jhangju

There is no power on earth that can undo PAKISTAN.

[jhangju @jhangjuu]

@classicsgroyp @ezdubs_bot English to Urdu

[Jackson Hinkle 🇺🇸 @jacksonhinkle]

💔🇵🇸 UFC Champion Islam Makhachev just shared this pro-Palestine graphic!

[jhangju @jhangjuu]

Here's a brief breakdown of NJRAT, that has been recently modified and used in various campaigns. Its initial steps are now concealed within VBS scripts and encoded in PowerShell, making it more challenging for malware analysts to reverse
#CyberAttack
https://t.co/gwvDVUyvRY

[Jackson Hinkle 🇺🇸 @jacksonhinkle]

They lied to you about Iraq.
They lied to you about COVID.
They lied to you about Russiagate.
They lied to you about the Ukraine War.
They lied to you about beheaded babies.

But you think they’re telling you the truth about who bombed a hospital in Gaza?

Wake up.

[Dr. Omar Suleiman @omarsuleiman]

Go to hell @jordanbpeterson

[𝗔𝘁𝘁𝗶𝗹𝗮 𝗗𝗲𝗮𝗸 @AttilaDeak01]

A small thread on how to install T-Pot Honeypot on Debian 11 using the post-install method.

#Tpot #Honeypot #Debian #Ffce #linux #infosec #CyberSecurity

[Jazi @h2jazi]

#WIRTE #APT maldocs:
تعميم مالية الســـاحات الخارجية.ppam
(Circular of External Finance.ppam)
4f80572a18c57f6ed76f4edfbeafda28

فهم الإحتياجات الأمنية
(Understand security needs)
41d9a5902ade7b0e9d7516ce5ba09312

C2s:
neweconomysolution[.]com
sun-tourist[.]com

[reverseame @reverseame]

CVE-2022-28219: Unauthenticated XXE to RCE and Domain Compromise in ManageEngine ADAudit Plus https://t.co/a7beVDoOyt

[MalwareHunterTeam @malwrhunterteam]

f8cfe0ee3cd0ec5e09211a22df7dbf0875d23c9c80cc6583814d01c446428825
http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid[.]onion:9217/index.html
🤔
@StopMalvertisin

[jhangju @jhangjuu]

LFI In cookie.

[Kimberly @StopMalvertisin]

#Follina CVE-2022-30190
223341099.docx
https://t.co/GkmoqSSRJZ

https://qaz[.]im/load/diy5AH/b6d42680-56fd-4f98-ae0e-ff81e3799df6

Next: https://eventorganizer[.]pk/newbithere20054rfds.exe (300 MB)
https://t.co/GarMRSiyCP

#Bitrat
newbithere.duckdns[.]org:2005

[DarkFeed @ido_cohen2]

🌐 Everest #Ransomware team just added The Brazil Government to the victim's list 🚨

Everest selling access to Gov Brazil network, "more than 3 TB of data" 🇧🇷

#Everest

[Kyle Cucci @d4rksystem]

Want to learn how a simple UAC bypass / priv elevation works? Start msconfig, go to Tools menu, select "Command Prompt", and click Launch. Depending on your system configuration, a shell will pop open as a child process of msconfig, with elevated privileges and higher integrity.

[Jiří Vinopal @vinopaljiri]

Little quick TIP for .NET #Reversing (DnSpyEx) -> To view field values which are not accessible in Locals -> Use the Watch Window (Debug->Windows->Watch), trust me you won´t regret and probably save some time 👍😉🤠

[Kimberly @StopMalvertisin]

Anaya shoot feedback.docx
Submitted from IN
e64399c152f9bedd3ca54cccdab6469e

Attached template: https://templatesoffices[.]com/en-us/letters/tm83/csd/flyer.png
8cf97f8f60792dc2c7b9dd0ab55b0bd2

Anti-VM
ZIP file after the "@@@===@@@" marker.
- document01.docx
- theme01.xml -> PE

[Professor the Hunter @bughuntar]

This payloads is awesome.
I got RXSS on https://t.co/8SpdYpjHXr with this payload.🤩
Try these once:

'-alert(1)-'
"-alert(1)-"
";alert(1)//
\"+alert(1)+"

[Matthew @embee_research]

#Malware protectors often use unique functions to #obfuscate strings. Using powershell, you can dynamically invoke those functions to bypass the obfuscation and dump hidden content. Below is an #AgentTesla malware sample de-obfuscated using this technique.
1/

[Chris @phage_nz]

NetSupport via thread hijacking. GDrive > ZIP > LNK > PS1 > EXE. Script URL: dfuy[.]fun/f Primary C2: iurb[.]top Secondary C2: aisdyhvuekmfa33[.]cn sdfijiusgydygbugjsadifr[.]com ZIP+LNK: https://t.co/eTZB22Biur PS1+EXE: https://t.co/NdrxpNQfWB Config: https://t.co/oon3vmckHQ