Top Tweets for #privEsc
CVE-2026-102282 affects NPM package adm-zip, incorrect permission assignment leads to local privilege escalation due to persistent setuid, setgid and sticky bits in crafted zip fiile.
#vulnerability #privesc #archive
Cross‑Vendor RCE and PrivEsc Pileup - https://t.co/pXXAlJtvOa
#cybersecurity #cybernews #threatintelligence #patching #vulnerabilities #securitynews #shieldsup #keeptheshieldsup #rce #privesc #ai #network #appliance #platform #router #gateway #cms #developer
Spawned & rooted Reactor on HTB tonight.
React2Shell (CVE-2025-55182) → unauth RCE in a Next.js dashboard. MD5 from the app DB → engineer's SSH pass. Root = a root node --inspect on loopback via the DevTools protocol.
https://t.co/TxeqLo408f
#HackTheBox #HTB #InfoSec #PrivEsc
Today we're sharing some resources for Linux privilege escalation. Use this as a starter pack whether you're currently working on a penetration test or studying for the PNPT.
Find resources for automated #privesc, escalation paths in SUDO, and more.
We plan on updating this quarterly, so let us know what we missed in the comments!
Get the PNPT (Practical Network Penetration Tester) package here: https://t.co/G0I3vCCpJ6
216[.]126[.]236[.]46: #OpenDirectory hosting a full #offensive toolkit. IoT #botnets (#Mozi/#Boatnet) + targeted attacks on a #Brazilian SaaS. #GodPotato for #privesc, #Ghostcat for file reads, #trojanized APK, cookie #stealer
Found via @Huntio
Read full thread below:
![_AkatsukiLegion's tweet photo. 216[.]126[.]236[.]46: #OpenDirectory hosting a full #offensive toolkit. IoT #botnets (#Mozi/#Boatnet) + targeted attacks on a #Brazilian SaaS. #GodPotato for #privesc, #Ghostcat for file reads, #trojanized APK, cookie #stealer
Found via @Huntio
Read full thread below: https://t.co/YUiYew3ztn](https://pbs.twimg.com/media/HQywLBRa0AARWrO.jpg)
Researcher publicly disclosed an NTLM reflection bypass, CVE-2026-24294, with PoC exploit code. It gives SYSTEM on Windows Server 2025. Patch now.
#NTLM #NTLMReflection #CVE202624294 #Windows #PrivEsc #Cybersecurity #Infosec
https://t.co/upKmDJBUF2
🚨telecom.doc malware🚨
c8d29d6514c4a41733ebb2a369d529d21153caa2cb9af687133cd184829a0483
https://t.co/iiORaLmRMx
#privesc #godpotato #juicypotato #webshell #malware #c2
I spun my wheels for a couple days trying to get Domain Admin, but I had this moment where I thought... Holy shit, I can't actually get to the Domain Admins via #PrivEsc, but maybe I can get to someone who can DCSync.
it clicked, I got it.
4/? 🪡
🚨 New advisory by @Kruxinator & Christian Hager: Local privilege escalation in @genetec 's #RabbitMQ deployment (#CVE-2026-25112)
Writable dir + missing binary + SeImpersonatePrivilege = SYSTEM via Rotten Potato 🥔
Patch available. Apply now!
🔗 https://t.co/B5vRETRqIq
#privesc
Today we're sharing some resources for Linux privilege escalation. Use this as a starter pack whether you're currently working on a penetration test or studying for the PNPT.
Find resources for automated #privesc, escalation paths in SUDO, and more.
We plan on updating this quarterly, so let us know what we missed in the comments!
And right now get the PNPT (Practical Network Pentest Associate) for 20% using the code HONOR26 - let's go! https://t.co/VzOcDAp8nF
PHP upload ➔ ConPtyShell ➔ MSSQL creds ➔ SQLi dump ➔ Hash crack ➔ WinRM ➔ Firefox creds ➔ ACL abuse ➔ LAPS ➔ Administrator
The web app was the door. ☠️
Let me break it down 👇
#HackTheBox #ActiveDirectory #StreamIO #PrivEsc #WindowsHacking
O PINGUIM VACILOU: falha no Linux entrega root pro racuzinho
https://t.co/3PEHq3u4Bt
#Linux #Cibersegurança #CopyFail #PrivEsc #NãoExisteBalaDePrata
4/5: The Pivot 🔄
Living off the land ➔ Config files.
Cleartext creds ➔ Password reuse.
RunasCs ➔ User pivot.
Foothold expanded.
#PrivEsc #LateralMovement #Credentials #Pivoting #RedTeam #Bloodhound
Uploaded WinPEAS and let it run.
Amidst all the noise, one thing stood out.
AutoLogon credentials in the registry.
DefaultUsername: svc_loanmgr
DefaultPassword: Moneymakestheworldgoround!
Someone left the keys in the door. ☠️
#HTB #WinPEAS #PrivEsc #WindowsPrivEsc #ActiveDirectory #Recon
Privilege escalation via Server Operators.
services → VMTools running as SYSTEM ✅
Changed the service binPath to nc.exe.
sc.exe stop VMTools
sc.exe start VMTools
NT AUTHORITY\SYSTEM shell caught. ☠️
#HackTheBox #Return #ServerOperators #ServiceHijack #PrivEsc #SYSTEM
Last Seen Hashtags on Sotwe
kカップ
Seen from Japan
teenageee
Seen from United States
lakshmideeptha
Seen from India
hslut
Seen from India
cd #야노
Seen from Korea
balloonfetish
Seen from United States
cheatingkink gay
Seen from United States
minichat()********************************************* *filter:native_video()
Seen from Turkey
Butters
Seen from New Zealand
Ftmporn
Seen from Germany
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
241.8M followers
Barack Obama
@barackobama
119M followers
Cristiano Ronaldo
@cristiano
114.6M followers
Donald J. Trump
@realdonaldtrump
111.9M followers
Narendra Modi
@narendramodi
107.2M followers
Rihanna
@rihanna
98.7M followers
NASA
@nasa
92.4M followers
Justin Bieber
@justinbieber
91.8M followers
KATY PERRY
@katyperry
90.1M followers
Taylor Swift
@taylorswift13
84M followers
Lady Gaga
@ladygaga
75.5M followers
Virat Kohli
@imvkohli
73.5M followers
Kim Kardashian
@kimkardashian
70.9M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
66.5M followers
Bill Gates
@billgates
65.3M followers
Selena Gomez
@selenagomez
63.1M followers
The Ellen Show
@theellenshow
62.3M followers
CNN
@cnn
61.8M followers
X
@x
60.7M followers