mjutsu

0x1

[Florian Hansemann @CyberWarship]

"TakeMyRDP: A keystroke logger targeting the Remote Desktop Protocol (RDP) related processes, It utilizes a low-level keyboard input hook, allowing it to record keystrokes in certain contexts"

#infosec #pentest #redteam
https://t.co/eHTKaN3GmM

[0xor0ne @0xor0ne]

Constantly updated list of links to blog posts, write-ups and papers related to cybersecurity (mostly reverse engineering and exploitation)

https://t.co/g2cERXRyeY

#cybersecurity #infosec

[OffSec @offsectraining]

Mark your calendar for OffSec's upcoming End-of-Year CTF! https://t.co/jeHE4Pp6NC

[raptor @0xdea]

#Ubuntu Privilege Escalation bash one-liner using CVE-2023-32629 & CVE-2023-2640

https://t.co/q2kisqzeWb

Nifty #PoC!

https://t.co/to1G6PGc94

[mjutsu @manas3c]

@trustie_rity @offsectraining congratulations @trustie_rity

[RedTeam-TG @RedTeamTG]

Félicitations 🥳🎉🥳 à notre équipe qui ne cesse de nous représenter à l'international 🇹🇬
#cyber #CyberSecurity #share #October

[0xdf @0xdf_]

MonitorsTwo retires on @hackthebox_eu. It starts with a CVE in Cacti where I get to look at a bunch of broken POCs and exploit manually. There's also a Docker CVE that lets me abuse the metadata between host and container to get root.

https://t.co/8UOjA0lY76

[RedTeam-TG @RedTeamTG]

Nous vous souhaitons un excellent début du mois d'août ! Que ce nouveau mois soit rempli de succès, de défis relevés avec brio, et d'opportunités qui se présentent à vous.
#Redteam #redteamtg #helloaugust #infosec #cybersecurity #hacking #WeAreTogolese #offsec #Togo #TT228

[THREAT CON @THREAT_CON]

We're giving away an OSCP voucher to our community.🎉

To participate :
1. Follow us on Twitter.
2. Retweet this post.
3. Like this tweet.

It's that simple! By completing these steps, you'll be eligible to win.
Also, register now at https://t.co/iXhLYJRA1j.
#offsec #giveaway

[mjutsu @manas3c]

@BoazakK @RedTeamTG @Isid0r3 @ashiahanim_ay here we go @BoazakK

[Boaz Kodjo BoazAK @BoazakK]

I am proud of what I do and what we do and the goal we want to achieve. The @RedTeamTG is making its way.

Thank you all mentors for the advice, suggestions and help, without forgetting the opportunities given.

Thanks @manas3c @Isid0r3 @ashiahanim_ay

[Snowscan @snowscan]

You can use the Windows Search Protocol to coerce authentication from hosts running the Windows Search Service (Win10/11 only by default) as a regular domain user. Haven't been able to do WebDAV with it though so usefulness is limited. PoC: https://t.co/qKeUfdaKB8

[mjutsu @manas3c]

@BinaryChunk Nice one @BinaryChunk

[Muhammed Anzil @alone_breecher]

Title:- Openfire Admin Console Auth Bypass
CVE-2023-32315 🪲

What are you looking go checkout...

dork:- http.title:"openfire console"

poc: "{{base uri}}/setup/setup-s/%u002e%u002e/%u002e%u002e/log.jsp"

#bugbountytip #BugBounty #Hacking #CVE #CyberSecurity #infosec

[OffSec @offsectraining]

We're proud to sponsor @NahamSec's #NahamCon2023! https://t.co/rGPWY0zADR

ℹ️ NahamCon is a free virtual security conference! Join workshops, listen to speakers, and compete in a CTF.
2️⃣ winners will each receive a PEN-200 #OSCP 90-day course and certification bundle.

[Nicolas Krassas @Dinosn]

CVE-2023-3079: New Google Chrome 0-Day Vulnerability Being Exploited in the Wild https://t.co/QTLZrSO7UX

[mjutsu @manas3c]

@RedTeamTG @BoazakK @Isid0r3 @gausoft_ @abla_agunyo @tdev228 pF8FDE0`c

[cts🌸 @gf_256]

the real CTF skill is Mergers & Acquisitions

[HackGit @hack_git]

AllForOne

This repository contains a Python script that allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories, helping to streamline the process of downloading multiple templates usin… https://t.co/MHsH3HijZb