hackmonek

/dev/null

[Nicolas Krassas @Dinosn]

How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation https://t.co/526NzlpezA

[0xdf @0xdf_]

Trickster from @hackthebox_eu showcases vulnerabilities in PrestaShop, ChangeDetectionIO, and Prusaslicer! In Beyond Root I'll show a ModSecurity configuration that was blocking by user-agent string.

https://t.co/Fh3zzRHyrA

[Binni Shah @binitamshah]

Obfuscating a Mimikatz Downloader to Evade Defender (2024) : https://t.co/NbEMxxPX6F

[0xdf @0xdf_]

Interesting to see my work used in academic research training LLMs to hack. They had very kind things to say about my writeups ☺️ https://t.co/jvAVTyLIHF

[vxCrypt0r @vxCrypt0r]

I have just released a new memory scanner bypass technique.

This is an improved version of Voidgate, but without all of the previous limitations.

It is compatible with reflecive loaders, multi-threaded payloads and most C2 beacons.

https://t.co/EabHTXL12B

[N$🌟 @__nav1n_]

Advanced SQL Injection Techniques now available in GitBook. Make a copy/ Archive / Convert to PDF before they report this too :).

#bugbountytip #BugBounty #SQLInjection #SQLi

https://t.co/APxU4CULCt

[ACE Responder @ACEResponder]

DLL hijacking techniques

#ThreatHunting #DFIR

[VAIDIK PANDYA @h4x0r_fr34k]

Hacking PhpMyAdmin
6 Blogs to learn phpmyadmin

1. https://t.co/oMCsMY7rDc (Unauthorized Access)

2. https://t.co/IY1W7bxGAd (Wordlist)

3. https://t.co/gP1uuQFEy6

4. https://t.co/ZmLo30PiNL (Vuln List)

5. https://t.co/Dq43cqzCrq

6. https://t.co/IIqF2hNkoR

CHECK PINNED TWEET FOR TRAININGS !

[Maniesh.Neupane @pwn4arn]

File Upload Checklist Mindmap.

[hackmonek @hackmonek]

🔴 https://t.co/aeexAzfDNA

[Het Mehta @hetmehtaa]

Pentesting Active Directory - Complete Guide

Part 1:
https://t.co/tP2pUnfHOO

Part 2:
https://t.co/VDnwNJ7Lh5

Part 3:
https://t.co/P7LVn8A9h0

[Binni Shah @binitamshah]

Binary Exploitation Notes : https://t.co/jbMMTzIzcU credits @ir0nstone

[Binni Shah @binitamshah]

Creating a Rootkit to Learn C : https://t.co/wkXmHrHeiH credits @h0mbre_

[0xdf @0xdf_]

Crafty from @hackthebox_eu is about exploiting a Minecraft server. I'll use an open source client to send a Log4Shell payload, and get a shell. Then I'll find admin creds in a custom plugin. In Beyond Root, I'll explore the web.config file.

https://t.co/5YRtrF1U48

[0xdf @0xdf_]

Noted is a quick Sherlock from @hackthebox_eu that involves analysis of the files used by Notepad++. I'll recover backup copies of files and use the metadata collected by NotePad++ to determine when the attack happened.

https://t.co/mbGRhxpInV

[Binni Shah @binitamshah]

Chaining N-days to Compromise All :

Part 6 — Windows Kernel LPE: Get SYSTEM : https://t.co/uNuI4ac1Rh

Part 4 — VMware Workstation Information leakage : https://t.co/jm3kcNF4Aa

Part 5 — VMware Workstation Guest-to-Host Escape : https://t.co/ZwN3Tt78Zt

Part 3 — Windows Driver LPE: Medium to System : https://t.co/hfh1mDqX3S

Part 2 — Windows Kernel LPE (a.k.a Chrome Sandbox Escape) : https://t.co/sCMx0aHg7I

Part 1 — Chrome Renderer RCE : https://t.co/z2Xaap9Cg7

[ippsec @ippsec]

Not sure what took me so long but created a new Playlist to help people study for the CPTS. The boxes are primarily easy/medium, with a focus on common vulnerabilities you'd find on a pentest.
https://t.co/g31fomWymG

[0xdf @0xdf_]

Learned about a neat tool for tracing Windows API calls from Golang binaries - gftrace. Quick blog post to apply it to the binary from Napper, and the look at how it works.

https://t.co/WxMpYzkRGt

[0xor0ne @0xor0ne]

Series on Heap exploitation by @Ch0pin

https://t.co/tLsHXCsAro
https://t.co/tp2UYyjJgk
https://t.co/VwFBRE8xnO
https://t.co/CuTbPCTX7g
https://t.co/MbS5KdllzW
https://t.co/lRIaAzTgif
https://t.co/squUPud5F6
https://t.co/VsKXgzxuDJ
https://t.co/kPJ1Jzn2om

#infosec #heap

[Hacking Articles @hackinarticles]

Windows Credential Dumping Cheatsheet

✴ Link: https://t.co/BTMjvTIpVA

🔷 Wireless
🔷Group Policy Preferences (GPP)
🔷Windows Credential Manager
🔷WDigest
🔷Security Support Provider (SSP)
🔷SAM
🔷Installed Applications
🔷NTDS.dit
🔷Phishing Windows Credentials
🔷Local Security Authority (LSA|LSASS.EXE)
🔷Clipboard
🔷DCSync Attack
🔷LAPS
🔷Domain Cache Credential
🔷Fake Services
🔷Windows Autologon Password
🔷Internal Monologue
🔷Reversible Password Encryption

#infosec #cybersecurity #pentesting #redteam #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #security #oscp #cybersecurityawareness #bugbounty #bugbountytips