M4Rc0$_

googleador | ciberbardo | something of purple team

[VenariX en Español @_venarixES_]

El grupo #Everest ha publicado en su blog a Empresas Públicas de Medellín 🇨🇴 (@EPMestamosahi) y a su subsidiaria: Central Hidroeléctrica de Caldas 🇨🇴 (@CHECGrupoEPM), como posibles víctimas de un acceso no autorizado a sus sistemas.
#EPM suministra electricidad, gas natural, agua y saneamiento en todo #Colombia 🇨🇴 y en otros 5 países latinoamericanos 🇨🇱 🇵🇦 🇸🇻 🇬🇹 🇲🇽...
#CHEC genera y distribuye energía a 40 municipios de los departamentos colombianos de Caldas y Risaralda en #Colombia 🇨🇴...
@AlcaldiadeMed
@Superservicios
Monitorea este incidente en #VenariX ➡️ https://t.co/OW9Te2XdwS
#Medellin #Bogota #ciberataque #infosec #CyberSec

[Vivek | Cybersecurity @VivekIntel]

⚔️ Claude-Red = Offensive Security Skills for Claude AI

A massive open-source framework that transforms Claude into a context-aware red team assistant. 🔥

📚 100+ offensive security skill modules
🌐 Web exploitation
🧠 Active Directory attacks
☁️ Cloud attack paths
📡 Wireless exploitation
💥 Exploit dev & fuzzing
🤖 AI security testing

Built for:
🎯 Bug bounty hunters
🛡️ Red teamers
🔬 Security researchers
🎓 CTF players
☁️ Cloud pentesters

Capabilities include:
✅ SQLi / XSS / SSRF / RCE
✅ ADCS / Kerberos / ACL abuse
✅ EDR bypass & shellcode ops
✅ WPA2/WPA3 attacks
✅ OAuth & JWT exploitation
✅ Prompt injection & jailbreak testing

🔗 https://t.co/QraHdkdU0A

#RedTeaming #Hacking #CyberThreat #ThreatIntel #Pentest #OpenSource

[Tom Dörr @tom_doerr]

Discovers real IPs behind Cloudflare

https://t.co/Ix3kVM6Tmt

[Space Programmer @Spaceprogrammer]

🚨 GITHUB FUE HACKEADO

Todo el chisme :

Un empleado instaló una extensión maliciosa de VS Code.

Los atacantes se llevaron 3,800 repositorios internos.
Incluyendo código de Copilot.

Y lo están vendiendo desde $50,000 USD en foros oscuros.

🧵👇

[elhacker.NET @elhackernet]

🛠️ttl es un herramienta de diagnóstico de redes que va más allá de traceroute: detección de MTU, detección de NAT, alertas de fluctuación de rutas, identificación de IX y mucho más

Un traceroute rápido y moderno con interfaz de usuario en tiempo real (TUI), estadísticas por salto, búsqueda de ASN/ubicación geográfica, detección de ECMP y análisis de etiquetas MPLS. Un mtr mejorado.
https://t.co/jLdhaJ2mS8

[striga @striga_ai]

PoCs for Apache Tomcat Unauth RCE (CVE-2026-34486) and Apache httpd Pre-auth RCE (CVE-2026-23918) are now public on our Github.

Tomcat exploit is fully reliable. httpd chain works in a controlled lab setup with a known info leak.

https://t.co/D3dg5iTuwP
https://t.co/2zyr1ds4Mo

[Vivek | Cybersecurity @VivekIntel]

⚡ PSSW100AVB ⚡— PowerShell Scripts With 100% AV Bypass

PowerShell payloads built for AV evasion and red team research.

Includes:
• Reverse shells
• Obfuscation techniques
• Sandbox bypass concepts
• AI/behavior-analysis evasion experiments

Focuses on how modern payloads attempt to bypass antivirus and EDR detection mechanisms.

https://t.co/HKMw5U1YFk

#CyberSecurity #RedTeam #PowerShell #MalwareAnalysis

[Joruno @wsl8297]

画网络架构图、给技术文档配图，很多人会用 Visio、https://t.co/G7X688igpg，但对技术小白来说，上手门槛总要花点时间。

在 GitHub 上发现一款更省心的选择：FossFLOW。专业等距（isometric）图表工具，完全开源，支持离线使用，上手很快。

它内置丰富的等距组件库，支持导入自定义图标，还配齐了自动保存、快捷键、多种存储方式等常用功能，做 3D 风格架构图很顺手。

GitHub： https://t.co/kWEnWa2eXu

主要功能：
- 等距图表绘制：快速产出 3D 风格技术架构图
- 自定义图标导入：支持 PNG/JPG/SVG，自动缩放适配
- PWA 离线支持：可安装为本地应用，随时打开就能用
- 隐私优先：数据默认本地存储，不出本机
- Docker 一键部署：支持服务器存储，多设备访问
- 自动保存：每 5 秒一次，尽量避免丢图丢进度

想用更直观的 3D 风格画架构图，可以直接跑 Docker 部署，或先体验在线 demo 再决定。

[Co11ateral @co11ateral]

The Autonomous Penetration Testing Standard and its significance

https://t.co/c3ItpoU1cf

@three_cube @_aircorridor #ai

[Brut 🇮🇳 @wtf_yodhha]

⚠️403 bypass tools for bug bounty hunters:
✅Join Telegram - https://t.co/5JsNnOqSLQ

bypass-403 → https://t.co/vkSYzEr2zD
nomore403 → https://t.co/CeSvU58SWu
4-ZERO-3 → https://t.co/Tfu1Dhdp6s
byp4xx → https://t.co/kCxrjH2zR6
dontgo403 → https://t.co/VyOAeDOMkS

#bugbounty

[DirectoryRanger @DirectoryRanger]

From Veeam to Domain Admin: Real-World Red Team Compromise Path
https://t.co/RbI1buovm5

[Dark Web Informer @DarkWebInformer]

💥 ShadowBroker: A real-time, multi-domain OSINT dashboard that fuses 60+ live intelligence feeds into a single dark-ops map interface.

https://t.co/UoqfrcHzqR

Aircraft, ships, satellites, conflict zones, CCTV networks, GPS jamming, internet-connected devices, police scanners, mesh radio nodes, and breaking geopolitical events, all updating in real time on one screen.

[VECERT Analyzer @VECERTRadar]

🚨 CRITICAL CYBER THREAT ALERT: MASSIVE ATTACK AGAINST OPEN SOURCE INFRASTRUCTURE – UBUNTU (CANONICAL) 🐧🚫🌐

A coordinated Distributed Denial of Service (DDoS) offensive targeting Ubuntu's main servers (https://t.co/0XHtb9rp94) has been detected. The hacktivist group known as "The Islamic Cyber ​​Resistance in Iraq – 313 Team" has claimed responsibility for the attack, resulting in a total disruption of the platform's web and technical services.

🏢 Affected Entity: Ubuntu / Canonical Ltd.

👤 Threat Actor: 313 Team (The Islamic Cyber ​​Resistance in Iraq).

📅 Detection Date: April 30, 2026.

⚠️ Status: (503 Service Unavailable).

#CyberSecurity #Ubuntu #Canonical #DDoS #313Team #BeamedSU #OpenSource #CyberAttack #InfoSec #VECERT 🐧🛡️⚠️🚨🚫🌐

[X @TheMsterDoctor1]

Claude-OSINT — AI-Driven OSINT Framework 🔎

• OSINT skills + methodology (Claude-based)
• Structured recon workflows + scripts + examples
• Focus: passive intel (no exploitation)
• Includes automation, testing, skill modules
• Clean methodology for real investigations

https://t.co/apB66Ab4il

#OSINT #CyberSecurity #ThreatIntel #Recon #BugBounty

[Code4 Cybersecurity @Code4_CyberSec]

Here’s a solid list of top 5 underrated cybersecurity websites that most people sleep on, even though they deliver serious value for everyday security work, OSINT, threat hunting, and recon.
- https://t.co/f3Fn5xEBRO
- https://t.co/2Ktfw8FUPF
- https://t.co/UzWqiMOmpl
- https://t.co/nwsDwf4tZ2
- https://t.co/ZhfRy5TdMj
</CODE4>

[Cyber Detective💙💛 @cyb_detective]

Free Linkedin Profile Viewer

A free tool for viewing key information from a LinkedIn profile without logging in. You can view links from search results or try searching for a profile by username or first name and surname.

https://t.co/Rdnj0OJ8tL

Tip by Mario Santella

[DirectoryRanger @DirectoryRanger]

Microsoft Active Directory Forest Recovery Guide, by @shorinsean
https://t.co/oKwfsR6Iw3

[Azure Support @AzureSupport]

Investigate threats faster with #Azure Firewall + Copilot 🔐
🛡️ Ask natural‑language questions on firewall traffic
🛡️ Analyze IDPS alerts across your environment
🛡️ Get security insights in seconds
Start here 👉https://t.co/9CUvIUw8z9
#AzureSecurity #SecurityCopilot

[Es Geeks @EsGeeks]

Grype: tu escáner de vulnerabilidades esencial para contenedores y sistemas de archivos. Soporta Docker, OCI, paquetes de OS y lenguajes (Go, Python...). Prioriza riesgos con EPSS. ¡Ideal para securizar tus despliegues!
💥🛡️ #devsecops #containers #vulnerabilitymanagement #golang

[Abdulkadir | Cybersecurity @cyber_razz]

FREE OPEN CLAUDE CODE

GitHub link: https://t.co/tJwmJxXJM1

Enjoy ;)