Frank Kianos

What did you expect...ginger...no soul

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: Microsoft's in-house AI performs better than Mythos 5 at 50% of the cost of Microsoft's previous offering: it's called MAI-Cyber-1-Flash, its first in-house cybersecurity model.

It's part of Project Perception, an agentic security system that coordinates red, blue and green team agents and enters public preview on August 3 inside Microsoft Defender.

[Microsoft 365 Status @MSFT365Status]

We're investigating an issue causing impact to joining or creating Microsoft Teams meetings or calls for users in the Asia-Pacific region. For more information, please see TM1437780 in the M365 admin center.

[Hacking Articles @hackinarticles]

SSH Penetration Testing (Port 22)

🔥 Telegram: https://t.co/upuP8k8ckB
✴ Twitter: https://t.co/Za7rYILz6E

SSH (Secure Shell) is a cryptographic protocol used for secure remote login and command execution over unsecured networks. During penetration testing, misconfigurations or weak credentials in SSH services can allow attackers to gain unauthorized access. ()

📚 Techniques Covered in This Guide

🔎 Enumeration with Nmap
🔐 Password Cracking using Hydra
⚡ Authentication using Metasploit
💻 Running Commands on Remote Machine
🔁 SSH Port Redirection
🧪 Nmap SSH Brute Force Script
🔍 Enumerating SSH Authentication Methods
🔑 Key-Based Authentication
🛠 Key-Based Authentication using Metasploit
📦 Post Exploitation using Metasploit
🌐 Local Port Forwarding (Password Based)
🔐 Local Port Forwarding (Key Based)

📖 Article:
https://t.co/QcYf2wWuu3

#CyberSecurity #EthicalHacking #Pentesting #SSH #RedTeam #InfoSec

[International Cyber Digest @IntCyberDigest]

‼️🚨 This is alarming: Researchers found a one-click data exfiltration vulnerability in M365 Copilot. A single click on a trusted microsoft[.]com link let attackers pull emails, MFA codes, meeting notes, and SharePoint/OneDrive files, no permissions or second click required.

Microsoft has patched it as CVE-2026-42824, rated critical.

[TheOuts1derX @TheOuts1derX]

Mind maps and methodologies for bug bounty hunters:

Methodologies:

- TBHM: https://t.co/4sxQe7soM3
- OWASP WSTG: https://t.co/QACTPoNHyF
- HackTricks: https://t.co/zsjIgdvT94
- PayloadsAllTheThings: https://t.co/s0WXLdKYrz
- HowToHunt: https://t.co/NcrbEFFvQn
- Pentest Book: https://t.co/82Mp1OAqWO
- The Hacker Recipes: https://t.co/Ne2XMSnKBZ

Mind maps:

- Mind-Maps: https://t.co/SESZ18KrOw
- Assessment-mindset: https://t.co/K5HbEs67q5
- Harsh Bothra XMind: https://t.co/PCJkb42N1D

#bugbounty #bugbountytips #infosec #cybersecurity #pentesting #appsec

[X @TheMsterDoctor1]

Happy Hunting!!!🔥🔥🔥🔥

Bug bounty Cheatsheet🚨

For more like this, join us at:
https://t.co/hcJZgtrLdH

XSS
https://t.co/mygc7DF7fF
https://t.co/SoRS70Vji5

SQLi
https://t.co/Ft1crgwuQM

SSRF
https://t.co/8NlsbSS6rM
https://t.co/RFSZVIp86t

CRLF
https://t.co/6aryNqeT3o
https://t.co/LHNjt9r5GV

CSV-Injection
https://t.co/bW36XDigYQ
https://t.co/tLpzJutTe1

Command Injection
https://t.co/Me0ApVsVyG

Directory Traversal
https://t.co/maIZSaZSlN

LFI
https://t.co/lPb8JSJpwI
https://t.co/rhzFZOnZG3

XXE
https://t.co/SJDpwowgfF

Open-Redirect
https://t.co/Ii6ysbp9BP

RCE
https://t.co/5vNJd5jt1Q

Crypto
https://t.co/gJa6MOikhH

Template Injection
https://t.co/bFEeyAmLEJ
https://t.co/b2xA9Mwkx4

XSLT
https://t.co/xnSVNKA8yE

Content Injection
https://t.co/tFC0g7Bxmw

LDAP Injection
https://t.co/RdsSg3ZJLk

NoSQL Injection
https://t.co/yPiL0BKhJL

CSRF Injection
https://t.co/xPgTazSgYW

GraphQL Injection
https://t.co/zpJ1LanQcc

IDOR
https://t.co/6W67BfUK5B

ISCM
https://t.co/ejrb7jQ74w

LaTex Injection
https://t.co/5CBJCIYPbf

OAuth
https://t.co/UJbaN1JdiP

XPATH Injection
https://t.co/xUvNgGr1RE

Bypass Upload Tricky
https://t.co/sN6U47Ll6z

#bugbountytips #BugBounty

[Hacking Articles @hackinarticles]

A Detailed Guide on Feroxbuster

🔥 Telegram: https://t.co/upuP8k8ckB
✴ Twitter: https://t.co/Za7rYILz6E

Feroxbuster is a high-performance web content discovery tool used by pentesters and bug bounty hunters to find hidden directories, files, and endpoints in web applications through wordlist-based brute forcing. ()

⚡ Key Features of Feroxbuster
🚀 Fast directory & file enumeration
🔁 Recursive scanning of discovered paths
📚 Custom wordlist support
⚙️ Advanced filtering options
🌐 Proxy & custom header support

🛠️ Common Feroxbuster Techniques
📂 Directory brute-forcing
🔎 Hidden file discovery
🧭 Recursive web path scanning
⚡ Filtering responses by status codes
📡 Web application reconnaissance

📖 Article: https://t.co/IU9IscQhmE

#CyberSecurity #EthicalHacking #Pentesting #BugBounty #InfoSec #Recon

[Kshitij Mishra | AI & Tech @DAIEvolutionHub]

Web scraping with anti-bot bypass.

Built for

modern websites.

Adapts.
Rotates.
Fetches.

Less blocks.

More data.

https://t.co/JijQYICSoI

[sysxplore @sysxplore]

Linux process management guide

[Steven Lim @0x534c]

Hunting RedSun 🌞

Inspired by the Nightmare‑Eclipse RedSun PoC, I’ve expanded my BlueHammer KQL detection to uncover Defender’s behavioral blind spots.

Sharing my DefenderXDR hunting logic with the community — evolving the path from BlueHammer to RedSun.🎯

KQL Code: https://t.co/YK5EimNR2a

#CyberSecurity #RedSun #DetectionEngineering #DefenderXDR

[Cyber_Racheal @CyberRacheal]

Cybersecurity Resources for different domains

https://t.co/djguIKo9IR

[Hacking Articles @hackinarticles]

Great OSINT Platforms

🔥 Telegram: https://t.co/bFiHxFjLZL

#CyberSecurity #InfoSec #PenetrationTesting #EthicalHacking #BugBounty #ThreatIntelligence #RedTeam #BlueTeam #CloudSecurity #DataSecurity #CyberSecurityAwareness #AI

[sysxplore @sysxplore]

Nearly 700 pages of awesome Linux content.
Almost ready. 🔥

[AISecHub @AISecHub]

Red Team Operations Architecture Map

A single HTML file that covers the full kill chain from infrastructure setup to impact. It maps out how techniques actually chain together - 28 attack flow chains showing real-world operator workflows, from initial access through lateral movement to domain compromise. Things like ZIP → LNK → DLL Sideload, Device Code Phish → Token Theft → Cloud Lateral, NTLM Reflection → LDAPS Relay → Full Domain Compromise.

119 technique cards broken down across C2, evasion, injection, persistence, credential access, privilege escalation, AD attacks, cloud ops, MOTW bypass, vishing, AI-assisted operations, and more. Each card covers the why, not just the what detection surfaces, OPSEC tradeoffs, and vendor-specific nuances for CrowdStrike, Cortex, SentinelOne, and Defender.

No frameworks, no dependencies. One HTML file, works offline, open it in a browser and go.

Source: https://t.co/1TBT1IPJLN

[Akhilesh Mishra @livingdevops]

These Linux commands helped me most in last 13 years of IT career

Daily stuff:
• ps aux | grep {process} - Find that sneaky process
• lsof -i :{port} - Who's hogging that port?
• df -h - The classic "we're out of space" checker
• netstat -tulpn - Network connection detective
• kubectl get pods | grep -i error - K8s trouble finder

Log related commands:
• tail -f /var/log/* - Real-time log watcher
• journalctl -fu service-name - SystemD log stalker
• grep -r "error" . - The error hunter
• zcat access.log.gz | grep "500" - Compressed log ninja
• less +F - The better tail command

Container cli:
• docker ps --format '{{.Names}} {{.Status}}' - Clean status check
• docker stats --no-stream - Quick resource check
• crictl logs {container} - Raw container stories
• docker exec -it - The container backdoor
• podman top - Process peek inside containers

System Detectives:
• htop - System resource storyteller
• iostat -xz 1 - Disk performance poet
• free -h - Memory mystery solver
• vmstat 1 - System vital signs
• dmesg -T | tail - Kernel's recent gossip

Network stuff:
• curl -v - HTTP conversation debugger
• dig +short - Quick DNS lookup
• ss -tunlp - Socket statistics simplified
• iptables -L - Firewall rule reader
• traceroute - Path finder

File and stuff:
• find . -name "*.yaml" -type f - YAML hunter
• rsync -avz - Better file copier
• tar -xvf - The unzipper (yes, we all google this)
• ln -s - Symlink wizard
• chmod +x - Make it executable

Performance:
• strace -p {pid} - System call spy
• tcpdump -i any - Network packet sniffer
• sar -n DEV 1 - Network stats watch
• uptime - Load average at a glance
• top -c - Classic process viewer

Git Essentials:
• git log --oneline - History simplified
• git reset --hard HEAD^ - The "oops" eraser
• git stash - The work hider
• git diff --cached - What's staged?
• git blame - The "who did this?" resolver

Quick Fixes:
• sudo !! - Run last command with sudo
• ctrl+r - Command history search
• history | grep - Command time machine
• alias - Command shortcut maker
• watch - Command repeater

[Saurabh Kumar Pandey @thesaurabh___]

HACKER search engines 🤯

[Tom Dörr @tom_doerr]

Visualizes Windows event logs as graphs

https://t.co/ojSX7mHxfF

[Tom Dörr @tom_doerr]

Tutorials for penetration testing and network security

https://t.co/1uyzxO10VB

[Kirk Borne @KirkDBorne]

Infographic - When to use Each AI Tool - ChatGPT vs Perplexity vs Grok vs Gemini