NotFound

-- Member of @HexpressoCTF -- ☕ ☕GNU/Linux && bash|py addict
0x54726f6c6c2045766572797768657265

[NotFound @Notfound404__]

If a website is protected by @CheckPointSW IPS "anti-SQLi" and mysql<=5 is running, you can easily bypass this by using "||" and "&&" instead of "OR" and "AND" which are blocked. Tested on the lastest version R80.20.
#bugbountytip #bugbounty #pentest #payfornothing

[NotFound @Notfound404__]

"Viendez" tester ce petit challenge ! Un peu de network, un soupçon de crypto, une pincée de RE et surtout : 0 guessing.

[Login Sécurité @LoginSecurite]

Gagne ton pass pour @_leHACK_ 2026 ! 🏴‍☠️

Un mini-challenge cyber, 3 places à la clé ( 1 pour le plus rapide et 2 pour les meilleurs write-ups).

⏱️ Fin : 21/06 à 23h59
👉 https://t.co/QV6HrYQcHX

[Tib3rius @0xTib3rius]

I am about to COMPLETELY disrupt the cybersecurity industry...💀💀💀

Presenting the Continuous Reasoning AI Pentester!

Multiple AI agents running every security tool under the sun against your environment, at record speeds. Full pentests achieved in less than AN HOUR.

Zero human input.

One hundred percent success.

[NotFound @Notfound404__]

Si vous ne souhaitez pas passer par LinkedIn :
https://t.co/124WPQ2O8s

[NotFound @Notfound404__]

3 places à gagner pour Le Hack (la NDH pour les anciens) !
Et faites moi plaisir, je veux un writeup en oneliner bash svp.
En plus, il y a quelques messages cachés 🤫
#challenge #ctf #loginsecurite

[Pixis @HackAndDo]

Je serai à #LeHack vendredi 27 et samedi 28 juin, et si tu n'as pas encore ta place, tente ta chance pour venir gratuitement, en résolvant ce petit challenge made by @LoginSecurite 💪
https://t.co/BQzol8h6pt

[NotFound @Notfound404__]

@SecurityTrybe set completion-ignore-case On
💤

[Florian Roth ⚡️ @cyb3rops]

PoC Exploit for the NTLM reflection SMB flaw CVE-2025-33073

https://t.co/tkgfd5UnEp

[NotFound @Notfound404__]

Il y a bien longtemps que j'avais pas trouvé un chall aussi sympa !
Malgré sa simplicité, on y trouve des vulns très récentes, le cheminement jusqu'à DA est fluide et surtout, c'était l'occasion de jouer avec certipy5 👌
(https://t.co/6BGMyyUH6e)

https://t.co/OATAxif7pA

[NotFound @Notfound404__]

@_SaxX_ comme même !

[NotFound @Notfound404__]

@_SaxX_ Si t'es sage 😘

[🕳 @sekurlsa_pw]

BadSuccessor ports:
◾️.NET https://t.co/27SFjjBOWL
◾️Python https://t.co/NxLYxf6H0x
◾️PowerShell https://t.co/8q7Pd9KSk2

🎯 Implemented in these tools:
◾️Netexec: https://t.co/aF6xlW1DIR
◾️BloodyAD https://t.co/mjemUKJOEl

[Logan Goins @_logangoins]

I'm super happy to announce an operationally weaponized version of @YuG0rd's BadSuccessor in .NET format! With a minimum of "CreateChild" privileges over any OU it allows for automatic escalation to Domain Admin (DA). Enjoy your inline .NET execution!

https://t.co/nvZmsNqjnG

[NotFound @Notfound404__]

@penthium2 @rootme_org Sympa le "semaphore-like" version bash pour limiter le nombre d'exec en // !

[Yuval Gordon @YuG0rd]

Many missed this on #BadSuccessor: it’s also a credential dumper.
I wrote a simple PowerShell script that uses Rubeus to dump Kerberos keys and NTLM hashes for every principal-krbtgt, users, machines. no DCSync required, no code execution on DC.

[Florian Roth ⚡️ @cyb3rops]

#BadSuccessor - a textbook example of why the security ecosystem is broken

- A privilege escalation vuln in Windows Server 2025 AD (via dMSA)
- Full domain compromise with default config
- Microsoft was told, agreed it’s real, but rated it "moderate"
- No patch, No fix
- No code execution needed
- No need to touch the DC
- No RPC, no ntds.dit
- Just a write to one attribute on an account you can create
- Rubeus already supports dMSA abuse (since February)
- Metasploit module is in the works

Researchers published everything anyway. Because… "we respectfully disagree with Microsoft’s assessment". So yeah, let’s just drop an end-to-end domain takeover technique online to prove a point.

To be fair, Windows Server 2025 isn’t widely deployed yet, so the real-world blast radius today is limited. But this isn’t about today - it’s about trust, process, and what happens when security decisions are driven by vendor priorities and researcher egos.

What this tells me:

1. Microsoft either:
- Can’t assess bugs anymore
- Or stopped caring about on-prem AD completely (because Entra ID is what they want to sell)

2. And the offensive sec crowd?
- They knew this would hit hard
- But chose to burn the world anyway
- Because their urge to be right > everyone else’s security

In the end, both sides look bad.
Microsoft, for being dysfunctional or apathetic
Researchers, for chasing clout over coordinated disclosure

Congrats. In a rare show of unity, both sides managed to screw this up.

Blog: https://t.co/f9eDCBmbjI

LinkedIn: https://t.co/dc1l5EUYpb

Metasploit issue: https://t.co/tcRkUHavo1

[LaurieWired @lauriewired]

Just built an MCP for Ghidra.

Now basically any LLM (Claude, Gemini, local...) can Reverse Engineer malware for you. With the right prompting, it automates a *ton* of tedious tasks.

One-shot markups of entire binaries with just a click.

Open source, on Github now.

[Orange Cyberdefense's SensePost Team @sensepost]

Attacks against AD CS are de rigueur these days, but sometimes a working attack doesn’t work somewhere else, and the inscrutable error messages are no help. Jacques replicated the most infuriating and explains what’s happening under the hood in this post https://t.co/eF5nhHfPuS

[NotFound @Notfound404__]

@_SaxX_ Attention avec l'utilisation de "diskpart" et son équivalent Linux "dd" , n'est-ce pas 👀

[NotFound @Notfound404__]

Oh ça, c'est fort !
Même pour les fanboy cli comme moi, toujours pratique d'avoir un tool qui donne une vue d'ensemble rapidement sur certains éléments.

https://t.co/bwMOsJU6b5

[Simone Margaritelli @evilsocket]

Attacking UNIX Systems via CUPS, Part I

https://t.co/T6SqraB5nh