Keith Smith

Synack Red Team / Addicted to Python / Bug Hunting / InfoSec / Whiskey. Master of the dark art of 10 finger hacking. Views do not represent my workplace.

[Keith Smith @SevenLayerJedi]

@TheMsterDoctor1 Agents

[X @TheMsterDoctor1]

EXPOSED: 200+ AI Agents have been LEAKED...

These Agents SELL for $5,000+ per build and cover 20+ industries...

Inside the file you’ll get:

→Social Media Agents ($8k+)
→Creative Content Agents ($3k+)
→Cold outreach Agents ($3k+)
→Lead Booking Agents ($6k+)
→Customer support agents ($5k+)
→Data & Scraping Agent ($8k+)
→Lead qualification agents ($4k+)
→Productivity, HR, Analytics, DevOps & legal Agents also!

100s of plug & play systems that save you time AND money.

Follow + RT + Comment “AGENTS” and I’ll send you the drive for FREE!

BONUS: An n8n Masterclass, so you know how to run, customize, and scale every workflow.

PS: I'm only keeping this live for 48 hours. After that, it's back to $5k+ per agent. Your move.

[Keith Smith @SevenLayerJedi]

@damianplayer VAULT

[Nicolas Krassas @Dinosn]

FullBypass: bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) https://t.co/sK0vKE3bs8

[an0n @an0n_r0]

super hot technique for preventing EDR dll loaded into the process from Marcus Hutchins (malwaretech): https://t.co/1gnuueZPL4 just tested it successfully ;)

[Keith Smith @SevenLayerJedi]

@castello_johnny I believe there is an issue with one of your KQL queries. I believe this should be "ResultType == 0". The results returned are incorrect if you use one "=". I find adding location details helps me too. BTW I really enjoy your site.

https://t.co/ibokPjAe8C

[Florian Hansemann @CyberWarship]

"PoolParty: A set of fully-undetectable process injection techniques abusing Windows Thread Pools"

#infosec #pentest #redteam
https://t.co/zPkkaPr0FT

[Keith Smith @SevenLayerJedi]

@vxunderground @Jhaddix yes sir

[an0n @an0n_r0]

my favorite (and might be the most complete) wifi hacking guide (+pwnbox setup) by @Xst3nZ:

https://t.co/XAt2rvuBzX

following this it was relatively easy to perform an evil twin attack after setting up a wpa-eap home lab (managed to capture a challenge using eaphammer 🙂).

[Cybersecurity and Infrastructure Security Agency @CISAgov]

Warning: People’s Republic of China (PRC)-linked cyber actors known as BlackTech have demonstrated the ability to hide in router firmware. Learn about mitigations to detect this activity and protect devices. https://t.co/QeO6vS7ThI

[XSS Payloads @XssPayloads]

WAF bypass with GBK Encoding / MultiByte Attack, by @therceman
嘾 = %E5%98%BE = \u563e ⇒ %3E (>)

const A = "3E";
const B = (parseInt(A,16)+0x80).toString(16);
console.log('%E5%98%'+B.toUpperCase());

Details in the post: https://t.co/fynIEgRtQS

[JS0N Haddix @Jhaddix]

I have updated my course significantly!

Fresh new content and cheat sheets for:

👁️ IDOR
🕸️ SSRF
🍷 recon techniques
🏹 Red team cred tactics

And added a bunch of contextual places to look for most of the vulnerabilities!

Can’t wait for Nov/Dec!

https://t.co/AfbSF6kHGP

[0xor0ne @0xor0ne]

Learning the basics of Linux kernel exploitation
Excellent series by @k3170Makan

Debugging with QEMU: https://t.co/MFkoXhjCXP
Stack Overflows: https://t.co/E6meVjl5ub
RIP control: https://t.co/mIdgQs4F0f

#cybersecurity #infosec #Linux #kernel

[Luke Stephens (hakluke) @hakluke]

Did you know that Google open sourced their fuzzing dictionaries? 📚

📚 https://t.co/DRzNFRA3z3

https://t.co/CwfL3wzVBv

[Manas @ManasH4rsh]

A nice blog on pentests:-

https://t.co/2XRsSXy9Qd

[Luke Stephens (hakluke) @hakluke]

Common parameter names vulnerable to SSRF 👇

dest
redirect
uri
path
continue
url
window
next
data
reference
site
html
val
validate
domain
callback
return
page
feed
host
port
to
out
view
dir
show
navigation

[Panos Gkatziroulis 🦄 @ipurple]

Knocking on Hell's Gate - EDR Evasion Through Direct Syscalls https://t.co/DytGJ3QxkF #redteam

[Florian Hansemann @CyberWarship]

"RedCloud-OS: RedCloudOS is a Cloud Adversary Simulation Operating System for Red Teams to assess the Cloud Security of Leading Cloud Service Providers (CSPs)"

#infosec #pentest #redteam
https://t.co/bD8OxKP4jZ

[Rood @0x_rood]

some ways to bypass 403

1- using space symbols
exmaple:
/admin -> 403
/admin%09 -> 200
/admin%20 -> 200

2- use traversal
Example:
/admin -> 403
/..;/admin -> 200

you can fuzz with traversal sometimes that's end with results

Example: /..;/FUZZ

#bugbountytips #BugBounty

[Justin Gardner @Rhynorater]

I've made over 100k on SSRF vulnerabilities.

They aren't always as simple as pointing it at localhost or AWS Metadata service.

Here are some tricks I've picked up over the past 5 years of web app testing: