Chema García

Threat Researcher at Palo Alto Networks @Unit42_intel | @THIBER_ESP cofounder | Tweets are my own

[Nicolas Krassas @Dinosn]

Fully autonomous AI hacker to find actual exploits in your web apps. Shannon has achieved a 96.15% success rate on the hint-free, source-aware XBOW Benchmark.

https://t.co/EQgOtnhCyk

[匚ㄚ乃乇尺ㄖᐯ乇尺ㄥㄖ卂ᗪ @Cyber0verload]

Hunting #APT28 infra 🎯 like @MichalKoczwara style
highlighted by @billyleonard

Actor use XSS for redirect victim to phishing site, with login form, which push POST request to compromised EdgeOS routers as an intermediate infrastructure with deployed the server.

1/🧵

[HackerRalf @hacker_ralf]

AdaptixC2 v0.8 is out!

https://t.co/mL8AAS7w4c

* AxScript: new events and functions
* Added Targets Manager
* Updated tunnels

Full update details: https://t.co/XkVlgaXW6W

[Saber @saber__rt]

Phrack #72 release reveals TTPs, backdoors and targets of a Chinese/North Korean state actor mimicking Kimsuky

A copy of his workstation data was done and is now available for all researchers to analyse!

Article: https://t.co/iCI70eUbuQ
Data dump: https://t.co/vDRLKk8DKD

[Unit 42 @Unit42_Intel]

We are observing active global exploitation of critical Microsoft SharePoint vulns CVE-2025-49704 and CVE-2025-49706.

Orgs worldwide are being targeted. Patch immediately. The exploits are real, in-the-wild and pose a serious threat.

IoCs we've seen: https://t.co/Yp3KaWRtCz

[Unit 42 @Unit42_Intel]

Initial access broker TGR-CRI-0045 is attributed with medium confidence to Gold Melody. One technique in a recent campaign is to employ https://t.co/ZxVdlzDRjU View State deserialization for in-memory payload execution. We deconstruct the tooling and more: https://t.co/XskibEtEIh

[Unit 42 @Unit42_Intel]

In-memory IIS tradecraft significantly hinders detection — learn what you can do. This method was used in a campaign by TGR-CRI-0045, which targeted industries from financial services to transportation. Read the full campaign details: https://t.co/XskibEtEIh

[Matt Dancho (Business Science) @mdancho84]

Principal Component Analysis (PCA) is the gold standard in dimensionality reduction.

But PCA is hard to understand for beginners.

Let me destroy your confusion:

[RedDrip Team @RedDrip7]

At the recently held CYDES 2025, we disclosed #APT group #NightEagle (APT-Q-95).
This threat group has been targeting high-tech industries for a long time, including chip semiconductors, AI/GPT and other fields.
Actors used an unknown Exchange exploit chain.
PPT: #IOCs #APT

[maker.io @MakerIO]

A step-by-step Guide to building a low-cost drone using ESP32

Build here: https://t.co/1dpoQvUtRA

#ESP32 #drone

[GuidedHacking @GuidedHacking]

📚 Learn How To Use Angr
🆓 Open-Source IDA Pro Alternative
🧠 Specializes in symbolic execution
👉 https://t.co/4SHgU1lweP

[vx-underground @vxunderground]

How tf did the FBI / NSA get a picture of North Korean IT workers working

[Florian Hansemann @CyberWarship]

''Rust for Malware Development''

#infosec #pentest #redteam #blueteam
https://t.co/1HB8IjnmSg

[X @TheMsterDoctor1]

📷 Due to overwhelming demand from my last post… I’ve decided to publicly drop the OSCP 2025 Linux Privilege Escalation Notes for everyone! 📷📷

📷 These notes cover advanced privilege escalation techniques tailored for real-world pentesting and OSCP exam prep — from enumeration to exploitation.

📷 Grab them here, no DM required:
📷 https://t.co/9Wtqt8clmL

📷 If you found this valuable:
📷 Repost to help others
📷 Like if you’re studying OSCP or hacking
📷 Comment your favorite trick or ask a question

I see you all — and I appreciate the insane support. Let’s keep leveling up together. 📷📷
#OSCP #PrivilegeEscalation #CyberSecurity #Hacking #BugBounty #Linux

[Smukx.E @5mukx]

CrowdStrike Researchers Investigate the Threat of Patchless AMSI Bypass Attacks

https://t.co/I9FWvSHJwq

[Paul Couvert @itsPaulAi]

Finally! Google has just released Gemini CLI an AI agent that brings Gemini directly into your terminal

→ 1,000 free requests PER DAY
→ Open source

You can use it as a coding agent, automate tasks, use MCPs, generate videos & images, etc.

Steps to install and use it:

[elhacker.NET @elhackernet]

Anthropic ha publicado una guía gratuita de prompt engineering que convierte técnicas avanzadas de IA generativa en habilidades que cualquiera puede aprender
https://t.co/D993OaEz0m

[Smukx.E @5mukx]

Rust for malware development

https://t.co/G9WWMuhLaO

TL;DR: This blog explores the advantages of using Rust over C for malware development, highlighting Rust's evasive characteristics and challenges for reverse engineering.

[Hacking Articles @hackinarticles]

Active Directory Penetration Testing Using Impacket

https://t.co/LiVydXU8vP

🔥 Telegram: https://t.co/upuP8k7Ev3

#infosec #cybersecurity #cybersecuritytips #microsoft #redteam #informationsecurity #CyberSec #ai #offensivesecurity #infosecurity #cyberattacks #security #oscp #cybersecurityawareness #bugbounty #bugbountytips

[Smukx.E @5mukx]

Playbook Hunting Chinese APT
an Chinese APT TTPs and LOLBAS Operations

https://t.co/zuNeEK3lmX