ͲΔƇTɨƇΔࠋ

[HackGit @hack_git]

🔐 Certificate Ripper

A CLI tool to extract server certificates

https://t.co/EkITXsyFCm

#cybersecurity #pentesting #bugbounty

[LRQA Cyber Labs @LRQA_Cyber_Labs]

Introducing SharpWSUS!

SharpWSUS is a .NET exploitation tool by @The_Keeb, which allows red teamers to laterally move via Windows updates. It builds on existing tools to allow easy use over C2 channels.

https://t.co/C9ENSHbX9G

[BleepingComputer @BleepinComputer]

Public exploit is out for the Linux 'PwnKit' privilege elevation vulnerability!

BleepingComputer has confirmed the exploit for CVE-2021-4034 works and granted us root privileges on Ubuntu.

🚨 Patch now if you can! 🚨
https://t.co/Jh7uoHP5FS

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

New #mimikatz release to test new ts::logonpasswords feature (experimental)🥝

- Only with active users
- Only tested on 2012R2/2016/2019 + some Windows 10 LTSC

> https://t.co/Wzb5GAfWfd

* Do not hesitate to make some tests @awakecoding @jonasLyk @FuzzySec @n00py1 etc. 🤪

[Nicolas Krassas @Dinosn]

CarbonCopy - A Tool Which Creates A Spoofed Certificate Of Any Online Website And Signs An Executable For AV Evasion https://t.co/eM06aQ4xaJ

[OccupytheWeb @three_cube]

Evading AV: Creating Nearly Undetectable Payloads with OWSP-ZSC #owaspzsc #evadingAV #cybersecurity #cyberwarrior

https://t.co/ksNYYaemFc

[Omar (mainnet arc) @acceleratooooor]

💰Introducing MoneyScope💰

A simple tool to extract all domains and TLDs of public programs with paid bounties for easy wide scope recon including:

https://t.co/L7VJVwidsv

- Chaos
- HackerOne
- YesWeHack
- BugCrowd
- Intigriti

#bugbountytips #100DaysOfCode #CyberSecurity

[Chintan 'Frogy' Gurjar @iamthefrogy]

Finally, it's on GitHub.

My subdomain enumeration tool.

https://t.co/BKbZMZho4m

#BugBounty #bugbountytips #bugbountytip #applicationsecurity #appsec #infosec #informationsecurity #CyberSecurity #AutomationAnywhere

[Blue Team News @blueteamsec1]

Reverse Proxy perfect Guide with the true exploitation of HTTPS request smuggling issue https://t.co/nm3yK5jwPh #Articles #CyberAttacks #Vulnerabilities

[m4n0w4r @kienbigmummy]

#Emotet is one of the most dangerous Trojan today. In this article, we analyze in detail full attack flow in some real cases of recent #Emotet samples which were discovered and handled by us while providing #cybersecurity services to our customer.
https://t.co/bFSblcPNnF

[Signal @signalapp]

You can make an app used by many millions of people that has no data...Cool chart by @forbes & @UKZak 🙈🙊🙉 https://t.co/gWFqyIeoZ3

[Roger Nichols @Eightfold14]

Another of the finest #OSINT resources out there :)
Thanks @technisette
https://t.co/wv2QMIsIy8

[payloadartist @payloadartist]

Looks like a very handy browser extension for #bugbounty hunting and #security testing, with cool features like payload reference (w/ easy copy paste), hash generator, and URL encoder.

https://t.co/SzRxqTqcFI

#cybersecurity #BugBountyTips #infosec

h/t @harshbothra_

[Keshav Malik @g0t_rOoT_]

Ever found Invite Functionality in Web Apps?

Try exploiting it to achieve Application Level DoS ⚠️

Checkout my blog on one of my findings ! 🔥

https://t.co/War85lYXbj

#BugBountyTips #bugbountytip #bugbounty #infosecurity #hacking

[nixCraft 🐧 @nixcraft]

Did you know? We can unlock LUKS encrypted root/boot disk using Dropbear SSH keys in Linux at boot time. Useful when you don't have a KVM console or keyboard/monitor. Useful for a remote Linux server or cloud server too.

https://t.co/egMz59qFfR

[Cointelegraph @Cointelegraph]

BREAKING: Crypto's market cap has broken one trillion dollars! https://t.co/IujR3VxNH7

[Dutch Osint Guy Nico @dutch_osintguy]

Tip: Want to do #OSINT research on Discord? Take a look at my OSINT Discord Resources https://t.co/Va1eoVFvW9

[Jon Aubrey @SecurityJon]

Cleaning out my office I found my ‘attack mouse’, a mouse I had badly wired a USB hub into for ‘bad USB’ attacks. This has a great story to go with it.

/1

[payloadartist @payloadartist]

Unauthenticated Arbitrary File Read vulnerability in VMware vCenter before version 6.5u1

PoC for extracting passwords from https://t.co/CNYO5LTdBB file - /eam/vib?id=C:\ProgramData\VMware\vCenterServer\cfg\vmware-vpx\https://t.co/CNYO5LTdBB

#bugbounty #cybersecurity #security