Luhko

[Luhko @lukhooo]

Yay, I was awarded a $3,000 bounty on @Hacker0x01! https://t.co/N0dzI92d4k
Bug type: Improper Access Control leads to 0 click account takeover

[Vercel @vercel]

We paid $1 million to hackers to harden our firewall defenses.

Today we're telling the story of how we strengthened our WAF, disclosing a runtime mitigation layer for the first time, and how we partnered with
@Hacker0x01 to defend against React2Shell.

https://t.co/O3DWCVnGU7

[Florian Hansemann @CyberWarship]

''Weaponizing WDAC: Killing the Dreams of EDR''

#infosec #pentest #redteam #blueteam
https://t.co/y7I6T3aiQ7

[WitherOrNot @witherornot1337]

Improved bypass for Windows 11 OOBE:

1. Shift-F10
2. start ms-cxh:localonly

Only required on Home and Pro editions.

[vx-underground @vxunderground]

As we continue to grow in size, collect malware, malware papers, and malware source code — we thought, "wow, kitty cats are pretty cool. It's a shame we can't spam them on Xitter."

Then we had the idea of collecting every photo of a cat on the internet. Why? No idea

[Pavel Yosifovich @zodiacon]

https://t.co/SRo4fACRJ9

[Ricardo Ruiz @RicardoJoseRF]

After reading @_RastaMouse's blog post about Crystal (https://t.co/8qwQC8TuDr) I created CrystalDump, a port of NativeDump written entirely in Crystal, designed to dump lsass using only NTAPI functions - https://t.co/EByZm1rZQK #redteam #offsec #cybersecurity

[Luhko @lukhooo]

@vxunderground @AlteredSecurity 👀

[Luhko @lukhooo]

@vxunderground 👀👀

[Luhko @lukhooo]

@vxunderground @binaryz0ne 👀

[SpaceX @SpaceX]

Mechazilla has caught the Super Heavy booster!

[ret2src @ret2src]

The year is 2024, we have the most advanced EDRs and Malware Sandboxes

Threat actors:

[Volker @volker_carstein]

This weekend I gave a workshop on #GEOINT @_barbhack_
I had a blast 🔥
Many thanks to all participants🙏
FYI, the slides are here : https://t.co/N4QXiDIu1i
Exercices will stay online until 31/08, 11 pm (and don't forget you can still win stickers👀)

[Root-Me @rootme_org]

📢 A talk by @kevin_mizu : "Found an XSS? Alright! But what's next?"🎉on July 28, 8pm! 🎁Win a Burp Suite Cert. Practitioner certification! ⏰Like, share by July 26 : 2 Twitter/LinkedIn followers chosen at random Winners announced July 27 #RootMeContest https://t.co/1OMWM98CPu

[Justin Ibarra @br0k3ns0und]

Introducing the: LOLOL project

A collection of Living Off the Living Off the Land projects

https://t.co/01vXz7ebJe

[murat 🍥 @mayfer]

haha ok one more GPT-4 game:

try to buy the rug for as cheap as possible.
play link: https://t.co/2dWeYmmepA

my record so far is $400

[David Buchanan does not tweet anymore @David3141593]

holy FUCK.

Windows Snipping Tool is vulnerable to Acropalypse too.

An entirely unrelated codebase.

The same exploit script works with minor changes (the pixel format is RGBA not RGB)

Tested myself on Windows 11

[chompie @chompie1337]

Releasing a Windows 11 LPE exploit by @FuzzySec and I. Exploits CVE-2023-21768, a vuln in afd.sys. Blog post soon!
https://t.co/iqQYsw5TmP

[Wes Bos @wesbos]

Nice free ngrok alternative.

Use Cloudflare tunnels to proxy your localhost application to the outside world with https.

1. brew install cloudflared
2. cloudflared tunnel --url http://localhost:6969