TheHackingFactory

Apasionados por el hacking y la seguridad.

[TheHackingFactory @THackingF]

We have a new post in our blog about creating a tiny script for automated recon with Telegram notifications:

https://t.co/PlAwPfbzQo

We hope you like it.

[Darkandroider 🤘🏻💻🤘🏻 @darkandroider]

Hola @O2, dadle las gracias a @zeleris porque no sólo llevan desde el día 13 para entregar 2 SIM, sino que HOY, que ha habido gente en casa TODO EL DIA, han enviado un SMS diciendo que el paquete no se ha podido entregar porque no había NADIE. Buscando nueva compañía 👋

[JD on Security @JDonSec]

Bug bounty programs are killing their own disclosure pipeline.
Real vuln on https://t.co/XKtBPZ0bYr → CNAMEs to a vendor → program closes as N/A → bug stays open → breach happens anyway.
Microsoft just reversed this. Most haven't.
https://t.co/n9ArD89BGp

[Antonio Fernandes @afernandesvigo]

Mañana hablaré mas de la experiencia en #RootedCON2025, pero decir que orgullosamente soy poseedor de un certificado de asistencia con la garantía de @CHAYANNEMUSIC

Gracias @cibercapitan y viva @rootedcon !

[0xor0ne @0xor0ne]

Beginners intro to process injection in Linux

https://t.co/F5PYrXaJo3

#infosec #linux

[🖤 Soy la Froken 🖤 🏳️‍🌈 🇵🇸 @Martixx]

Apuntarse al CTF de @HorusProject_ 🫶🏻

[Securiters @securiters]

No solemos entrar en esto, pero esto vez es muy fuerte, nos han mandado un audio y estamos flipando… solo decimos que os preparéis en @rootedcon y si tenéis algo que decirnos mejor a la cara

[YesWeHack ⠵ @yeswehack]

Katana by @pdiscoveryio is a powerful web crawler for recon! 🕷️

With support for JavaScript crawling, URL extraction, and custom filtering, it helps uncover endpoints, parameters, and assets efficiently. A must-have for refining your attack surface 🚀

Check it out 👉 https://t.co/NPqmaeKqq4

#BugBounty #Recon #YesWeRHackers

[ProjectDiscovery @pdiscoveryio]

httpx doesn't just check if a URL is alive or not. It can also give you:

✅ timestamp
✅ port
✅ url
✅ input
✅ title
✅ scheme
✅ webserver
✅ content_type
✅ method
✅ host
✅ path
✅ time
✅ tech
✅ words
✅ lines
✅ status_code
✅ content_length
✅ PageType
✅ resolvers

But wait. That's just with the -j flag. You can get even more information with the -irh (headers), -irr (headers + body), -irrb (base64 encoded request/response) and -include-chain (redirect chain) flags!

[Alfonso Muñoz, Phd @mindcrypt]

Mañana va a ser un día importante en el track de Criptored dentro de @rootedcon (https://t.co/V8La3g84lo). Entre las diferentes sorpresas vamos a "regalar hardware" de privacidad a todos los asistentes a la charla de @RadioHacking y @JoelSernaMoreno. Esperamos que se llene la sala... por la calidad de la ponencia y por el "regalo" guiño guiño @TaiksonTexas @constrainterror . Nos vemos mañana

[DragonJAR - Seguridad Informática @DragonJAR]

Evolución del malware .NET, monitoreo de CISA y sanciones a La Liga en el boletín de seguridad informática https://t.co/YIRphevNJc

[🖤 Soy la Froken 🖤 🏳️‍🌈 🇵🇸 @Martixx]

Para los que vengáis a @rootedcon recordad que las buenas gentes de @HackingRadio vamos!

@RadiHacking y @JoelSernaMoreno se van a dedicar a explotar cosas y explicaros cómo

Yo estaré con @afernandesvigo hablando de divulgación y luego con mis queridas @securiters de ransomware

[Binni Shah @binitamshah]

Bypassing AMSI and Evading AV Detection with SpecterInsight : https://t.co/Umsqkq4Rb7

New AMSI Bypss Technique Modifying CLR.DLL in Memory : https://t.co/CyDf0CdK0v

[Binni Shah @binitamshah]

bgpipe : BGP reverse proxy and firewall : https://t.co/lK6MamWT4e

[0xor0ne @0xor0ne]

Heap exploitation

https://t.co/tLsHXCsAro
https://t.co/tp2UYyjJgk
https://t.co/VwFBRE8xnO
https://t.co/CuTbPCTX7g
https://t.co/MbS5KdllzW
https://t.co/lRIaAzTgif
https://t.co/squUPud5F6
https://t.co/VsKXgzxuDJ
https://t.co/kPJ1Jzn2om

Credits: @Ch0pin

#cybersecurity #heap

[0x6rss @0x6rss]

Android malware (.apk) can be spread through a fake video by manipulating the Telegram file extension. I showed how it is done in the video below.

[JS0N Haddix @Jhaddix]

Hey @Shopify @Hacker0x01 ...

I have had two bug hunters come to me and tell me horror stories about your bug bounty lately.

Valid bugs being exploited and you coming out saying... "oh we had planned on fixing that... no impact"

That is NOT the bug bounty contract. If there is a PoC showing the bug was exploitable at ANY time, you should pay the researcher.

Don't contribute to a bug bounty community that makes researchers think bug bounty is a scam.

Also - dont hide behind the new CVSS. Program owners looking to downgrade bugs to save money using the new CVSS and splitting bugs are SUPER scummy.

Contact @G0LDEN_infosec

[elhacker.NET @elhackernet]

BunkerWeb es un Firewall de aplicaciones web (WAF) de código abierto
https://t.co/4G6zwa58il

[Darkandroider 🤘🏻💻🤘🏻 @darkandroider]

I received a PDF of appreciation from @NASA after finding a vulnerability in one of their domains. Long live hacking !! 💻💪🏻

[Faiyaz Ahmad @thehacktivator]

Discovered a new xss payload that bypasses cloudflare web application firewall!!

Payload: <button%20popovertarget=x>Click%20me</button><img%20onbeforetoggle=alert(1)%20popover%20id=x>XSS

#cybersecurity #ethicalhacking #bugbounty #bugbountytips #penetrationtesting

[Binni Shah @binitamshah]

BlueSpy - PoC to record audio from a Bluetooth device : https://t.co/sv0peS2LhC credits @Tarlogic