maddhatt3r

Everyone wants some magical solution for their problem and everyone refuses to believe in magic

[maddhatt3r @maddhatt3r2]

https://t.co/Rou33KeE5P

[Raul • 𝖙𝖍𝖊𝖌3𝖓𝖙𝖑3𝖒𝖆𝖓 @theg3ntl3m4n]

I don’t usually post on here, but as a Venezuelan I feel compelled to share this.

Venezuela has recently been severely affected by the earthquake, and many of the impacted areas are currently facing a critical shortage of supplies and personnel. Families are struggling, and on-the-ground resources are extremely limited at this time.

I also want to specifically call on the infosec community. If you are in cybersecurity, tech, or adjacent spaces, any visibility, amplification, or support can genuinely help expand the reach of relief efforts.

Any support, no matter how small, can make a real difference for those affected.

If you are able to contribute, repost or share, it would be greatly appreciated:

https://t.co/RwAtVkjdPn

[maddhatt3r @maddhatt3r2]

Told #dalle to make a photo of real life Rick Sanchez from Rick and Morty. I like how it turned out!

[maddhatt3r @maddhatt3r2]

@DerbyCon

[maddhatt3r @maddhatt3r2]

Check out my CVE :)
CVE-2021-40124

https://t.co/lm5s2PJSaa

[Brett Hawkins @h4wkst3r]

Excited to be giving my talk at @hthackers today, come check it out at 2:30pm ET! https://t.co/KzkXl2bxDT

[maddhatt3r @maddhatt3r2]

@HackingDave Maybe a solution like the one vx-underground uses is needed. @vxunderground

[publiclyDisclosed @disclosedh1]

Shipt disclosed a bug submitted by @A0x017: https://t.co/6YkBLOc6zl - Bounty: $200 #hackerone #bugbounty

[maddhatt3r @maddhatt3r2]

Built a tool in C# that injects keystrokes into open Windows applications such as putty or mstsc (rdp). Shout out to ⁦@Th3M00se⁩ and ⁦@redteam_hacker⁩ for the idea. When I have some time I will upload a video of it in action! https://t.co/UDO9Uof6fv

[Florian Hansemann @CyberWarship]

AD Attack

1) Performing domain recon using PS
https://t.co/Pt6VpJqGdO

2) Attack mapping with bloodhound
https://t.co/CpmB4XW3pq

3) Extracting passwd hashes
https://t.co/f55XUSyx1k

4) Pass-the-hash attacks with mimikatz
https://t.co/PPkBjPpVgK

#infosec #pentest #redteam

[MDSec @MDSecLabs]

Breaking the Browser: a tale of IPC, credentials and backdoors... new research and tools by @_batsec_ on how to tap chrome https://t.co/PUfgJZdaYn

[maddhatt3r @maddhatt3r2]

Passed my OSWE :)

[maddhatt3r @maddhatt3r2]

Doing source code review on a remote server? Want syntax highlighting without having to use additional tools server side? Try: ssh <user>@<server> cat <sourceCodePath> | batcat -l <targetLanguage>

[H4x0r.DZ 🇰🇵 @h4x0r_dz]

check these cheat sheets by @owasp !!.
#BugBounty #bugbountytips

https://t.co/NMlpiIqIKY

[Francesco Soncina @phraaaaaaa]

PEzor v2 — New Output Formats and Cobalt Strike Integration

Cobalt Strike's execute-assembly lets operators run .NET assemblies without touching the disk. But wouldn’t be nice if we could execute arbitrary executables too with the same ease?

https://t.co/BbW5LyM6E8

[Ammar Amer @cry__pto]

JS is l0ve:
https://t.co/b48afC1Pf4
BugBounty TIPS + Tools:
https://t.co/VSIYAxo7Ix
Java RMI for pentesters: structure, recon and communication (non-JMX Registries):
https://t.co/sFlsK6N0jb
Bypass 2FA in a website:
https://t.co/q7KA3rkANH
#BugBountyTip #Hacking #OSINT #pentest

[Omar Ωr Santos @santosomar]

I finally got into the #redteamfit bandwagon. Thank you @syndrowm for the motivation! @HackingDave I cannot do a full PFT, but feeling much better than sitting all day behind a keyboard. Cheers!

[Bill Demirkapi @BillDemirkapi]

The Spectre Rootkit is now released alongside my @BlackHatEvents USA talk, Demystifying Modern Windows Rootkits. Go check it out! https://t.co/wGxH3L8pKk