Peter Fransico

[Chef Israel @ChefIsraelA3]

Marry me chicken meatballs Pasta

[Peter Fransico @PeterFransbk3d]

@DcLidstone nothing ever happens

[Chef Israel @ChefIsraelA3]

Bruschetta Chicken Bowls

[Matt Brown @nmatt0]

I've found vulns exploitable over WiFi that were identifiable by SSID prefix...

One @wiglenet search is all you would need to geolocate a pwnable device.

[Peter Fransico @PeterFransbk3d]

@isthat_kt gross diaper butt

[SEKTOR7 Institute @SEKTOR7net]

Swarmer - persistence that never touches the registry.

It turns a .reg export into an https://t.co/fDYv2QkQai hive that Windows loads over a user's own hive, abusing legacy Mandatory User Profile behavior.

No registry APIs are called, so EDR sees no writes, and it works without admin rights.

A post and tool by @praetorianlabs

Source: https://t.co/cj0dT9L7v7

#redteam #blueteam

[Laura Bartlett - I DO NOT CONSENT FORM™ @ourptrights]

🚨ALL BLOOD 🩸🅰️🅱️🅾️🆎 IS CONTAMINATED 🚨 (unless you are NOT COVID 19 Vaccinated and have prepared weeks before of a scheduled surgery to use your own "squeaky clean" banked blood or trusted directed donor's blood)

There's a website you might want to check out to explain your blood options called I DO NOT CONSENT FORM™ : https://t.co/u86C3hBhvG

BE PREPARED. NOT SCARED.

@blessedBHB @Safe_Blood3 @OpenVAERS

[Soulfood @Soulfoodiiee]

🍽 World's Healthiest Meals
🎥 Prep With Drew

[Abhinav Singwal @yogsec]

Bug Bounty Tip: Path Traversal via File Download

Look for:

GET /download?file=report.pdf or GET /export?name=invoice.docx

Test by injecting traversal sequences: ../../../../etc/passwd, ..%2f..%2f..%2fetc%2fpasswd, ....//....//etc/passwd, or absolute paths like /etc/passwd and C:\Windows\win.ini.

If the server returns file contents outside the intended directory, it may indicate Path Traversal, enabling sensitive file read, source code disclosure, credential theft, or full server compromise.

For more tips join our Telegram channel: https://t.co/ZemJJygdHY

#BugBounty #PathTraversal #LFI #FileDownload #InfoSec

[i²cjak @i2cjak]

less freaky and longer range: every WiFi SSID (well BSSID) is sniffed by smartphones and geotagged. Someone can look up your home network SSID and, if it is unique, exactly locate you. Or find a handful of places you might be. Your SSID is literally your address, treat it as such

[Florian Hansemann @CyberWarship]

''DCOM Explained: How Attackers Turn a Windows Feature into a Lateral Movement Tool''

#infosec #pentest #redteam #blueteam
https://t.co/TPRFNtoOlJ

[DirectoryRanger @DirectoryRanger]

Token Theft in Microsoft Entra ID, by @insinuator
Part 1: Threat Landscape and Attack Techniques https://t.co/jIgt0hXSJD
Part 2: Continuous Access Evaluation https://t.co/F6SepUh9nL
Part 3: Token Protection https://t.co/RVADmlcm2X

[zack0x01 @zack0x01_]

I miss those days when i was hunting only on burp suits and my firefox extensions , the game completely changed …

[DirectoryRanger @DirectoryRanger]

PersistenceSniper. Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines, by @PersistSniper
https://t.co/7ahoCgpMMo

[Peter Fransico @PeterFransbk3d]

@Cameron_Dennis_ how though? dont u need access to the router?

[Peter Fransico @PeterFransbk3d]

@_BeowulfAgate_ damnnnn this true @HackingButLegal

[Peter Fransico @PeterFransbk3d]

@biblecia id be in hell (trying to fix that) but saying a man of god (priest) is in hell.. come on man if a priest is told no at the pearly gates then were all fucked

[DirectoryRanger @DirectoryRanger]

Building a malware sandbox on Hyper-V: the problems nobody documents
https://t.co/ZDJnOEXpSY

[0xdf @0xdf_]

Eloquia from HackTheBox features an AngularJS CSP bypass, OAuth account hijacking, a malicious SQLite extension, saved Edge passwords, and a .NET service abused with AppDomainManager injection and DLL hijacking.

https://t.co/RZ6zIHrIUn

[Peter Fransico @PeterFransbk3d]

@EdgarGu55266196 @Jayy_Hardyy252 @shesbonky continue the video... she does a whole LOT OF NADA