operator#3458934229

[Tom Dörr @tom_doerr]

Aggregates 60+ OSINT feeds into a single map

https://t.co/bynV4E1AiV

[operator#3458934229 @operator3458934]

Do you remember when you joined X? I do! #MyXAnniversary

[Tom Dörr @tom_doerr]

Unlimited cloud storage via Telegram

https://t.co/jh8OgdcOd5

[Joruno @wsl8297]

日常运维离不开网络连通性检查，但一遇到排障就得在命令行里反复敲 ping、换参数、改协议，既耗时又容易漏。

试试 NetSonar：一款开源网络诊断工具，把原本繁琐的命令行操作搬到直观的图形界面里，让网络检测一眼看清、随手就做。

它支持 ICMP/TCP/UDP/HTTP 多协议探测，集成网络接口管理、本地设备发现，并用实时延迟曲线把波动和异常直接呈现出来。

GitHub：https://t.co/9plL0wXG1P

主要功能：
- ICMP/TCP/UDP/HTTP 多协议网络检测
- 网络接口管理与 IP 配置快速查看
- 子网扫描、端口与服务发现
- LiveCharts 实时数据可视化曲线
- Fluent 风格现代化界面
- 跨平台支持 Windows、macOS、Linux

安装方式：
- Windows：winget 安装
- Linux/macOS：一键安装脚本直接部署

[Tom Dörr @tom_doerr]

Curated list of self-hosted software

https://t.co/B6mcFk4vb2

[GitHub Projects Community @GithubProjects]

A unified interface for tracking everything from corporate jets to spy satellites.

[Huntress @HuntressLabs]

The Huntress SOC is observing the use of Nightmare-Eclipse's BlueHammer, RedSun, and UnDefend exploitation techniques.

Investigation by: @wbmmfq, @Curity4201, + @_JohnHammond 🧵👇

[H4x0r.DZ @h4x0r_dz]

Microsoft 🤡
https://t.co/WaMG61i140

[Hacking Articles @hackinarticles]

🚨 Lateral Movement: Enabling RDP Remotely 🚨

🔥 Telegram: https://t.co/upuP8k8ckB
✴ Twitter: https://t.co/Za7rYILz6E

Attackers can remotely enable Remote Desktop (RDP) on compromised systems to gain persistent access and move laterally across the network without needing physical interaction.

⚡ Attack Highlights
💻 Enable RDP via registry modification
🔐 Change fDenyTSConnections to allow access
🔥 Open firewall port 3389 for connectivity
🌐 Authenticate remotely using valid credentials

🛠️ Techniques & Methods
📡 Remote Registry manipulation
⚙️ PowerShell / CMD execution
🧩 Group Policy (GPO) abuse
🛡️ Firewall rule modification

💡 RDP uses port 3389 and requires proper firewall rules and permissions—once enabled, attackers can fully control the system remotely.

📖 Article: https://t.co/1gwXvfxPMu

#CyberSecurity #EthicalHacking #Pentesting #RedTeam #LateralMovement #RDP #ActiveDirectory

[Nicolas Krassas @Dinosn]

EDR/XDR Bypass and Detection Evasion Techniques: An Investigation of Advanced Evasion Strategies from a Red Team Perspective https://t.co/d70djDHku5

[tetsuo @tetsuoai]

Windows exploit development

https://t.co/t0bnaYIHIt

[Marko Denic @denicmarko]

SQL cheat sheet - Every JOIN explained:

[Tom Dörr @tom_doerr]

OSINT dashboard for Middle East conflict monitoring

https://t.co/NIyaKxj0T9

[How To Prompt @HowToPrompt__]

🚨 This tool removes LLM censorship with a single click.

It’s called Obliteratus. It identifies the exact weights that force a model to refuse and projects them out with a single click.

100% Open Source.

[Hacking Articles @hackinarticles]

Shadow Credentials Attack

🔥 Telegram: https://t.co/upuP8k7Ev3
✴ Twitter: https://t.co/Za7rYIL1h6

Shadow Credentials attack abuses Active Directory Certificate Services (AD CS) by injecting rogue public keys into the msDS-KeyCredentialLink attribute, allowing attackers to authenticate as a target user without knowing their password or NTLM hash.

📚 Topic Covered

📖 Introduction
🧠 Understanding Kerberos & PKINIT
🔑 msDS-KeyCredentialLink Attribute
⚙️ Prerequisites & Lab Setup
🔍 Hunting Weak Permissions (BloodHound)
💉 Injecting Shadow Credentials
📦 Tools: PyWhisker, Certipy, Impacket
🔐 PKINIT Authentication using Certificate
🎟 Obtaining TGT (Kerberos Ticket)
🪪 Extracting NTLM Hash (https://t.co/tezWy3iJ1e)
💻 NTLM Relay Attack (ntlmrelayx)
💣 Metasploit Shadow Credentials Module
🚀 Privilege Escalation & Persistence
🛡 Detection (Event ID 4768, 5136)
⚙️ Mitigation & Hardening Techniques

📖 Article:
https://t.co/wDdCbUhNF0

#CyberSecurity #ActiveDirectory #RedTeam #Pentesting #EthicalHacking #ADCS #Kerberos #InfoSec

[Co11ateral @co11ateral]

Bluehammer

Privilege escalation via Microsoft Defender. No patch yet

https://t.co/HY02ydWZEK

#0day #lpe

[NCV @nickvourd]

SkyFall-Pack v2.1 is out.
•Automated Cobalt Strike updates
•Cleaner Workerman config
•License support in Ansible for CS install
•Optimized OST-C2 VM provisioning
•Automated malleable profiles (custom HTTP headers)
•Fixed all deprecation warnings

https://t.co/WrXajYIhms

#c2 #automation #ansible #terraform

Feedback welcome.

[Hacking Articles @hackinarticles]

🚨 Lateral Movement: Pass-the-Certificate

🔥 Telegram: https://t.co/upuP8k8ckB
✴ Twitter: https://t.co/Za7rYILz6E

Pass-the-Certificate allows attackers to authenticate using stolen or forged certificates instead of passwords, enabling stealthy lateral movement across Active Directory environments.

⚡ Attack Highlights
🔐 Authenticate using certificate (PKINIT)
🎟️ Request Kerberos TGT without password
👤 Impersonate privileged users
🚀 Lateral movement & privilege escalation

💡 Unlike traditional attacks, this technique bypasses password-based defenses by abusing certificate-based authentication in AD CS environments.

📖 Article: https://t.co/eRAULKPfPi

#CyberSecurity #EthicalHacking #RedTeam #Pentesting #ActiveDirectory #ADCS #Kerberos #PrivilegeEscalation #InfoSec

[Artem I. Baranov @artem_i_baranov]

Introducing the Rootkit Techniques Matrix and updates to the Guide
https://t.co/iVjODJmZo3

[Panos Gkatziroulis 🦄 @ipurple]

InfraGuard - a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution https://t.co/SEH7s1qj2M