0xDTC

Cyber Security Engineer | Youtuber | Weekend Freelancer

[0xDTC @DTCx0]

@RavneetBittu Funny hearing this from you. The last time Punjab Police had a free hand like this, your grandfather was CM and families spent years searching for sons who never came home. If Mann is copying anyone maybe it him at least he is ideal i guess.

[0xDTC @DTCx0]

Just a security engineer having thoughts around whatever the fuck is happening in India, because it's just too much. Too fucked up.

Every claim is sourced. Read it before it's gone.

Took some AI help but i don't think there is any LIE. https://t.co/DCeyDErF3y

[0xDTC @DTCx0]

Well, well, well. Another man dead for standing against Punjab’s drug menace. And who is accountable? Drug suppliers, police officers who ignore complaints, SHOs who silence complainants, MLAs, MPs, ministers, and the government that claims to be fighting drugs?

People have raised concerns and alleged threats. Complainants fear for their families while alleged drug networks continue operating. How convenient.

The police were supposed to protect the public. Today, people fear extortion, intimidation and the misuse of police power. When those entrusted with enforcing the law are accused of facilitating illegal activities or silencing complainants, what remains of public trust?

And this isn't just Punjab. Across India, protesters face detentions, alleged beatings, intimidation and lathi charges for demanding answers. Even raising your voice can come at a price.

Parvinder Singh Jhota’s killing was captured on camera. This menace did not appear overnight. Villages have raised concerns, and allegations of threats have surfaced repeatedly. Yet here we are, waiting for the same institutions to investigate themselves.

And the person who allegedly pulled the trigger? Will he face justice, or will he eventually secure bail and walk free like so many people fear happens in influential circles?

Strict punishment under the law is essential when someone is convicted of murder. The fear should be in the minds of those committing violent crimes not in the minds of people reporting drug dealers or demanding protection.

Think about how disgraceful this is: ordinary citizens fear approaching the police, while allegations of drug dealers receiving protection and complainants facing intimidation continue to emerge. Those needing protection are left vulnerable while the accused can appear to operate with impunity.

The police, MLAs, MPs, ministers and political leadership where is the accountability? Who ignored the complaints? Who intimidated the people who came forward? Who will answer for it?

And when people lose faith and consider leaving the country, the self-appointed patriots shout, “Leave India. Go to Pakistan.”

These bootlickers attack those raising questions instead of questioning those in power. They defend the government, politicians and police while ordinary citizens pay the price.

You cannot trust the police. You cannot trust the politicians. And if you dare to speak up, you risk becoming the next target.

What is an ordinary person supposed to do when demanding answers makes them a target, protesting invites a beating, and those in power never run out of excuses?

Another death. Another complaint. Another investigation.

Drug dealers should fear the law. People reporting them should not fear the police. Anyone who takes a life must face the full consequences of the law not a system where justice can be delayed, diluted or denied.

[0xDTC @DTCx0]

Rooted "Touch" on @hackthebox

Really enjoyed this one. Clean user → root, solid box design. No spoilers while it's active 🤐

On to the next one.

https://t.co/7nKGmRSl15 #HackTheBox #HTB #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[0xDTC @DTCx0]

@maheshnani122 0.0.0.0 > Businessman
127.0.0.1 > BPL

[Alex Neff @al3x_n3ff]

The AD Grave: Tombstoned objects🪦

If the AD Recycle Bin is enabled, objects are moved to the "Deleted Objects" container if they are "deleted". With the new "tombstone" NetExec module, you can query and restore such objects (given you have the privs).
Made by Fabrizzio🚀

[0xDTC @DTCx0]

I don't know about other how they feel but right now I'm at my colleague's house and had a dinner and aunty cooked so good you can't compare that taste to hotel food or any outside vendor food. I feel I should visit him more frequently. 🍽️👨‍🍳 #FoodieLife #HomeCooking #NeverUsedToBeSoDelicious

[0xDTC @DTCx0]

And Intelligence says delete him ASAP. If you don't want to die from hunger or in poverty(not sure if the next one will be same as him)

[T-Rex @T_RexRoars]

Maturity is when you realise
India will never get this PM again.

[0xDTC @DTCx0]

Humans

[soran @soran0312_]

Without GOOGLING?

[xjr @z3r0xjr]

Just revamped my blog, I plan on posting bi-daily from now on :)
https://t.co/zp48r2qA3E

[0xDTC @DTCx0]

@z3r0xjr Well i have seen it, will utilize your commnds someday mostlikely for my tool.

[0xDTC @DTCx0]

Govt portals are job and the security itself is joke here.

[Ananya @blessings_soul]

I registered for GST just a few days ago for my new startyp, and everything was succesfully approved.

Today, i received a call from a company called Edopy offering website and app development services. I asked them how they got my number.

Their response genuinely shocked me. we got ur lead from gst we specifically approach businesses that have recently registered for gst.

I registered on the official government gst portal, so how did a private company get access to my phhone number??

is anyone here familiar with gst/data privacy who can explain how this is possible ??

[0xDTC @DTCx0]

@OfficialDPRPP @PunjabPoliceInd Anything thing for these fun loving people?

Ooh.. one done have license plate on it.

[LiveOverflow 🔴 hextree.io @LiveOverflow]

@HacktronAI CISO reached out and apologized 🙇 we are good.

Also wanted to say that this thread was not part of the disclosure plan, and it was just my personal opinion. I felt like @rootxharsh and @S1r1u5_ were treated unkind, and I wanted to say something.

[0xDTC @DTCx0]

Stop giving IDEAS.

[SanXed @SanXTech]

Inhaling oxygen is the only thing still tax-free in India now.

Enjoy. 😅

[0xDTC @DTCx0]

@digibank If we don't get anything today from them. I'll share the details with You.

[0xDTC @DTCx0]

Two weeks ago my uncle got scammed through a fake app someone talked him into installing. Money was pulled straight out of his account. We got it back through a card dispute. Then I pulled that app apart to see what it actually was.

It isn't one scammer. It's an operation. It's sitting on data from a large number of victims: how much was taken from each, the banks the money was routed through, and the numbers the fraudsters use to call and trap people.

I've put together a redacted summary of this. No victim data leaves my hands, ever. The full evidence goes only to authorities who will actually act on it.

And I'll be honest about where I stand: I don't really trust that this gets acted on. In my uncle's own case, he followed up with the bank and got his payment secured. But here I don't think police department even tried to look into this i think key don't even know the situation here and that's the pattern for eveyone, and it's why so many of these cases just rot. But I'm tagging everyone anyway, on the chance that someone here is the exception and actually does something.

@DCP_IFSO @Cyberdost @IndianCERT @RBI this needs a real investigation, not a complaint sitting in a drawer.

@Google @Mandiant I wanted to talk this to you weeks ago and heard nothing back. Asking you again to look.

To the banks: the victims' money was routed through accounts at your institutions. I'm not accusing you of anything. I'm asking you to investigate those accounts and freeze what you can.
@pnbindia @TheOfficialSBI @SBICard_Connect @ICICIBank @HDFC_Bank @AxisBank @bankofbaroda @KotakBankLtd @YESBANK @IDFCFIRSTBank @RBLBank @centralbank_in @DBSBankIndia @MyIndianBank @canarabank @IOBIndia @FederalBankLtd @UnionBankTweets
And dozens more institutions I couldn't identify from the data.

To the telecom operators: the numbers this operation uses are running on your networks. You can trace them and cut them off.
@reliancejio @airtelindia @ViCustomerCare @BSNLCorporate

One more thing. I'm still looking for a lawyer for my own security i don't trust police for a single thing honestly other then that anyone with the weight to push this properly and help stop more people from getting scammed. I can't pay anyone. I'm just trying to do something useful with what I found. If you can help, or you know who can, reach out.

Anyone reading this who has been scammed: call 1930 and file at https://t.co/nEELS8YH6H even after knowing it will rot there still don't wait on it.

Here it the file you can download it from https://t.co/88ZBvJMtS4

[0xDTC @DTCx0]

@digibank I can share the impacted client details but i would prefer if it come from police to you. So far haven't got any revert or anything from them. so i'm waiting.

[0xDTC @DTCx0]

Quick update, and the real reason I'm doing this.

First: my uncle and I are fine. His money got blocked in time because we reached the bank fast and stopped the transaction. So this isn't me chasing my own loss. That part is already handled.

I kept going because of what was inside that app. There are more than 300 people in that data, and from what I can see, money is very likely still being taken from them right now. There are call redirects and messages set up and running. This is live, not a closed case. I work in cyber security and i know how hard it's to earn nowdays, I just couldn't sit on what I found.

That's the whole reason I'm trying to reach the people and organizations I tagged. Here is exactly what I plan to do, nothing more:

The moment any of them respond, I hand the full evidence to the police. Not publicly, directly to them. I have the phone numbers the scammers use, so those can be traced back to whoever is running this. The banks can work with the police to freeze accounts and help victims get their money back. Google very likely holds records that point to these people, because an operation like this leaves a payment and account trail. The telecom operators can share what's on their networks so police can reach the actual person. And once all of that comes together, the police can make the investigation public.

I keep thinking about who these 300 people actually are. I don't know a single one of them. Maybe someone was saving for their daughter's wedding. Maybe someone was finally buying a thing they'd struggled years for. A lot of people getting hit like this are already fighting through everyday life, and a scam like this takes the little they have. If the right people act, that money can go back to them.

That's it. I'm just trying to put the evidence in the right hands.

And I'll be straight with you: if this actually leads somewhere, I'll know it was worth it. If the people whose job this is decide it doesn't matter, I won't put myself into these things again. Because if the ones who should care don't, I don't know why I should keep bothering. I hope I'm wrong about that.

[0xDTC @DTCx0]

Two weeks ago my uncle got scammed through a fake app someone talked him into installing. Money was pulled straight out of his account. We got it back through a card dispute. Then I pulled that app apart to see what it actually was.

It isn't one scammer. It's an operation. It's sitting on data from a large number of victims: how much was taken from each, the banks the money was routed through, and the numbers the fraudsters use to call and trap people.

I've put together a redacted summary of this. No victim data leaves my hands, ever. The full evidence goes only to authorities who will actually act on it.

And I'll be honest about where I stand: I don't really trust that this gets acted on. In my uncle's own case, he followed up with the bank and got his payment secured. But here I don't think police department even tried to look into this i think key don't even know the situation here and that's the pattern for eveyone, and it's why so many of these cases just rot. But I'm tagging everyone anyway, on the chance that someone here is the exception and actually does something.

@DCP_IFSO @Cyberdost @IndianCERT @RBI this needs a real investigation, not a complaint sitting in a drawer.

@Google @Mandiant I wanted to talk this to you weeks ago and heard nothing back. Asking you again to look.

To the banks: the victims' money was routed through accounts at your institutions. I'm not accusing you of anything. I'm asking you to investigate those accounts and freeze what you can.
@pnbindia @TheOfficialSBI @SBICard_Connect @ICICIBank @HDFC_Bank @AxisBank @bankofbaroda @KotakBankLtd @YESBANK @IDFCFIRSTBank @RBLBank @centralbank_in @DBSBankIndia @MyIndianBank @canarabank @IOBIndia @FederalBankLtd @UnionBankTweets
And dozens more institutions I couldn't identify from the data.

To the telecom operators: the numbers this operation uses are running on your networks. You can trace them and cut them off.
@reliancejio @airtelindia @ViCustomerCare @BSNLCorporate

One more thing. I'm still looking for a lawyer for my own security i don't trust police for a single thing honestly other then that anyone with the weight to push this properly and help stop more people from getting scammed. I can't pay anyone. I'm just trying to do something useful with what I found. If you can help, or you know who can, reach out.

Anyone reading this who has been scammed: call 1930 and file at https://t.co/nEELS8YH6H even after knowing it will rot there still don't wait on it.

Here it the file you can download it from https://t.co/88ZBvJMtS4

[0xDTC @DTCx0]

Saw some days back GOVT is taking steps to minimise these scams

https://t.co/s5K4LHMWPm

https://t.co/NoassihNDw

[0xDTC @DTCx0]

LoL even comments are coming from scammers.