hypomania

create explore

[Coiffeur @Coiffeur0x90]

⛓️As I promised, I delivered, here is how to escape the PHP sandbox by exploiting a PHP UAF on macOS 🏴‍☠️

🦜 https://t.co/gH8Bdg7OzT

[ɐpnH @0x0Huda]

How Kernel Anti-Cheats Work: A Deep Dive into Modern Game Protection
https://t.co/yC7i9F9Bxv

[hypomania @_hypomaniac]

O que adianta ter DA se a maquina é uma workgroup fudida que nenhuma das 30 credenciais bateram.
Senhor me ajuda

[0xdf @0xdf_]

MonitorsFour from @hackthebox_eu features PHP type juggling to dump users, CVE-2025-24367 for RCE in Cacti, and CVE-2025-9074 to abuse the Docker Desktop API and mount the Windows host drive for root. Beyond Root: a shell on Windows."

https://t.co/DtjU6qwqjB

[hypomania @_hypomaniac]

Cracked by DrFarFar.
Quando tem isso escrito voce sabe que alem do seu pc entrar pra botnet iraniana o software que voce ta crackeando vai funcionar perfeitamente e de primeira.

#DrFarFar

[kd_tech @kd_tech_]

Call of Duty Black Ops Decompliation is now released on GitHub!

Blog Entry: https://t.co/8F3MRoHxkR

GitHub: https://t.co/GA7ktrXmyP

#decomp #decompilation #cod #blops

[SpecterOps @SpecterOps]

Create a folder called (calc). Shift+Right click « Open PowerShell Window here » and boom you have a command injection.

@podalirius_ found two command injection vulnerabilities in Windows Explorer's context menus, both exploitable since 9 years. https://t.co/LNNTpKeDnJ

[V4bel @v4bel]

💥 Introducing "Dirty Frag"

A universal Linux LPE chaining two vulns in xfrm-ESP and RxRPC. A successor class to Dirty Pipe & Copy Fail.

No race, no panic on failure, fully deterministic. ~9 years latent.
Ubuntu / RHEL / Fedora / openSUSE / CentOS / AlmaLinux, and more.

Even if you've applied the "Copy Fail" mitigation, your Linux is still vulnerable to "Dirty Frag". Apply the Dirty Frag mitigation.

Details:
https://t.co/9nqku4svkY

[hypomania @_hypomaniac]

There is no such thing as a junkie paradise

[Musashi | 武蔵 @iExplosiveRage]

رجعت ستور الـPS3 القديم و ياخي ذا الاستور خارق بشكل مو طبيعي ويعقم العين 😭😭

[hypomania @_hypomaniac]

@MatheuzSecurity Tinha o Skynet das antigas também, salvava demais.

[hypomania @_hypomaniac]

200 root shell pra um bug escaneado. Nada mal pra 2026, me senti em 2017 de novo.
Melhor parte eh rippar e observar outros atacantes fazendo merda pelo terminal

[hypomania @_hypomaniac]

@nospherxd1 Menos mal mano, mas mo mafia ne

[秋风 @q1uf3ng]

https://t.co/Pv0W4wKR8X
分享一次案件wp代码审计的记录 个人感觉很优雅，(未授权 SSRF（file_get_contents 支持 phar://）+ 上传后缀白名单缺陷（投递 PHAR-JPEG）+ ThinkPHP 5.0.24 POP 链（ File::set 任意写）+ php://filter iconv 字节交换绕过 exit 前缀)

[blasty @bl4sty]

to celebrate the release of Copy Fail and the professional way the embargo and disclosure was handled by all involved parties i have sacrificed my lunchbreak to do a quick C port (with aarch64 support and some other small things) of the original PoC

https://t.co/M08QEqVEwo

[Bad Sector Labs @badsectorlabs]

CopyFail (CVE-2026-31431) in Go. In case you want to get root from a static binary without Python as a dependency.

https://t.co/w5NYM3JBvJ

[SinSinology @SinSinology]

enjoy the writeup folks