Hack32

Cybersecurity Enthusiast | CTFs on HTB | Pentesting Tips | 💻🤖

[Hack32 @Hack32_]

VMkatz in action: Offline extraction of SAM, LSA, and DPAPI directly from a .vdi virtual disk 🛠️🔐 💀🔥

[BTshell🕷 @BTshell]

#CVE-2026-109618 PoC #exploit para #php2shell de cosecha propia ejecutado en un entorno controlado XD tras detección con https://t.co/s755Krd4s2

👇

[Hack32 @Hack32_]

😍🤘🏻💯

[Calif @calif_io]

3/ Can your iPhone do this?

[Calif @calif_io]

Demos we presented at Hexacon in Paris today. Everything will be released in due time.

1/ Signal 1-click

[Brute @BRuteLogic]

URL Recon 1-Liner - Wayback Machine

curl -s 'https://web .archive.org/cdx/search/cdx?url=testphp.vulnweb.com/*&output=text&fl=original&collapse=urlkey&filter=statuscode:200' | grep -viP '\.(png|jpg|jpeg|gif|svg|ico|pdf|css|mp4|woff2?|ttf|eot)(\?|$)' | sed 's/:80\//\//' | sort -u

[Hack32 @Hack32_]

AnyDesk RCE Vulnerability Details and PoC Exploit Code Publicly Disclosed https://t.co/reOZ4QQHUI

[LaurieWired @lauriewired]

The boom in Linux CVEs lately should get you thinking.

Surely, given a finite codebase, there are also a finite number of bugs / unintended behavior, thus, a finite amount of vulnerabilities. Theoretically, a “solvable” problem. Right?

Well…not at all actually.

It gets a bit philosophical, but there’s the concept of “weird machines”.

A weird machine is an accidental computer located inside of another computer program. Quite a few exploits (e.g. anything ROP) falls into this category, where the attacker’s instruction set consists of fragments of the original software.

Finite code can *easily* have infinite Unintended Behavior (not undefined behavior btw…that’s a very different thing). Weird machines don��t even have to be Turing complete to be, really, really powerful!

Even if you have a million superhuman AI coders and fuzzers thrown at the Linux kernel, you quickly hit halting-problem-esque uncomputable states. The concept of patching every possible bug until none remain isn’t possible, because we can’t often correctly define what a “bug” even is.

Now, can you make a kernel that truly has zero weird machines relative to a formal specification? ….yes, but it wouldn’t look like Linux. It’d look more like sel4, VxWorks, or (shudder) INTEGRITY-178.

[Hack32 @Hack32_]

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells https://t.co/T9mCqxRCaV a través de @TheHackersNews

[Liberdus @liberdus]

@Pirat_Nation A government being able to inspect and control its own digital infrastructure shouldn’t be a radical idea. It's insane to me that people think being locked into a foreign nations closed source software is an intelligent thing to do.

[sysxplore @sysxplore]

Linux gives your hardware a longer life 🐧

[Hack32 @Hack32_]

Critical Next.js RCE Vulnerability Fixed in Version 16.3.6 https://t.co/VrGCP53WNH

[Hack32 @Hack32_]

This thing here is worth $550 in Venezuela, it would be good for watching YouTube videos 😂😂

[Hack32 @Hack32_]

My laptop still has Kali, even though I'm an Arch fan.

[Jeffrey Emanuel @doodlestein]

Holy shit, wtf is WRONG with Gemini Flash 3.8?!? It has serious mental problems. Look at this session... imagine my surprise when my standard "sync all my repos" prompt went off the rails like this... this LLM needs THERAPY. And no, there is nothing about ANY of that on my box.

[Metalmike @Metalmike3]

@Hack32_ 🤘♠️🇬🇧🖤🤘

[Hack32 @Hack32_]

@AngieNi85 De mis bandas favoritas, siempre Motorhead🤘🏻☠️🖤

[Hack32 @Hack32_]

@Metalmike3 ☠️🤘🏻🔥

[Hack32 @Hack32_]

CVE-2026-88062 (CVSS 9.5): OmniRoute RCE Flaw PoC Disclosed https://t.co/uGHReFbwxV

[Hack32 @Hack32_]

Public PoC Disclosed for ZcopyReaper Linux Vulnerability (CVE-2026-43502) 💀☠️ https://t.co/QcJ35nZH6G

[Hack32 @Hack32_]

MikroTrick PoC: RouterOS Admin Rights Exploited In Wild https://t.co/emRLLjJk4r

[Hack32 @Hack32_]

🤣🔥

[Vix @VixWizzer]

just saw this on reddit