Стелиос

[CR1337 @CR1337]

Chat Control wants to scan your private messages.

Here is how to take back control of your conversations, your data and your tools, step by step, from beginner to whistleblower.

[Стелиос @mr_c00k]

@SOSIntel Hello cannot DM you can you follow or DM me?

[Maxime Thiebaut @0xThiebaut]

For any #Microsoft365Security analysts out there, we've published https://t.co/ZiBggdGtTR to password-protect your #Malware downloads through the #LiveResponse sessions 🪲 A standard feature one could have said... #infected #zip

[Стелиос @mr_c00k]

@Namecheap It's on your servers
IP: 162.0.232.164

[Стелиос @mr_c00k]

myalphagr-dev[.]com/login.php

New Alpha Bank GR phishing they use SMS to send it and they block access to it based on the user agent. It needs to be phone user agent.

@PhishKitTracker @PhishStats @Bank_Security

[H4x0r.DZ 🇰🇵 @h4x0r_dz]

Unknown recon Method via https://t.co/OpqZc53T3b

waybackurls $TARGET.app.box.com

or just use google DORK :
site:https://t.co/OpqZc53T3b "$TARGET"

Sometimes the employees upload sensitive files to the public on https://t.co/OpqZc53T3b.

#bugbountytips #bugbounty

[之乎者也 @zhzyker]

#CVE CVE-2021-26855 CVE-2021-27065
Microsoft Exchange From SSRF to RCE🤔
https://t.co/v52fC2vcq1 --> webshell --> rce --> down xx.ps1 --> cobaltstrike --> exit
https://t.co/v52fC2vcq1 provided by @_0xf4n9x_ 👍

[payloadartist @payloadartist]

Unauthenticated Arbitrary File Read vulnerability in VMware vCenter before version 6.5u1

PoC for extracting passwords from https://t.co/CNYO5LTdBB file - /eam/vib?id=C:\ProgramData\VMware\vCenterServer\cfg\vmware-vpx\https://t.co/CNYO5LTdBB

#bugbounty #cybersecurity #security

[Wietze @Wietze]

It turns out nearly 300 executables in your System32 folder are vulnerable to relative path DLL Hijacking.

Did you know that with a simple VBScript some of these EXEs can be used to elevate such executions, bypassing UAC entirely?

Full blog post here 👉 https://t.co/tBuFRk7ERg

[Florian Hansemann @CyberWarship]

AD Attack

1) Performing domain recon using PS
https://t.co/Pt6VpJqGdO

2) Attack mapping with bloodhound
https://t.co/CpmB4XW3pq

3) Extracting passwd hashes
https://t.co/f55XUSyx1k

4) Pass-the-hash attacks with mimikatz
https://t.co/PPkBjPpVgK

#infosec #pentest #redteam

[DirectoryRanger @DirectoryRanger]

Active Directory Exploitation Cheat Sheet

https://t.co/U65IXldky1

[Clément Labro @itm4n]

A little gift to all the pentesters out there... 🎁

All versions of Windows Server from 2008 R2 to 2019 are prone to a DLL hijacking in the %PATH% directories. 🔥

☑️ Run as SYSTEM
☑️ No reboot required
☑️ Can be triggered by a normal user on demand

👉 https://t.co/XpsQ25qIEz

[axi0mX @axi0mX]

EPIC JAILBREAK: Introducing checkm8 (read "checkmate"), a permanent unpatchable bootrom exploit for hundreds of millions of iOS devices.

Most generations of iPhones and iPads are vulnerable: from iPhone 4S (A5 chip) to iPhone 8 and iPhone X (A11 chip).

https://t.co/dQJtXb78sG

[Стелиос @mr_c00k]

@sS55752750 I saw that to before some days on https://t.co/2AHSabzecf they leaked the "unique" source code and there was some guys that asked for installation guide and how to install the db 😂😂

[Luke Stephens (hakluke) @hakluke]

This is a great idea. A repository full of questions you might get asked in for a job interview for a pentester/red teamer/offensive computer wizard role.

https://t.co/KcHosZgZdM

[Netmux @netmux]

HOW TO CRACK WPA/WPA2 PMKID

STEP 1:
https://t.co/CiO8ySH4gS
https://t.co/dGC1D89h42

STEP 2: Find target BSSID:
airodump-ng <int>

STEP 3: Add BSSID in ‘bssid.txt’ and use ‘hcxdumptool’:
hcxdumptool -i <int> --filterlist=bssid.txt --filermode=2 --enable_status=2 -o pmkid.pcap

[Netmux @netmux]

PASSWORD HASH LOOKUP/CRACKING ONLINE:

https://t.co/cfUqLCLX3U

https://t.co/Zd02Pu1I67

https://t.co/sSyo4ItEyh

https://t.co/iA4rGG6i8K

https://t.co/QXzYkqKoMF

https://t.co/qMboItyvnz

https://t.co/pdqlqDgYA8

https://t.co/ynHwqrETIW

https://t.co/qYjfDw7dMC

#hashcrack

[Emad Shanab - أبو عبد الله @Alra3ees]

authentication disabled port:"5901,5900"
authentication disabled port:"27017"
authentication disabled port:"4800"
authentication disabled product:"Jetty"

[The Hacker News @TheHackersNews]

Hacker releases zero-day exploit for a new unpatched #vulnerability in Microsoft Windows 10

https://t.co/9SH2LvYPTO

#hacking #infosec #cybersecurity