R∆V∆N∆N

i am also a gamer!! but a small difference, you love #Xbox to play! but i love #hackthebox to play ;-)

[R∆V∆N∆N @R4vanan]

@Olufela_Jr Same problem I faced a lot of time how you bypassed this?

[Bryson 🦄 @brysonbort]

Remote Desktop, Windows quietly saves fragments of what was on screen. Attackers can grab those fragments and reassemble them into readable screenshots using two free tools and about ten minutes. No special privileges required.

https://t.co/h56E4HVvoJ

[frostb1te @frostb1ten]

Fun fact! Just like the notepad Ctrl+Click RCE, Windows, Linux, and Mac terminals all support something similar.

printf "\x1b]8;;file:///C:/windows/system32/calc.exe\x07Click here\x1b]8;;\x1b\\\n"

Ctrl-Clicking will open Calc with no warning and we're able to make it remote by outputing to /dev/pts/#

Microsoft does not consider this a vulnerability

[Tom Dörr @tom_doerr]

Open source Burp Suite alternative for security research

https://t.co/ykiSfMtFkV

[JP Aumasson @veorq]

I factored the number RSA1024-1 using my home-built QPU stack; alarming sign that RSA1024 will soon be broken.

I'm choosing Full Disclosure, in the interest of transparency and Science advancement: https://t.co/UyImHud2n2
Non-ZK proof that the correct RSA1024 was used: https://t.co/eLdU0xpTMU

@yuvadm your move

[Dhruv @dhruvtwt_]

Why is no one talking about this?

@nvidia is offering around 80 AI models via hosted APIs absolutely for free.

You get access to MiniMax M2.7, GLM 5.1, Kimi 2.5, DeepSeek 3.2, GPT-OSS-120B, Sarvam-M etc.

This plugs straight into OpenClaude, OpenCode, Zed IDE, Hermes agent and even with Cursor IDE.

Setup:
– Grab API key: https://t.co/Wfdclm0hY2
– base_url = "https://t.co/VOGC10LmGP"
– api_key = "$NVIDIA_API_KEY"
– select model (e.g. minimaxai/minimax-m2.7)

If you’re building or experimenting, this is basically free inference.

Lock in and start building today anon.

Thank me later.

[DeepTechTR 🇹🇷 @DeepTechTR]

Claude-Red: 38 Saldırı Güvenlik Becerisiyle Claude'u Kırmızı Takım Operatörüne Dönüştürün. 🤖💀

SQLi, XSS, EDR atlatma, istismar geliştirme, OSINT ve daha fazlası için önceden oluşturulmuş SKILL .md modülleri — gerçek sald��rgan iş akışlarına benzer şekilde yapılandırılmıştır.

Yapay zeka güçlüdür, ancak kötü girdi = kötü çıktı. Beceriler yeteneği tanımlar.
https://t.co/mlVhe79Suw

[Chaofan Shou @Fried_rice]

Chinese LLMs can hack better than state-sponsored hackers with properly evolved harness -

Kimi K2.5 managed to find and exploit 6 vulnerabilities in browsers: a single page view or an extension install by victims equal full system hijack.

Check https://t.co/d0SZSf1KqF

[tak💀Yassan @schectman_hell]

いいツールだ。Azureペンテスト捗る。
https://t.co/IekT2aQ1yF

[Haidar @haider_kabibo]

So here is new local privilege escalation zero-day I discovered, not patched yet too :).
In simple terms, if you have a service like RDP that exposes an RPC server, there many system services running as SYSTEM connect to it as RPC clients. If that service is turned off (RDP is off by default), it seems that any other process in Windows can expose the same RPC server using the same endpoint.
Now all the RPC calls from that SYSTEM processes will come to this fake server and If the process that deployed the server has SeImpersonatePrivilege, it can escalate to SYSTEM by impersonate the RPC client.
In the white paper below, I describe five exploit paths you can abuse.
However it's architecture problem and maybe there are more. It's Not A Potato
https://t.co/DOfRFgYqI9

[R∆V∆N∆N @R4vanan]

@cybermunene i am trying to bypass the defender on exam but i failed

[SpecterOps @SpecterOps]

NTLMv1 is still out there. And now it’s easier than ever to break.

@skylerknecht walks through how Google’s rainbow tables make NT hash recovery practical, no third-party service required.

Check it out! ⤵️ https://t.co/AoC1NFBNK1

[TrustedSec @TrustedSec]

Who knew a really long string could make an Entra ID login disappear from the logs entirely? In our #blog, @nyxgeek breaks down how overflowing #Azure's sign-in logging mechanism allowed access tokens to be issued without a single log entry. Read it now! https://t.co/2joOibx3Ia

[Logisek @logisekict]

If you’re doing #cloud #security penetration testing and Azure is in scope, AZexec should already be in your toolkit!

AZexec brings a NetExec-style workflow to Azure & Entra ID, finally giving cloud pentesters the same speed, clarity, and offensive ergonomics we’re used to on-prem.

What makes it a must-have:

- Unauthenticated & guest-based enumeration (yes, the Azure “null session” problem is very real)
- Two-phase password spraying using Microsoft’s own APIs (stealthy, lockout-safe, MFA-aware)
- Deep Entra ID & ARM reconnaissance: users, roles, apps, Key Vaults, storage, networks, VMs
- Remote command execution across Azure VMs, Arc, MDE, and Intune
- Credential extraction & token abuse tailored for cloud-native environments
- NetExec-style output + reporting (CSV / JSON / HTML) for clean ops and clean reports

If you know CrackMapExec / NetExec, AZexec will feel instantly familiar, just adapted for how Azure actually works.

Cloud attacks deserve cloud-native tooling.

🔗 GitHub: https://t.co/pn75EvMlKO

#CloudSecurity #Azure #EntraID #Pentesting #RedTeam #OffensiveSecurity #AzureAD #NetExec #AZexec #Logisek

[PT SWARM @ptswarm]

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk @justbronzebee

Read the write-up: https://t.co/nNsMGF1hLK

[Jeff Security @jeffsecurity]

ZK Security Alpha: Found the repo.

100+ zero-knowledge proof vulnerabilities compiled.

This is required reading for every ZK audit you run.
https://t.co/ZpG3py4EYP

[raptor @0xdea]

Hey developers and vulnerability researchers!

I'm working on improving my C/C++ #Semgrep ruleset, and I've just published the v1.1.0 release: https://t.co/UQpsnQ8Grv

Please test it inside and out, open issues or submit PRs. Aiming for a major release sometime before spring.

[Gameel Ali 🤘 @MalGamy12]

#SetcodeRAT a custom Telegram‑stealing Trojan targeting Chinese‑speaking regions. While the malware itself is heavily customized for Telegram plugin injection

Using the query http.html_hash:-1514130953 to track the SetcodeRAT C2 cluster.

Report: https://t.co/gCqcpAE9Np

[Florian Hansemann @CyberWarship]

''Adventures in Dynamic Evasion''

#infosec #pentest #redteam #blueteam
https://t.co/HFIzrXFcSk

[ZoomEye @zoomeye_team]

🚨🚨CVE-2025-55182 (CVSS 10.0): RCE in React Server Components
A decoding bug in React Server Function payloads enables full unauthenticated RCE on vulnerable RSC backends.
🔥PoC: https://t.co/ZsTgkRqiHH

Search by vul.cve Filter👉vul.cve="CVE-2025-55182"
ZoomEye Dork👉http.body="react.production.min.js" || http.body="React.createElement(" || app="React Router" || app="React.js"
3.1M+ exposed React targets.
ZoomEye Link: https://t.co/evM9m7xxl0

Refer:
1. https://t.co/ypCp3ghocv
2. https://t.co/CbGYXnMWpR

#RCE #ZoomEye #cybersecurity #infosec #OSINT