Sumedt Jitpukdebodin(L3, ❄️)(💙,🧡).lens

Linux, Hacking, Security

[Sumedt Jitpukdebodin(L3, ❄️)(💙,🧡).lens @materaj]

Summary step by step for HELK setup and send log from Windows + Linux.

https://t.co/2pWZhcD3XQ

[Swissky @pentest_swissky]

One Month Letting Claude Code Hunt Bugs For Me - @0xEdra
https://t.co/CTp7idMAtG

[Swissky @pentest_swissky]

Bullying LLMs into submission to find 0days at scale - @ZephrSec
https://t.co/calyUXd8sd

[[email protected] / EDRmetry / PurpleLabs @cr0nym]

Chaining ISC DHCP Server Features for Unauthenticated Remote Root Code Execution by @mohammadaskar2 Fully agree with Conclusion section => "The danger emerges from understanding code composition – how interconnected features create unintended privilege escalation pathways when combined." https://t.co/px4RLyFS24

[cr3ghost @cr3ghost]

A full university malware analysis course with every lecture, video, assignment, and lab available for free online.

Malware taxonomy. Static and dynamic analysis. x86 and x86-64 assembly. Ghidra from introduction to scripting to machine learning applications. YARA rules. Runtime debugging. Host exploitation and forensic analysis. Android and Java malware. PDF payload analysis. Sysmon. Volatility memory forensics.

No enrollment. No paywall. No signup. Just a complete course.

Course: https://t.co/GH0nZXRl3C
YouTube Videos: https://t.co/7ziaFvKbyi

Author: @colemankane

#MalwareAnalysis #ReverseEngineering #InfoSec

[SECPlayground Platform @secplayground]

✨ SECPlayground New Release Labs ✨

Stay ahead of the curve with our June 2026 content update at #SECPlayground! 💻
➤ CVE
➤ Intermediate Web App Sec
➤ Investigation and Vuln

Master #cybersecurity through hands-on practice.
Try it now! 🔗 https://t.co/LTav7e05aN

[[email protected] / EDRmetry / PurpleLabs @cr0nym]

Agentic Threat Hunting Framework (ATHF) is a framework for agentic threat hunting - building systems that can remember, learn, and act with increasing autonomy - https://t.co/atbFXDGgK3

[watchTowr @watchtowrcyber]

What do we even say at this point?

CVE-2026-8451, a zero-day Memory Overread that watchTowr Labs identified in Citrix NetScaler appliances in March, has just been publicly disclosed with patches.

We're not done yet... speak soon... ;-)

https://t.co/MAzxLkbbsZ

[0xdf @0xdf_]

WingData from @hackthebox_eu features a null-byte Lua injection in Wing FTP Server for RCE, cracked password hashes for a pivot, and a Python tarfile extraction-filter bypass for arbitrary write to root.

https://t.co/fuS43FYvYz

[Intigriti @intigriti]

Cookies are one of the most fundamental building blocks of the modern web, and yet their security implications often go overlooked! 🧐

A missing HttpOnly flag, a misconfigured SameSite policy, or a session cookie without Secure isn't a vulnerability on its own, but in the right attack chain, it can be the missing piece that turns a low-severity bug into a critical finding! 🤠

Our latest article walks you through how insecure cookie policies enable CSRF, XSS cookie stealing, and other attack scenarios! 😎

Read the article now! 👇
https://t.co/Ev3nnccySE

[jp / kw0 @JoshuaProvoste]

🚨 Django RCE - Remote Code Execution

https://t.co/8Bi4AcXoVU #BugBounty

[Nicolas Krassas @Dinosn]

I tried a Local AI model (Qwen 3.6 27b) for security research and it works surprisingly well. https://t.co/09HOfCr6vH

[Panos Gkatziroulis 🦄 @ipurple]

Automated BYOVD hunting pipeline - Scans Windows kernel drivers for dangerous imports, extracts IOCTL dispatch surfaces, cross-references against:
✅ LOLDrivers
✅ MS Blocklist
✅ KDU https://t.co/BVmUQG4JZL

[Blue Team News @blueteamsec1]

VanGuard — open-source single-binary DFIR toolkit (Velociraptor, Hayabusa, Chainsaw, Loki, YARA) with TUI, air-gap support, and 28 pre-built use cases https://t.co/Y5np8hQ6rc #cyber #threathunting #infosec

[Unit 42 @Unit42_Intel]

The latest macOS ClickFix variant invisibly mounts DMG images in the background to execute a macOS infostealer and hijack cryptocurrency wallet info. Details at https://t.co/8Bg5ojzg26

[XSS Payloads @XssPayloads]

CVE-2026-25860 - OpenClinic GA Reflected XSS to RCE
Nice chain, starting with a refelected XSS and leading to an RCE. By Partiwave.
https://t.co/PeTwnlFhVy

[Alex Teixeira @ateixei]

Are the robots capable of writing decent #SPL or #KQL? Go find out! https://t.co/OPlhBa212T #ThreatHunting #MSDefender

[/r/netsec @_r_netsec]

I compiled a unified LLM-CTF benchmark – 2,639 real data points from NeurIPS 2024 + original multi-agent runs https://t.co/M3zrWOQWks

[Defused @DefusedCyber]

🚨 CVE-2026-20230 (Cisco CUCM WebDialer SSRF → RCE, CVSS 8.6) is now being exploited full-chain.

Our honeypots are seeing automated sweeps dropping webshells, all via Tor.

Track Cisco CUCM exploitation 👉 https://t.co/GXFaqggV8a

[Reece @RLeRoux64]

Build a Keylogger to Understand the System
Memory, Shellcode, and Security Research

https://t.co/10pKRnX5C8

[Web Security Academy @WebSecAcademy]

One method for discovering the correct amount of columns to SELECT in a SQL injection is to keep adding NULL until the error disappears. Check it out! 👇