bakeery

[Hacking Articles @hackinarticles]

Credential Dumping: Local Security Authority (LSASS.exe)

🔥 Telegram: https://t.co/upuP8k8ckB
✴ Twitter: https://t.co/Za7rYILz6E

Credential Dumping via LSASS targets the Local Security Authority Subsystem Service (lsass.exe), which stores sensitive authentication data like NTLM hashes, Kerberos tickets, and sometimes plaintext passwords in memory. Attackers dump this memory to extract credentials and escalate privileges.

📚 Topic Covered

📖 Introduction
🧠 Understanding LSA & LSASS
🔐 Credentials Stored in Memory
💉 Dumping LSASS Memory
🛠 Mimikatz
📦 ProcDump
⚙️ comsvcs.dll Technique
🧪 Windows Credential Editor (WCE)
🚀 Privilege Escalation using Dumped Credentials
🔄 Lateral Movement
🛡 Detection & Mitigation Techniques

📖 Article:
https://t.co/xaVqqs6UYh

#CyberSecurity #RedTeam #Pentesting #EthicalHacking #CredentialDumping #WindowsSecurity #InfoSec

[Vivek | Cybersecurity @VivekIntel]

🔎 𝗦𝗲𝗮𝗿𝗰𝗵 𝗘𝗻𝗴𝗶𝗻𝗲𝘀 𝗳𝗼𝗿 𝗣𝗲𝗻𝘁𝗲𝘀𝘁𝗲𝗿𝘀

🌐 𝗜𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 / 𝗦𝗲𝗿𝘃𝗲𝗿𝘀
• https://t.co/JgpEnsODMD
• https://t.co/37rLrAcgm6
• https://t.co/wNkIO93aVM
• https://t.co/5dqTJulLZ2

📡 𝗧𝗵𝗿𝗲𝗮𝘁 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲
• https://t.co/PO06KzH13M / https://t.co/m2jAZ90CR1
• https://t.co/4EAzqWHpRZ
• https://t.co/ykTDcE2Xnj
• https://t.co/WZahTBtWLp
• https://t.co/brV5yJajVx
• https://t.co/QnzUH2X6y4
• https://t.co/ZYqAv0nz6r

🕵️ 𝗢𝗦𝗜𝗡𝗧 & 𝗔𝘁𝘁𝗮𝗰𝗸 𝗦𝘂𝗿𝗳𝗮𝗰𝗲
• https://t.co/U7b6SYug8d
• https://t.co/PR5MyWDErY
• https://t.co/Wbz51KWF19

💻 𝗖𝗼𝗱𝗲 & 𝗪𝗲𝗯 𝗔𝗻𝗮𝗹𝘆𝘀𝗶𝘀
• https://t.co/hZqmFfdbdy
• https://t.co/UdVY14YQxQ
• https://t.co/X9Z506gudP
• https://t.co/c3Z5QXvf1t

📧 𝗘𝗺𝗮𝗶𝗹 & 𝗜𝗱𝗲𝗻𝘁𝗶𝘁𝘆
• https://t.co/WDnCPJXQcd

📶 𝗦𝗽𝗲𝗰𝗶𝗮𝗹𝗶𝘇𝗲𝗱
• https://t.co/5gM71cHm8Y → WiFi networks
• https://t.co/Wq6vs1a63O → SSL certificates
• https://t.co/iByWHqf20f → vulnerabilities
• https://t.co/WfUG8Ebpmj → dorks

🎯 Don’t just collect tools.
Use them for recon, enumeration, and validation.

#OSINT #Pentesting #CyberSecurity #BugBounty

[Vivek | Cybersecurity @VivekIntel]

🛡️ 𝗛𝗮𝗰𝗸𝗲𝗿 𝗦𝗲𝗮𝗿𝗰𝗵 𝗘𝗻𝗴𝗶𝗻𝗲𝘀 (𝗢𝗦𝗜𝗡𝗧)

🌐 Infra
• Shodan — Find exposed devices
https://t.co/uZqnFkLpOf
• Censys — Internet-wide asset view
https://t.co/VSbqN7K31M
• FOFA — Asset discovery
https://t.co/ZVydIZ2LPR
• ZoomEye — Attack surface mapping
https://t.co/8jtbYk04im

📧 Identity
• Hunter — Find emails
https://t.co/sXAmIJaU1X
• HaveIBeenPwned — Breach check
https://t.co/iL0M6fu4gt
• Dehashed — Leaked credentials
https://t.co/mMofF6fHRk

💻 Web / Code
• URLScan — Analyze websites
https://t.co/sHXx3lh8UD
• https://t.co/pIzA6J46tV — Search code
https://t.co/jNPOd8vUId
• https://t.co/Wq6vs1a63O — SSL cert lookup
https://t.co/i61TlduAht

🔐 Vulns
• Vulners — Vulnerability DB
https://t.co/DwfUeqDBOe
• GreyNoise — Filter attack noise
https://t.co/NkcWev7wJn
• FullHunt — Attack surface
https://t.co/lwxZ7NatuW

📡 OSINT
• WiGLE — WiFi mapping
https://t.co/3W7nMT0UPD
• IntelX — Deep data search
https://t.co/rbPeK1kplP
• LeakIX — Exposed data
https://t.co/EyWCDrlLH2
• SecurityTrails — DNS/IP data
https://t.co/F4p3wkYZEO

💡 Tip: SpiderFoot — automate recon
https://t.co/Saomat6UW8

#OSINT #CyberSecurity

[Cyber Detective💙💛 @cyb_detective]

Telegram OSINT (part of OSINT Master Toolkit by @zhetikal77)

Guides
Tools lists
Search engines
Channels directories

https://t.co/8M31HBHj9J

#socmint

[Nana Sei Anyemedu @RedHatPentester]

DFIR training hosts one of the most comprehensive curated collections of forensic practice materials bringing together high-quality datasets, lab images, and CTF challenges from trusted sources worldwide. The collection includes:

1. Full disk images for hands-on forensic analysis
2. Memory dumps for Volatility and memory forensics exercises
3. PCAP files for network investigation practice
4. Malware traffic and threat-hunting datasets
5. Real-world email corpora such as the Enron dataset
6. DFIR CTFs from DFRWS, DEFCON, CIRCL, BelkaCTF, MEMLabs, and others
7. NIST CFReDS and Digital Corpora reference sets
8. Tool-testing images for validating forensic workflows and methodologies.

If you're looking to sharpen your skills in digital forensics, incident response, or threat hunting, this collection is a goldmine.

The dataset provides the evidence your analysis uncovers the truth.

Link: https://t.co/5KGGUr6iEy

#retweet

[Roan @RohOnChain]

This 1 hour Yale lecture will teach you more about game theory than 2 years of MBA program.

Replace one movie this weekend with this lecture, then read the article below.

That one decision changes more than you think.

[Jaynit @jaynitx]

In 2019, MIT professor Patrick Winston gave a legendary 1-hour lecture called “How to Speak.”

It has 18M+ views for a reason.

His frameworks:
• Your ideas are like your children
• The 5-minute rule for job talks
• Why jokes fail at the start

15 lessons on communication:

[7h3h4ckv157 @7h3h4ckv157]

- Red team Operations
- Reverse engineering content
- Red Team x Blue team
- Practical social engineering
- Windows Privilege escalation
- AD, & Road to OSCP
- JR to Specialist career
- Many Offsec notes
- & Many more

Thanks to @C0d3Cr4zy

Source: https://t.co/a3Bd6bCWeW

[0xor0ne @0xor0ne]

Cybersecurity blog posts, writeups, papers, and tools

https://t.co/6YgCLKcdUH

#cybersecurity

[bakeery @fckbwn]

@shut05h @heygurisingh Maybe automated vulnerability assessment

[R.B.C. @G3tSyst3m]

This is a very handy new feature from the crew over at @anyrun_app Be sure to check it out and give it a try when you're able! This post also includes a look into a Real-World Example: Detecting Salty2FA Phishing Campaign

https://t.co/rVtGTZbfIr

[Tom Dörr @tom_doerr]

Crawls onion sites for intelligence

https://t.co/d7sCADL0Qe

[Tom Dörr @tom_doerr]

On-device Android security research toolkit

https://t.co/oMMjA7faMP

[Rony @Ronycoder]

Claude FULL COURSE 1 HOUR (Build & Automate Anything)

[Het Mehta @hetmehtaa]

Instead of scrolling 2 hours on Netflix tonight, master claude in 60 minutes for free.

[X @TheMsterDoctor1]

FREE for ALL:

AWS: https://t.co/hn0AgaZHjx

CISSP: https://t.co/xIIugxPZZh

CISA: https://t.co/L5ebnF0YOk

CISM: https://t.co/a9bOVVqw7Z

CRISC: https://t.co/BYPSCAJUfu

CCDA: https://t.co/ne53E5GYfr

Digital Marketing: https://t.co/QQfgMBsyvD

[bakeery @fckbwn]

@138754 @RTSG_News Just stay with your crippling economy at home and watch what will happen. Can your country even dare to say No to the USA? They have been battling with them for years and they know what they can do. In life you learn through mistakes and improve, lets see

[bakeery @fckbwn]

@BitcoinBoomer30 @josephMuztich Are you using that google AI summary? It's bullshit i swear, it lies a lot, am not saying this because I disagree with your post but many times when I crosscheck what it says I found out that it's not true. Do not blindly trust this AI summary

[bakeery @fckbwn]

@Hhonor_ @NemeremNjoku And serious citizens to maintain it