Malw Recon

Infosec, HTB, RE and Bug Bounty.

[Anastasis Vasileiadis @Anastasis_King]

☣️Windows kernel exploitation, a beginners introduction

🔹Part 1: https://t.co/ADJmXCBXfW
🔹Part 2: https://t.co/EhphLSrhRE
🔹Part 3: https://t.co/Fwml9Iz2Hs
🔹Part 4: https://t.co/5rewVcNkZh
🔹Part 5: https://t.co/L9AKCqen7s

[Alexandre Borges @ale_sp_brazil]

The Exploiting Reversing Series (ERS) currently features 1051 pages of exploit development based on real-world targets:

[+] ERS 09: https://t.co/V0K5p1XvH9

[+] ERS 08: https://t.co/MPwYP7j8Qt

[+] ERS 07: https://t.co/h18hZC0azl

[+] ERS 06: https://t.co/Sh8pgB4bh8

[+] ERS 05: https://t.co/rdaPMOm4WM

[+] ERS 04: https://t.co/Vf0Fnwf0tc

[+] ERS 03: https://t.co/4lo5Hi0gnd

[+] ERS 02: https://t.co/6SNMK1tBkd

[+] ERS 01: https://t.co/YMTSBl59VC

Now is the time to take a break to dedicate all my energy and focus to security research and new projects that will be announced in the coming weeks and months.

Have a great day and enjoy reading.

#exploit #exploitation #windows #chrome #macOS #iOS #hypervisors #vulnerability #research

[Chaitanya @ant4g0nist]

not sure why, but releasing Pyre - Ghidra's decompiler running fully in your browser. Drop an ELF / Mach-O / PE / wasm, navigate decompiled C with cmd-click + xrefs in Monaco. No server, no upload, binaries must never leave the page...

source. https://t.co/1cCwmILbuQ
deployed at: https://t.co/LnJesWibf6

[spencer @techspence]

OWASP has released their Autonomous Penetration Testing Standard.

I have not read it yet. Anyone else look at this?

https://t.co/MewKPc1syG

[tetsuo @tetsuoai]

https://t.co/QaJbedG0Wt

[0xor0ne @0xor0ne]

Building an autonomous vulnerability hunting system with Claude Code and MCP

https://t.co/MT4LbPOVGU

Andy Gill (@ZephrFish)

#infosec #llm

[obscaries ❘ AppSec @obscaries]

Every pentester should have these in their toolkit 👇🔥

From Shodan to https://t.co/jroBP3BGxS, this list covers servers, OSINT, attack surface, code search & threat intel

Did I miss anything? Drop your favorite tools in the comments 👇

#BugBounty #CyberSecurity #Infosec #Hacking #Recon

[Nicolas Krassas @Dinosn]

Learning Reverse Engineering on a Mobile Game (Frida + Ghidra + AI) https://t.co/mxkv5PO70k

[Vivek Galatage @vivekgalatage]

Understanding glibc malloc by sploitfun

https://t.co/bMmDBnyK5I

* How is heap memory obtained from the kernel?
* How efficiently is memory managed?
* Is it managed by the kernel, by the library, or by the application itself?
* Can heap memory be exploited?

Get those answers.

[AISecHub @AISecHub]

https://t.co/pBQ4Qr36VP

[0xor0ne @0xor0ne]

Collection of paper related to LLM for vulnerability research/detection

https://t.co/c0F7TkOvHp

#infosec

[Jiří Vinopal @vinopaljiri]

Let's Zoom-In to the new start of the week... 🔍
Releasing #IDA Plugin #ZoomAllViews — Ctrl+Scroll font zoom for every IDA view. 💪
Because this should work out of the box. Now it does. 🤓

• Zoom in/out in Disassembly, Pseudocode, Hex View, Strings, Imports, Functions, Structures, and every chooser 😲
• Works across Normal & Debug view widgets — Stack, Registers, Locals, Watch
• Row heights scale automatically with font size
• Graph/Proximity/Xref views excluded — IDA's native zoom untouched ☝️
• Toggle on/off via menu or Ctrl-Shift-Z
• Single file, zero dependencies 🫰
• Compatible IDA 8.x — 9.3+ (PyQt5 / PySide6) 🛠️

https://t.co/9ZGAhvqi2s

#IDAPro #ReverseEngineering #IDAPython #Malware #DFIR @HexRaysSA

[Jake Goldi @jakeisinvestor]

Cracking a .NET Crypter to Extract a Weaponized XWorm: Bootkit, Rootkit, and a Zero-Day UAC Bypass - Reverse Engineer https://t.co/t6j2X2mlAm

[NullSecurityX @NullSecurityX]

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click
The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)
https://t.co/cGj0ywhSMA

[Brut 🇮🇳 @wtf_yodhha]

🚨Bug Bounty Recon Methodology
Download: https://t.co/EL4zDslq2u

#bugbounty #bugbountytips

[Security Harvester @secharvesterx]

DeepZero: An automated, agentic vulnerability research pipeline for finding kernel zero-days
https://t.co/vCWDnMjYAd

[Nicolas Krassas @Dinosn]

Run the FunnyApp.exe, and you’re a Windows admin. An unknown individual just dropped a zero-day exploit for elevating privileges on Windows https://t.co/oaBn4MlIkO

[Smukx.E @5mukx]

Windows Drivers Reverse Engineering Methodology and Setup

https://t.co/36qXbuULUL

[Horizon3 Attack Team @Horizon3Attack]

We used Claude to discover CVE-2026-34197, a remote code execution vulnerability affecting the #Apache #ActiveMQ Classic web console. This is exploitable with default creds or completely unauthenticated for certain versions.

https://t.co/C1uKzMCrM8

[reni @renitaherlan]

perfect