Hack32 @Hack32_ - Twitter Profil

Tweet Sematan

Hack32 @Hack32_

3 bulan yang lalu

VMkatz in action: Offline extraction of SAM, LSA, and DPAPI directly from a .vdi virtual disk 🛠️🔐 💀🔥

3

233

41

142

13K

Hack32_ di-retweet

BTshell🕷 @BTshell

2 hari yang lalu

#CVE-2026-109618 PoC #exploit para #php2shell de cosecha propia ejecutado en un entorno controlado XD tras detección con https://t.co/s755Krd4s2 👇

6

240

39

174

20K

Hack32 @Hack32_

8 hari yang lalu

😍🤘🏻💯

Calif

@calif_io

8 hari yang lalu

3/ Can your iPhone do this?

65

2K

191

509

335K

0

1

0

48

Hack32_ di-retweet

Calif

@calif_io

8 hari yang lalu

Demos we presented at Hexacon in Paris today. Everything will be released in due time. 1/ Signal 1-click

161

5K

554

2K

657K

Siapa yang Harus Diikuti

Solve et coagula Screw politicians

Leif Erikson

@ErickVillaDiaz

Traductor Inglés-Español, coleccionista de chucherías y amante del metal y la mitología (entre otras cosas).

Hack32_ di-retweet

Brute

@BRuteLogic

11 hari yang lalu

URL Recon 1-Liner - Wayback Machine curl -s 'https://web .archive.org/cdx/search/cdx?url=testphp.vulnweb.com/*&output=text&fl=original&collapse=urlkey&filter=statuscode:200' | grep -viP '\.(png|jpg|jpeg|gif|svg|ico|pdf|css|mp4|woff2?|ttf|eot)(\?|$)' | sed 's/:80\//\//' | sort -u

$BRuteLogic's tweet photo. URL Recon 1-Liner - Wayback Machine curl -s 'https://web .archive.org/cdx/search/cdx?url=testphp.vulnweb.com/*&output=text&fl=original&collapse=urlkey&filter=statuscode:200' | grep -viP '\.(png|jpg|jpeg|gif|svg|ico|pdf|css|mp4|woff2?|ttf|eot)(\?|$)' | sed 's/:80\//\//' | sort -u$

1

381

68

290

14K

Hack32 @Hack32_

12 hari yang lalu

AnyDesk RCE Vulnerability Details and PoC Exploit Code Publicly Disclosed https://t.co/reOZ4QQHUI

1

4

0

1

172

Hack32_ di-retweet

LaurieWired

@lauriewired

22 hari yang lalu

The boom in Linux CVEs lately should get you thinking. Surely, given a finite codebase, there are also a finite number of bugs / unintended behavior, thus, a finite amount of vulnerabilities. Theoretically, a “solvable” problem. Right? Well…not at all actually. It gets a bit philosophical, but there’s the concept of “weird machines”. A weird machine is an accidental computer located inside of another computer program. Quite a few exploits (e.g. anything ROP) falls into this category, where the attacker’s instruction set consists of fragments of the original software. Finite code can *easily* have infinite Unintended Behavior (not undefined behavior btw…that’s a very different thing). Weird machines don’t even have to be Turing complete to be, really, really powerful! Even if you have a million superhuman AI coders and fuzzers thrown at the Linux kernel, you quickly hit halting-problem-esque uncomputable states. The concept of patching every possible bug until none remain isn’t possible, because we can’t often correctly define what a “bug” even is. Now, can you make a kernel that truly has zero weird machines relative to a formal specification? ….yes, but it wouldn’t look like Linux. It’d look more like sel4, VxWorks, or (shudder) INTEGRITY-178.

lauriewired's tweet photo. The boom in Linux CVEs lately should get you thinking.

Surely, given a finite codebase, there are also a finite number of bugs / unintended behavior, thus, a finite amount of vulnerabilities. Theoretically, a “solvable” problem. Right?

Well…not at all actually.

It gets a bit philosophical, but there’s the concept of “weird machines”.

A weird machine is an accidental computer located inside of another computer program. Quite a few exploits (e.g. anything ROP) falls into this category, where the attacker’s instruction set consists of fragments of the original software.

Finite code can *easily* have infinite Unintended Behavior (not undefined behavior btw…that’s a very different thing). Weird machines don’t even have to be Turing complete to be, really, really powerful!

Even if you have a million superhuman AI coders and fuzzers thrown at the Linux kernel, you quickly hit halting-problem-esque uncomputable states. The concept of patching every possible bug until none remain isn’t possible, because we can’t often correctly define what a “bug” even is.

Now, can you make a kernel that truly has zero weird machines relative to a formal specification? ….yes, but it wouldn’t look like Linux. It’d look more like sel4, VxWorks, or (shudder) INTEGRITY-178.

124

4K

265

1K

162K

Hack32 @Hack32_

28 hari yang lalu

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells https://t.co/T9mCqxRCaV a través de @TheHackersNews

0

1

0

77

Hack32_ di-retweet

Liberdus

@liberdus

29 hari yang lalu

@Pirat_Nation A government being able to inspect and control its own digital infrastructure shouldn’t be a radical idea. It's insane to me that people think being locked into a foreign nations closed source software is an intelligent thing to do.

1

69

3

1

1K

Hack32_ di-retweet

sysxplore

@sysxplore

sekitar 1 bulan yang lalu

Linux gives your hardware a longer life 🐧

16

345

29

5

28K

Hack32 @Hack32_

sekitar 1 bulan yang lalu

Critical Next.js RCE Vulnerability Fixed in Version 16.3.6 https://t.co/VrGCP53WNH

1

82

9

37

4K

Hack32 @Hack32_

sekitar 1 bulan yang lalu

This thing here is worth $550 in Venezuela, it would be good for watching YouTube videos 😂😂

0

5

0

93

Hack32 @Hack32_

sekitar 1 bulan yang lalu

My laptop still has Kali, even though I'm an Arch fan.

0

6

0

233

Hack32_ di-retweet

Jeffrey Emanuel

@doodlestein

sekitar 1 bulan yang lalu

Holy shit, wtf is WRONG with Gemini Flash 3.8?!? It has serious mental problems. Look at this session... imagine my surprise when my standard "sync all my repos" prompt went off the rails like this... this LLM needs THERAPY. And no, there is nothing about ANY of that on my box.