DDM

[Coffin @lostsec_]

You can also use Shodan's Certificate Transparency (CT) API to enumerate a target's subdomains directly from the https://t.co/b8sFqTyruD database.
https://t.co/6vL6HjRSmi

/api/v1/domain/{domain} ~returns the certificates that match a domain

/api/v1/domain/{domain}/hostnames ~returns all hostnames associated with a domain

[东逆 @kood520]

https://t.co/QZyeC5JadP

[ɐpnH @AlAssaf_H]

CVE-2026-54121 (Certighost) enables authenticated low-privileged users to escalate privileges through Microsoft AD CS, potentially leading to full Active Directory compromise.

This repository provides a technical analysis of the vulnerability, attack chain, exploitation prerequisites, detection opportunities, mitigation guidance, and a PoC implementation for authorized security testing.

https://t.co/wiJalC6EyM

[Kirill Firsov @k_firsov]

We found a gadget-free RCE in Fastjson 1.2.83 - the final release of the 1.x line, and still one of the most widely-deployed Java JSON libraries in production today, even with 2.x around.
No classpath gadget. One payload-> RCE.

[DDM @ddmsec]

@xiayitiaoAI @Yanz314 还是老实人多啊

[DDM @ddmsec]

@Yuan8028 @Yanz314 好的姐姐

[DDM @ddmsec]

@Yanz314 接下来就是互关互动,然后领低保,来吧从我做起

[DDM @ddmsec]

@onlyonexhj 来吧 互关互动

[DDM @ddmsec]

@ButlerWo88226 来吧 互关互动

[DDM @ddmsec]

@qianli202 来吧 互关互动

[DDM @ddmsec]

@TheBacon12345 来吧,互关互动

[DDM @ddmsec]

@Vibt84635 来了,互关互动

[DDM @ddmsec]

@0x888w 来吧, 互关互动

[DDM @ddmsec]

@all7i8n9 来吧,互关互动

[DDM @ddmsec]

@Bitcoin188 互关互动

[DDM @ddmsec]

@senyiCS 互关互动

[DDM @ddmsec]

@SuiHuiJi 互关互动

[DDM @ddmsec]

@SellerOfOptions 来了,互关互动

[DDM @ddmsec]

@zuojinha 这里这里,互关互动

[DDM @ddmsec]

@Missle8z 互关互动