FR

Statistician wannabe | Linux User | Information Security Enthusiasts

[FR @naragnu]

@Real_Lucas55 Lampard

[Vivek | Cybersecurity @VivekIntel]

🐉⚔️ 50 Essential Kali Linux Tools

1.🔍 Nmap
2.🌐 theHarvester
3.🕸️ Maltego
4.🎯 Recon-ng
5.👁️ WhatWeb
6.📡 DNSEnum
7.🛠️ Burp Suite
8.💉 SQLMap
9.🔎 Nikto
10.📂 Dirb
11.⚡ Gobuster
12.📝 WPScan
13.🔑 Hashcat
14.🪓 John the Ripper
15.🐉 Hydra
16.🎯 Medusa
17.⚡ Ncrack
18.📖 Crunch
19.📶 Aircrack-ng
20.📡 Airodump-ng
21.🛰️ Kismet
22.🔐 Reaver
23.📲 Wifite
24.🕸️ Bettercap
25.🚀 Metasploit Framework
26.💥 Exploit-DB
27.🐝 BeEF
28.👑 Empire
29.🎯 Cobalt Strike
30.⚡ PowerSploit
31.🦈 Wireshark
32.📡 Tcpdump
33.🔍 Tshark
34.🌐 Netcat
35.⚙️ Scapy
36.🛡️ Nessus
37.🟢 OpenVAS
38.⚛️ Nuclei
39.🕷️ Wapiti
40.🔎 Lynis
41.🧠 Volatility
42.🔬 Autopsy
43.📂 Foremost
44.🔍 Binwalk
45.🗃️ Sleuth Kit
46.⚙️ Ghidra
47.🛠️ Radare2
48.🐞 GDB
49.📱 Apktool
50.🤖 JADX

#CyberSecurity #KaliLinux #Pentesting #EthicalHacking #RedTeam #InfoSec #SecurityTools

[GitHub @github]

1/ We are sharing additional details regarding our investigation into unauthorized access to GitHub's internal repositories.

Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately.

[Web Security Academy @WebSecAcademy]

Are you an aspiring hacker?

Web Security Academy is the perfect place for you to kickstart your journey! And the best part is, it’s TOTALLY FREE!

Download your main tool here 👇
https://t.co/DEh3hHPH16

Start learning here 👇
https://t.co/mp7JjcMrKA

[Florian Roth ⚡️ @cyb3rops]

If you’re tracking the AV detection rate for the web shells dropped in recent SharePoint attacks (CVE-2025-53770), here’s the current picture:

Samples:
27c45b8ed7b8a7e5fff473b50c24028bd028a9fe8e25e5cea2bf5e676e531014
92bb4ddb98eeaf11fc15bb32e71d0a63256a0ed826a03ba293ce3a8bf057a514
8d3d3f3a17d233bc8562765e61f7314ca7a08130ac0fb153ffd091612920b0f2
b336f936be13b3d01a8544ea3906193608022b40c28dd8f1f281e361c9b64e93

Detections: still very low or zero.

But my colleague Arnim’s community YARA rule caught these immediately when first dropped:
https://t.co/4u4yGbaHhZ

A solid reminder why layered detection approaches matter.

#SharePoint #YARA #ThreatDetection #CVE202553770

Btw, this detection is already live in THOR Lite and THOR Cloud Lite. I’ll also add detection for the compiled ASPX soon.

https://t.co/AaMCX5PZMD

[Hacking Articles @hackinarticles]

Cyber Roadmap

🔥 Telegram: https://t.co/bFiHxFjead

#infosec #cybersecurity #cybersecuritytips #microsoft #redteam #informationsecurity #CyberSec #ai #offensivesecurity #infosecurity #cyberattacks #security #oscp #cybersecurityawareness #bugbounty #bugbountytips

[Deedy @deedydas]

It’s happening.

AI models are finding zero-day vulnerabilities.

This blog post is a must-read and marks a new era for cybersecurity.

[Leonard Rodman @RodmanAi]

Top 10 System design concepts to learn in 2025

1. Caching
2. DB Sharding
3. load-balancing
4. replication
5. fault-tolerance
6. high-availability
7. API Gateway
8. scalability
9. Performance
10. Indexing

learn more on DesignGuru - https://t.co/jBqv3o2zzL

[𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 @netresec]

@RussianPanda9xx Thanks for that great writeup on StealC v2! In addition to the HTTP based C2 there seems to be another C2 that also uses base64, but directly over TCP (no HTTP). Any ideas what this could be and how to parse this data?

[0b1d1 @_0b1d1]

🛠️ Guide to Essential Penetration Testing Commands💻

Penetration testing (pentesting) is essential for identifying cybersecurity vulnerabilities. Here’s an overview of key commands for information gathering, exploitation, and access maintenance.

[FR @naragnu]

@alif_firza @stis_fess Kelas

[Het Mehta @hetmehtaa]

Introduction to Windows Kernel Exploitation for Beginners

Part 1: https://t.co/iytco8khA0
Part 2: https://t.co/Kr5z56e0pV
Part 3: https://t.co/sdI2uEndk6
Part 4: https://t.co/6DmUNO3iQU
Part 5: https://t.co/CW1ulPqGqq

#windows #infosec #kernal #exploit #100xSecurity

[FR @naragnu]

@her_alone @hnurwahid @dwi_maulana28 😅

[Txt dari Foto Dakwah 🇵🇸 @fotodakwah]

Innalillahi , Semoga Allah Ta’ala merahmati Ustadz Yazid bin Abdul Qadir Jawas dengan rahmatNya yang luas.

Beliau termasuk di antara da’i di Indonesia yang telah menghabiskan masa hidupnya untuk mendakwahkan tauhid.

Semoga Allah mengampuni dosa-dosa beliau, menerima amal shalih beliau, dan semoga apa yang beliau sampaikan berupa ilmu bisa menjadi jariyah yang terus mengalir pahalanya.

Semoga kita dimudahkan untuk bisa mengamalkan nasihat-nasihat beliau.

[Clandestine @akaclandestine]

GitHub - The-Osint-Toolbox/Social-Media-OSINT: Social Media OSINT collection containing - tools, techniques & tradecraft. https://t.co/ZzNbfvLsws

[FR @naragnu]

@ibnux Ada yang backgroundnya ilmu komputer?

[FR @naragnu]

Zeroday

https://t.co/PORtS1xShG

[N$🌟 @__nav1n_]

Oh, noo.. not again!

CVE-2024-24919 #CheckPoint #SSLVpn

[FR @naragnu]

@arievrahman Kancamu bedo gedung kuwi