Fz3r0)x)--+-
whoami
root

[Fz3r0 @Fz3r0]

VulnVersity - Attacking Web Server, PrivEsc & Defacement by @Fz3r0_OPs 💀

#tryhackme #Hacking #ctf #Pentesting #CyberAttack #Hacking #defacement #cybersecurity #infosec #pentest #redteam #networking #NetworkSecurity

https://t.co/lKo7TAUf4u

[Winston Ighodaro @Officialwhyte22]

One of the biggest mistakes beginners make in digital forensics is thinking that deleting a file removes every trace of it. In reality, Windows leaves behind a lot more information than people realize.

What you’re looking at here is a forensic tool examining LNK (shortcut) artifacts. Every time a user opens a document, Windows can create a shortcut that quietly records details about that file. Even if the original document has been deleted, these artifacts can still tell us the file’s name, where it was stored, when it was created, when it was opened, and even the drive it came from.

Notice the File Metadata tab in the middle. This is where investigators start building a timeline. On the left, you can see the user’s profile and the Recent folder where these shortcuts are stored. At the bottom is the file system timeline, which helps us understand when activity happened. By itself, one shortcut might not mean much. But when you combine it with Event Logs, Registry artifacts, Prefetch, browser history, and other evidence, you begin to reconstruct exactly what happened on that computer.

This is why digital forensics is so interesting. We don’t just look for deleted files, we look for the footprints people leave behind without even knowing it.

[Vivek | Cybersecurity @VivekIntel]

💥 A Massive Collection of Real-World PoCs, CVEs & Vulnerability Research

This repository brings together dozens of real-world proof-of-concept exploits and vulnerability research covering projects like FFmpeg, Ghidra, Docker, RustDesk, Firefox, libssh2, OpenVPN, Nmap, PHP, VLC, and more. Along with detailed writeups and PoCs, the author also shares insights into AI-assisted fuzzing workflows, responsible disclosure practices, and modern vulnerability research methodologies.

🔗 https://t.co/KNZK82qvmD

#CyberSecurity #ExploitDevelopment #BugBounty #VulnerabilityResearch #OpenSource

[0xor0ne @0xor0ne]

VulHunt: Vulnerability detection framework by @binarly_io

https://t.co/7IIlQMAgA5

Blog post series:

https://t.co/UzipgZw8la
https://t.co/F6E4OyqRAy
https://t.co/YG4tPvcDDt
https://t.co/24WivmtGZs
https://t.co/aGYL9HFo4B

#infosec

[Fz3r0 @Fz3r0]

Encontramos un avión perdido en la selva de Yucatán.

En una de las zonas más aisladas de la costa occidental de Yucatán se encuentran los restos de un avión perdido. La aeronave hizo un aterrizaje forzoso en este paisaje remoto.

https://t.co/2ImsJvzaLF

[Víctor Ruiz @victor_ruiz]

⚠️🇲🇽Alerta: Se reporta la filtración de una base de datos en formato SQL correspondiente al Sistema de Trámites y Servicios del Municipio de Naucalpan de Juárez, Estado de México, plataforma utilizada por el gobierno municipal para consultar, realizar y dar seguimiento

[Co11ateral @co11ateral]

Wi-Fi / Bluetooth / Drone Jammer

In some environments, wireless communication simply cannot be allowed. These are security facilities, defense contractors or any place where the risk of data leakage is taken seriously.

In other situations, the goal may be personal counter-surveillance neutralizing unwanted tracking beacons like AirTags or Bluetooth tags in a legally authorized environment.

In cases like these with the proper approval from the relevant authorities, radio signal suppressors are used to disrupt Bluetooth, BLE, and Wi-Fi communications.

In our article we showed how this can be done

https://t.co/hyrPBK3JAL

@three_cube @_aircorridor

[Scott @scottstts]

v0.2.0 for @threejs Awesome Graphics Agent Skills is out

npx threejs-awesome-graphics-agent-skills@latest install --agent codex

I added 5 more examples based on 5 open source projects i saw on X with awesome graphics:

- @sabosugi lava planet surface
- @andreeliasdev stylized grass
- @chirovisuals clear water ocean
- @DallaPozzaG stylized ocean above/below
- @jeantimex interactive water volume

Thank you for your awesome creations!

[Massimo @Rainmaker1973]

A transforming Masonic pendant from the Victorian era

[Vibe Engineer @vibeeeng]

ŞU ANDA EN ETKİLİ BECERİLERDEN BİRİ TERSİNE MÜHENDİSLİK

Bir yazılımın kaynak koduna ihtiyacın yok.

Binary'yi alıyorsun.
Assembly'ye çeviriyorsun.
Fonksiyon fonksiyon okuyorsun.
İçindeki mantığı çıkarıyorsun.

Buna tersine mühendislik deniyor.

Bu yöntemle:
• 4 milyar dolarlık siber saldırı durduruldu
• NSA'nın gizli silah deposu ifşa edildi
• 3 milyon otel kilidi kırıldı
• Ülkeler birbirinin savaş uçağını kopyaladı

Teknik tarafı, araçları ve gerçek örnekleri anlatayım.

[elhacker.NET @elhackernet]

Vulnerabilidad crítica en https://t.co/wN0YqDgibs permitía falsificar peticiones API de administrador

Se ha corregido una vulnerabilidad crítica de omisión de autenticación en la API de gestión de versiones de https://t.co/wN0YqDgibs
https://t.co/4yJBYjMcTc

[cr3ghost @cr3ghost]

Phrack 72 published the analysis of an actual North Korean APT workstation dump.

Real Kimsuky source code. A kernel-level remote backdoor. A private Cobalt Strike beacon. Android malware. Stolen South Korean government GPKI certificates. Access to the Defense Counterintelligence Command and Ministry of Foreign Affairs.

A South Korean security firm independently confirmed the findings. They matched the leaked rootkit source code to a rootkit found during a real 2022 incident at a South Korean financial institution. Same code, same encryption keys.

Opens with “Dear Kimsuky, you are no hacker.”

https://t.co/kaMJUzmaLr

https://t.co/YJ7glibYHQ

Authors: Saber + cyb0rg

Published in @phrack Issue 72, 40th Anniversary

Follow-up analysis by ENKI White

#ThreatIntel #Malware #InfoSec

[Observer 観察者 @Observer_ofyou]

Look what I found at thift store

[Autosport @autosport]

The first of many 🏆🇯🇵

[Brian @Inspector_9]

•◽️• @jn3008 + @etiennejcb

[Lastima a Nadie @Percak]

Llegando ayuda de los hermanos mexicanos, más topos al rescate.

Viva México cabrones.

PD: Video grabado por mi en el Aeropuerto Arturo Michelena.

[Nayib Bukele @nayibbukele]

Ya salió el sexto avión de El Salvador hacia Venezuela.

Continuamos sumando esfuerzos para apoyar a nuestros hermanos venezolanos.

Fuerza Venezuela 🇻🇪