Fox anarc

[Fox anarc @fox_anarc]

Each time you judge someone, you reveal a part of you that needs healing.

[OccupytheWeb @three_cube]

Offensive Security: Speeding Up AD Pentests

https://t.co/i29kLvrisl

[Dark Web Informer @DarkWebInformer]

‼️ CVE-2026-41940: A high-performance, multi-threaded security auditing tool designed to detect CVE-2026-41940, a critical Authentication Bypass vulnerability in cPanel & WHM.

https://t.co/N5bKlx0vZK

[Aircorridor @_aircorridor]

OSINT: Gathering Information on a WhatsApp Account

A phone number alone can reveal profile photos, status updates, and linked devices.

Our guide shows exactly how you can legally and effectively extract intelligence from WhatsApp accounts!
https://t.co/Bpj624Clbm
@three_cube

[Threat Hunting Labs @ThruntingLabs]

The Malware Analysis labs just got a serious upgrade.

You can now choose your environment:
• REMnux - Linux
• FLARE VM - Windows

We added FLARE VM because a lot of you wanted a Windows-based option for malware analysis.

At the same time, we separated Incident Response from Malware Analysis so each one can stand on its own with a cleaner, more focused workflow.

We also rebuilt the malware workspace so the active question stays visible on the right, alongside a practical reference of the tools you can use to inspect malicious artefacts and work through the lab.

These changes are now live.

And they land just ahead of our biggest case yet, dropping soon:
a full domain compromise that started from a NetSupport infection! 🔜

[Cyber Detective💙💛 @cyb_detective]

Telegram OSINT (part of OSINT Master Toolkit by @zhetikal77)

Guides
Tools lists
Search engines
Channels directories

https://t.co/8M31HBHj9J

#socmint

[Nicolas Krassas @Dinosn]

EDR/XDR Bypass and Detection Evasion Techniques: An Investigation of Advanced Evasion Strategies from a Red Team Perspective https://t.co/d70djDHku5

[Dark Web Informer @DarkWebInformer]

‼️ A "Pegasus-Like" zero-click RAT spyware targeting Android and iOS is being sold on a popular cybercrime forum.

Threat Actor: xone9to1
Date: 04-02-2026
Category: Malware / Spyware

Threat actor is advertising a zero-click RAT spyware claiming to work without APK/IPA installation, compatible with iPhone 17 iOS 26.2 and Android 5 to 16.

Features include device information gathering, network and SIM details, live GPS location with history, real-time notification monitoring, call logs, contacts manager, SMS manager with OTP viewer, WhatsApp call and message monitoring, and access to all social media accounts (Google, Facebook, Instagram, Twitter, Telegram, Spotify, etc.).

Advanced capabilities include device controls (lock, power off, ringer, brightness), botnet controls with DDoS, file manager with encryption, live surveillance (front/back camera, screen recording, microphone access), keylogger, and banking/crypto stealer modules targeting MetaMask, Trust, Binance, UPI, Apple Pay, Google Pay, and PayPal.

A demo video is included as proof of concept.

[Daily CyberSecurity @the_yellow_fall]

GhostKatz bypasses EDR by dumping LSASS credentials directly from physical memory. Learn how this new Red Team tool abuses signed drivers to stay invisible.
https://t.co/z8PD6ZSmNE

[Dark Web Informer @DarkWebInformer]

‼️CVE-2026-24061: Telnet RCE Exploit

GitHub: https://t.co/zataEPbh8f

This script exploits the CVE-2026-24061 vulnerability in Telnet servers using a malformed USER environment variable.

CVSS: 9.8

Usage:

python telnet_rce.py <host> [-p <port>]

Arguments:

host: Target IP address or hostname (required)
-p, --port: Target port (default: 23)

Example:

python telnet_rce.py 192.168.1.100
python telnet_rce.py https://t.co/bnffeRl6fd -p 23

[Md Ismail Šojal 🕷️ @0x0SojalSec]

PentestAgent : is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.

- https://t.co/vCVmr1s3E6

#infosec #cybersec #bugbountytips

[Het Mehta @hetmehtaa]

Google Dorks for Bug Bounty

- Juicy extensions and endpoints
- Open redirects
- Code leaks
- Cloud storages
- File upload endpoints and so on.

https://t.co/0Q2g26YkvO

[Md Ismail Šojal 🕷️ @0x0SojalSec]

LLM-powered agent for automated Google Dorking in bug hunting &amp; pentesting,

- https://t.co/2cOaqAZTRb

#infosec #cybersec #cybersec

[MatheuZ @MatheuzSecurity]

Evading Elastic Security - Deep dive into bypassing detections through string obfuscation, symbol randomization, XOR-encoded fragments &amp; behavioral evasion techniques

https://t.co/WB3JF52E4l

#infosec #redteam #linux #rootkit #elastic #malware #rootkits

[Nicolas Krassas @Dinosn]

Leaked system prompts for CHATGPT, GEMINI, GROK, CLAUDE, PERPLEXITY, CURSOR, DEVIN, REPLIT, AND MORE! - AI systems transparency for all https://t.co/ATxe71jcE5

[Fox anarc @fox_anarc]

@raquelrealofc Mas já não tem a foto do doutor abobrinha ali na biblioteca Mário de Andrade? Heuheuehuehe

[Fox anarc @fox_anarc]

@raquelrealofc Sabia que o verdadeiro doutor abobrinha foi uma inspiração no Silvio Santos na luta pelo teatro oficina?

[Swissky @pentest_swissky]

How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation - @seanhn
https://t.co/zHKEBhNMj7

[Nicolas Krassas @Dinosn]

GitHub - NightBloodz/CVE-2025-4123: Script to exploit Grafana CVE-2025-4123: XSS and Full-Read SSRF https://t.co/8eyy4Mp899

[Clandestine @akaclandestine]

GitHub - morpheuslord/GPT_Vuln-analyzer: Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It can also https://t.co/WIy4ugiSXQ

[mxrch @mxrchreborn]

Released GHunt 2.3.3 with a new module : 🕷️ Spiderdal !
Put a domain name and quickly find tied assets, including the hidden ones, by abusing Google's assets links statements.

New way for doing recon before a pentest ! 🥳