Steve (SteveSec)

Senior Penetration Tester || Security Researcher ||

[Steve (SteveSec) @_SteveSec]

Where to find me:

🔗 Website -> https://t.co/YLgor1FJpW
👨‍💻 GitHub -> https://t.co/zRESVWhgiG

[Steve (SteveSec) @_SteveSec]

Security researchers have uncovered a growing threat in the wild—Xworm malware. This malicious software is notorious for its ability to spread through networks, often targeting vulnerable devices and gaining unauthorized access. 🛡️

💥 Key Features of Xworm:

- Propagation via social engineering
- Spreads through USB devices and remote connections
- Can create backdoors for further exploitation
- Used in botnet operations

Stay vigilant and ensure your systems are fortified with the latest patches and security measures! 🔒

👉 Watch the latest analysis on Xworm here: https://t.co/QajZpJZUJW

#Xworm #Malware #CyberSecurity #MalwareAnalysis #DigitalSecurity #ThreatIntel #StaySafe

[Steve (SteveSec) @_SteveSec]

🚨 I Did the Thing! 🚨

My FIRST YouTube video on Phishing Analysis is live! A little rough, but packed with solid insights.

🔗 Watch: https://t.co/DMbunr0OGa

💬 Like, comment & sub! #CyberSecurity #Phishing #Infosec #BlueTeam #Defense

[Steve (SteveSec) @_SteveSec]

@LiveOverflow ProcMon for the rescue?

[Tib3rius @0xTib3rius]

When the web app tester requests access to the hash cracking rig.

[Steve (SteveSec) @_SteveSec]

@_JohnHammond You can disable this from regedit + gpedit if you want 😉 @_JohnHammond

[Steve (SteveSec) @_SteveSec]

I performed my first malware analysis against a malicious Android application and let me tell you, it was a doozy.

From deobfuscating a Stage 1 payload using AES encryption to substituting large amounts of unreadable text using CFR, follow me on this journey:

https://t.co/3IIWG4tPtq

#malware #malwareanalysis #reverseengineering #infosec #android #hacker #androidapplication #bazaarabuse

[Danny Deraney @DannyDeraney]

For those who don't know, that was Declan LeBaron with Bradley Cooper. Declan has spent most of his life in the hospital with systemic juvenile arthritis. Bradley surprised him with tix to the Super Bowl.

In a world of narcissists, be more like Bradley. #SuperBowlLIX

[Ashley ❤️‍🔥 @THE13MANUSCRIPT]

I’m deceased #SuperBowlLIX

[BleepingComputer @BleepinComputer]

Brave now lets you inject custom JavaScript to tweak websites - @billtoulas
https://t.co/xMggTj1pG9

https://t.co/xMggTj1pG9

[Steve (SteveSec) @_SteveSec]

@Mrgunsngear @PeteHegseth @ShawnRyan762 Hooah

[ʞʞıdɐɔoɥƆ @Chocapikk_]

900+ WordPress plugins just casually leak their presence.
No bruteforce, no guessing, just a simple request. Wild.
Haven't seen anyone using this for recon yet. 🤔
Soon.

cc: @leak_ix

[Steve (SteveSec) @_SteveSec]

@jsark983 For the commercials

[Steve (SteveSec) @_SteveSec]

@denverbitcoin @Toyota ummm hello?!

[Christopher Peacock @SecurePeacock]

Today at WWHF @Wietze is dropping Invoke-ArgFuscator 👀

https://t.co/b4Agg3nveJ

[Steve (SteveSec) @_SteveSec]

🔍 HTB Unrested Write-Up 🔍

Took on Unrested, a Linux box with tricky enumeration, custom exploits & privilege escalation. A solid test of fundamentals & creative thinking!

Read here: https://t.co/ZDyF7HCutp

#HackTheBox #CyberSecurity #RedTeam #CTF #Linux

[Steve (SteveSec) @_SteveSec]

#RedTeamers, have you played around with VS Code Tunnel?

Just started playing around with it and it seems like a pretty seamless way to get remote code execution on a target system.

Asking for a friend...

#vscode #hacking #pentesting #microsoft #network #infosec

[Steve (SteveSec) @_SteveSec]

@RedTeamPT @tiraniddo @Synacktiv I actually suggested this be added to Exegol. Keep up the great work!

[Steve (SteveSec) @_SteveSec]

@LiveOverflow, made me laugh this morning.

Binary Exploitation vs. Web Security https://t.co/L5X9osCpft via @YouTube

[JS0N Haddix @Jhaddix]

⚠️ Giveaway time! ⚠️ 👇

📢 Our new course "Attacking AI" will be Feb 27-28!

This two-day course equips security professionals with the tools and methodologies to identify vulnerabilities in AI systems. It's gonna be a BANGER.

Syllabus: https://t.co/cY9vcI7Z5y

We are giving away two seats this week!

⁉️How to enter the giveaway:

♻️ Repost this post = 2 Entries
🗣️ Reply = 1 Entry
❤️ Like = 1 Entry

[Joe (GonzoSec) 🇺🇸🇺🇦 @jsark983]

Psyched my talk, “Garbage In, Garbage Out: How to ACTUALLY Use AI for Security Work” was accepted for @HackSpaceCon!

Can’t wait to attend for the first time. Thanks @RedSeerSecurity for choosing me!

Who else will I see there?

#infosec #cybersecurity #hacking #redteam #blueteam