ZeroCraic

Slowly integrating with AI and welcoming our glorious overlords. Cyber security | pentesting , CNC machining, music production.
CTF addict, THM & HTB

[Clandestine @akaclandestine]

OSCP+ / OSEP Advanced Cheatsheet v3 https://t.co/qbg3Qq7wkG

[Oddvar Moe @Oddvarmoe]

You should checkout the Mimikatz Missing Manual that @Carlos_Perez has made. So much awesome documentation in there.

https://t.co/otMCNZPW7Z

[ZeroCraic @Sh3llCh4OS]

https://t.co/qwrTgZhdEU

[UwU Underground @uwu_underground]

Now Playing Mammals
♡ Slop That Work ♡
♡ UwU Underground ♡
──────⚪──────
◄◄⠀▐▐ ⠀►►
6:66 / 7:4455 ───○ 🔊

[JS0N Haddix @Jhaddix]

@xnl_h4ck3r for WAYMORE the ultimate historical link finder!

https://t.co/lOBV0OnuL7

[ZeroCraic @Sh3llCh4OS]

@coffinxp7 Hey , i joined your discord, but can't access anything ,it says no permissions ?

[Behi @Behi_Sec]

Bug Bounty Tool:

Misconfig Mapper is a tool by @intigriti that helps you uncover security misconfigurations on popular third-party services:
https://t.co/83vN9TmUUs

[Coffin @lostsec_]

@nav1n0x use this extension its made by one of my subscriber. it have option to bypass with junk data:
https://t.co/JWT1K0sOvE

[Yunus Emre Öztaş @ynsmroztas]

UPDATE !!

🚧 WAFs blocking your payloads? Not anymore.

🚀 NextRce v2.2 is out! Now featuring a specialized UTF-16LE Encoding Engine to bypass WAF signatures while exploiting CVE-2025-55182.

👻 The "Ghost Mode" encodes malicious JSON payloads to evade filters, but the Next.js server decodes and executes them perfectly.

github ; https://t.co/6OXSyNH1dl

#DevTools #python #bugbountytip #bugbountytips #InfoSec #recon #nextjs #React2Shell

[termireum @termireum]

React/Next.js CVE-2025-55183 Source code leakage PoC | Bypasses Cloudflare!

[ZeroCraic @Sh3llCh4OS]

https://t.co/pSOVrSXgga

[Coffin @lostsec_]

instead use this way~
cat domains.txt | httpx-toolkit -silent -sc -td | grep -Ei "Next\.js|React"

cat domains.txt | httpx-toolkit -silent -sc -td | grep -Ei "Next\.js|React" | awk '{print $1}' | nuclei -t .local/nuclei-templates/http/cves/2025/CVE-2025-55182.yaml -silent

after this use manual payloads+bypass methods or simply use extension..

[Neal Agarwal @nealagarwal]

https://t.co/6hwchScWJo

[Alex Neff @al3x_n3ff]

Dump DPAPI credentials via WinRM with NetExec🔥

A lot of sensitive data is stored in Windows DPAPI, such as the login credentials used in scheduled tasks.
Thanks to tiagomanunes this is now also possible via WinRM!

[Panos Gkatziroulis 🦄 @ipurple]

GoDefender: Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package https://t.co/wUGsmsaCiR #BlueTeam

[ZeroCraic @Sh3llCh4OS]

https://t.co/0aV6TFSLBD

[Alex Neff @al3x_n3ff]

Dumping juicy secrets from SAM/LSA is always nice right?
I've added an implementation for the --sam and --lsa flags to the MSSQL protocol of NetExec🚀

No need for manual registry hive extraction anymore!