emre

penetration tester & security researcher

[emre @ewreaslan]

'As long as you're connected, you're exposed.'

[emre @ewreaslan]

Bloodyomain: Active Directory Enumeration & Attack Path Visualization Tool.
#activedirectory #hacking #pentest #github #enumeration #attack #opensource

https://t.co/ph4nm8d01b

[emre @ewreaslan]

I’ve released 'subzero', a CLI-based async subdomain takeover scanner with layered validation, evidence-first output and configurable workflows.

#appsec #bugbounty #subdomain #takeover #offsec #cybersecurity #cybersec #python #offensivesecurity

https://t.co/454QqL8Cds

[emre @ewreaslan]

I’ve released jwtTX, a CLI-based JWT security testing toolkit.
This tool centralizes JWT parsing, attack-surface analysis, HMAC secret bruteforcing, token forging, and signature verification workflows in a single place.

#appsec #cybersecurity #bugbounty

https://t.co/bNlpaJi6pp

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[The Hacker News @TheHackersNews]

🚨 WARNING - A new #iOS exploit kit, DarkSword, has been active since late 2025 across multiple threat groups.

It targets #iPhone on iOS 18.4–18.7, chaining zero-days to gain full access and rapidly extract data—files, messages, credentials, and crypto wallets—then wipe traces within minutes.

🔗 DarkSword details here → https://t.co/bS2GhSKltf

[Next.js @nextjs]

Update on CVE-2025-66478 (React2Shell):

An npm package has been released to scan and update affected Next.js apps. Use `npx fix-react2shell-next` to update to patched versions.

All users should update as soon as possible.

More details our blog:

https://t.co/fjNfpv3huI

[secemp @secemp9]

this outage got hands

[Denis Laskov 🇮🇱 @it4sec]

eSIM and its security and privacy issues: Embedded Subscriber Identity Module in a nutshell ☎️ 🐾🔎🌍🎯

More details on:
LinkedIn: https://t.co/MijvkJIZeJ
Substack: https://t.co/xzLfBUrdqv

[emre @ewreaslan]

@bgyetherr yanindaki jandarmadan daha fit

[emre @ewreaslan]

</2024>

[emre @ewreaslan]

</2023>

[emre @ewreaslan]

wake up neo

[Denis Laskov 🇮🇱 @it4sec]

SIMurai is software that emulates a SIM card, which helps in fuzzing modem firmware for vulnerabilities or testing SIM spyware. 🚗📡🔨

Connected cars included :)

Research Paper: https://t.co/2n3tWRXaYo
Presentation: https://t.co/OEE5M9ICFs
Source code: https://t.co/ljOesFsk2y

[emre @ewreaslan]

@GalatasaraySK siktir git okan #okanburukistifa

[emre @ewreaslan]

@GalatasaraySK abdulkerimi cikartin aminakoyayim

[Nicolas Krassas @Dinosn]

Awesome-Red-Team-Operation https://t.co/2PAtvh72VT

[emre @ewreaslan]

@CruvaFener1907 @Haber onlari unlu yapip adam yerine koyanlarin sac traslarini zaten videoda goruyoruz