k0ukl

[LetsDefend @LetsDefendIO]

Old school vs Today

[XBOX @XBOX]

The path starts here

Follow & RT with #XboxKGSweepstakes for a chance to win a custom Kunitsu-Gami: Path of the Goddess Xbox Series X console bundle and 3-month Xbox Game Pass Ultimate membership.

Ages 18+. North America only. Ends 7/31/24. Rules: https://t.co/7GHqyavOlh

[vulnX @vuln_X]

Automating SSRF using Autorepeater 🔒

In this window of Auto-Repeater, we can specify some regex to find urls. In this case, I'll use this regex.

👉 https?:\/\/(www\.)?[-a-zA-Z0–9@:%._\+~#=]{1,256}\.[a-zA-Z0–9()]{1,6}\b([-a-zA-Z0–9()@:%_\+.~#?&//=]*)

[Hunter @HunterMapping]

🚨ATTENTION🚨Microsoft partnered with CobaltStrike's developer, Fortra, to begin cracking down on cracked versions of CobaltStrike.
⚠If you are currently using CS Crack Edition and building in VPS, please note! Offline CS as soon as possible, otherwise there is a risk of banning!!
The official strike notice was published on April 6, 2023, and the technology was perfected to officially implement the plan on January, 24. Recently, the above behavior has been reported, and several anonymous VPS have been lost.
📊2k+ Services are found on the https://t.co/ZkWaUVRSkG
🔗Hunter:https://t.co/HC4U0M2NU7

📰Refer to https://t.co/7UuiWKKraY
#cobaltstrike #hunterhow #infosecurity

[FalconFeeds.io @FalconFeedsio]

A user in a hacker forum is offering a sale of a zero-day Microsoft Outlook exploit for remote code execution.

@Microsoft
#cti #threatintel #Microsoft #Exploit #zeroday

[k0ukl @k0ukl1]

@TLP_R3D i would also be interested! thank you for your contribution in the community!

[Paul Rascagnères @r00tbsd]

With @tlansec, we suspected a 0d and we notified MS few days ago. The infection chain was insane... Instead of a endless tweet @zcracga did a wonderful graphic.
2/4

[VirusTotal @virustotal]

Sigma rules are one of the most powerful tools for Threat Hunters. Do you know that (for most cases) you can easily convert Sigma into LiveHunt/RetroHunt YARA rules? Find all the details here, by @karlhiramoto:
https://t.co/WRYGpyuSdN

[CyberKnow @Cyberknow20]

National Hackers of #Russia claim they will take down G4S, a private security company

Interesting to note that the company has had at least 2 data breachs in the last year so there is likely already exposed data

#cybersecurity #infosec #RussiaUkraineWar #UkraineRussiaWar

[Maddie Stone @maddiestone]

A detailed analysis of a Samsung in-the-wild exploit, attributed by TAG to a commercial surveillance vendor. All 3 bugs were 0-day at the time of the discovery of the sample. 1/3

https://t.co/o972gigMT3

[Grzegorz Tworek @0gtweet]

Yet another DLL sideloading: ShellChromeAPI.dll does not exist, but built-in DeviceEnroller.exe tries to load it when /PhoneDeepLink parameter is present. If you drop your own DLL, it nicely loads.

[Nıŋʝąƈąɬ 🐈 @RavivTamir]

I'm excited about this one 🎉 Hunt in Microsoft 365 Defender without KQL! Our new query builder is now in public preview
https://t.co/9kUFUpYmiy thanks @Taliash1

[vx-underground @vxunderground]

Leaked documents online show the purchase (and documentation of) an $8,000,000 iOS Remote Code Execution 0day exploit

[Daily OSINT @DailyOsint]

If you need to automate #OSINT for #ThreatIntel and #AttackSurfaceManagement,

SpiderFoot handles various #investigation tasks for you.

https://t.co/49uz57gr2g

@spiderfoot @binarypool

#infosec #cybersecurity #blueteam #attacksurface #assetdiscovery #CTI #reconnaissance

[k0ukl @k0ukl1]

@ZeroLogon Link please?

[Michael Koczwara @MichalKoczwara]

Highly recommend using Shodan/filters to track/hunt adversaries' infrastructure and C2

Cobalt Strike
https://t.co/U4aMMpgk9a

MSF
https://t.co/lXqDNWlLYI

Covenant
https://t.co/8bRaNunnrs

Mythic
https://t.co/N0omDCKY1c

Brute Ratel C4
https://t.co/2zHuuDT4nk

[Will @BushidoToken]

Found some #opendir Red Team infra using Shodan today, interesting choice of tools 🧐
https://t.co/jnZUEsnLKW

[Phish.Stats @PhishStats]

new #phishing at hXXp://obatejarat[.]com/ | 88[.]198[.]103[.]187 | Germany | HETZNER-AS Hetzner Online GmbH | ASN 24940 #infosec #cybersecurity

[Ryan Ashley @SecureReload]

In the last 24 hours I have found and reported a total of 98 #phishing sites.

They can be found here - https://t.co/RzeH7s5caj

#InfoSec @illegalFawn @Spam404 @sysgoblin @n0p1shing @JCyberSec_ @JRoosen

[CrossedBytes ☦️ @CrossedBytes]

Android Internals for Reverse Engineers:
Part 2: APK Components
https://t.co/tbgl35A9wf