~/

[Nicolas Krassas @Dinosn]

Hollow - a shellcode loader generator. You give it a raw shellcode binary and a profile, and it spits out a compiled Windows PE loader with your shellcode encrypted inside. https://t.co/WLvQGyd9Dx

[Init1Security @init1security]

Init1Security will soon be offering Red Team training take a look at our initial access module with our phishing scenario, we will be training fully with Havoc C2 a community favorite anyone can sign up for our newsletter for future announcements.
https://t.co/qOgUyzp2QA

[Panos Gkatziroulis 🦄 @ipurple]

Everything can be a C2 including Spotify playlists!😂 https://t.co/pwS08qEd1m

[Toffy @toffyrak]

GPOHound v1.1.0 is out! 🎉

This release adds the "sysvol", "ldap", and "parse" modules, along with several bug fixes and improvements.

For more details: https://t.co/BbLSzdinWG

[Daily CyberSecurity @the_yellow_fall]

Researcher publicly disclosed an NTLM reflection bypass, CVE-2026-24294, with PoC exploit code. It gives SYSTEM on Windows Server 2025. Patch now.

#NTLM #NTLMReflection #CVE202624294 #Windows #PrivEsc #Cybersecurity #Infosec
https://t.co/upKmDJBUF2

[Nicolas Krassas @Dinosn]

0liverflow/cve2poc: CVE2PoC is a tool that helps penetration testers, bug hunters, and security researchers quickly find public exploits or PoCs related to a CVE ID https://t.co/ggJxFLaMae

[jp / kw0 @JoshuaProvoste]

🚨 Django RCE - Remote Code Execution

https://t.co/8Bi4AcXoVU #BugBounty

[Nicolas Krassas @Dinosn]

necr00/credential-hunting: Credential Hunting - Windows and Linux Scripts https://t.co/Ik9tMn6M9m

[FOFA @fofabot]

⚠️⚠️ CVE-2026-20896 (CVSS 9.8): Gitea Docker images default REVERSE_PROXY_TRUSTED_PROXIES=* — with reverse-proxy auth on, any IP can impersonate any user via X-WEBAUTH-USER.
🔗FOFA Link: https://t.co/w2rhVF9HFa
🎯244.5K+ Results are found on https://t.co/HSOBZfCA2r in the past year.
FOFA Query: app="Gitea"
🔖Refer: https://t.co/64ZP4hKcuj
#OSINT #FOFA #CyberSecurity #Vulnerability

[bl4ck4rch @bl4ckarch]

I was playing around AMSI and came up with some interesting bypass techniques.
6 techniques validated with a live reverse shell on a fully patched Windows 11, Defender on. https://t.co/q2Ro0wS7tx
#AMSI #RedTeam #WindowsSecurity #ReverseEngineering #Pentest

[Densel @luckyhacker43]

Unauthenticated RCE in Apache Tomcat (CVE-2026-34486) 🤯🔥

🔗 https://t.co/JR2KeraObE

🔗 Join team today 👉https://t.co/FeMz53HSN0

[Cyber Advising @cyber_advising]

CVE-2026-54806: unauthenticated PHP Object Injection vulnerability in the WP Activity Log WordPress plugin (wp-security-audit-log)...

PoC
https://t.co/ksW4fq1NsQ

[🕳 @sekurlsa_pw]

scp.exe -S "cmd /c c:\windows\system32\calc.exe" . localhost:.

Or instead of -S use
-o ProxyCommand=

[Patchi/fyi @PatchRequest]

EDR has the attention span of a toddler. If it doesn't see the exact pattern it was trained on (sleep, allocate, inject, sleep), it just moves on. Anything else between your calls and it forgets you exist. So I built a library that does exactly that

https://t.co/pZWlTt863l

[dbugs @ptdbugs]

Sale of a 0day exploit for macOS

For informational purposes only.

Vulnerability type: LPE
Privileges obtained: root
Price: $120K

#dbugs_darkweb

[BRute Logic @BRuteLogic]

JWT Auth Bypass TestBed

https://t.co/qoYUYTxduT

Test your skills: 18 main tests with variations.

A proprietary tool with 40+ techniques for Brute One will be available this week to spot all these cases in the wild in a matter of seconds.

https://t.co/ThMs09G3Hp

[Hackviser @hackviserr]

Want to find active backdoor connections on your Linux system? 🚨

Here’s a one-liner to detect reverse shells and suspicious outbound connections:

netstat -antp | awk ‘$6 == “ESTABLISHED” && $5 !~ /:22$|:80$|:443$/ {print $5, $7}’ | sort -u

[kim kulling @KimKulling]

Love this page:

[Mohnad Alshobaily @Mohnad]

أداة ParamStriker تستحق التجربه وننتظر ارائكم فيها

بس عطها Raw json واستمتع بالنتايج