raccoon9

Infosec(/ω＼)

[Vivek | Cybersecurity @VivekIntel]

🧅 TorBot – Open-Source Intelligence Crawler for Tor and Dark Web Investigations

TorBot is an open-source intelligence (OSINT) tool designed to assist security researchers, threat intelligence analysts, digital investigators, and law enforcement professionals in exploring and analyzing Tor hidden services. Built in Python, it automates the discovery and crawling of .onion websites while collecting page titles, descriptions, link relationships, and structural information from accessible Tor services. TorBot supports configurable crawl depth, custom domain crawling, live host verification, HTML retrieval, JSON export, and multiple visualization formats—including tree, table, and graph-based link structures—to help investigators better understand hidden service ecosystems. It can operate through the Tor SOCKS5 proxy for anonymous access or perform standard HTTP crawling for surface web targets when required. Designed as a research-oriented intelligence collection platform rather than an exploitation tool, TorBot provides an efficient way to document, organize, and visualize publicly accessible information across Tor and conventional websites, making it valuable for darknet research, threat hunting, cybercrime investigations, malware infrastructure analysis, and academic security research.

🔗 https://t.co/I0S9zSQQvu

#OSINT #DarkWeb #ThreatIntelligence #CyberSecurity #Tor #ThreatHunting #DigitalForensics #OpenSource #CyberInvestigation #SecurityResearch

[Clandestine @akaclandestine]

https://t.co/liIV3qsa9E

[7h3h4ckv157 @7h3h4ckv157]

OSED Notes (Offensive Security Exploit Developer)

Resource: https://t.co/CZ3Zvz2aMv

[老杨啊 @yhslgg]

https://t.co/yud2z8fiNM

[Smukx.E @5mukx]

Rusty Rootkit - Windows Kernel Rookit in Rust

Blog:- https://t.co/3bvJdDhjP2

[7h3h4ckv157 @7h3h4ckv157]

Kernel-Exploit-Dojo 📍

Curated archive of 100+ Linux kernel exploitation CTF challenges, organized by bug class, exploitation primitive, final technique, difficulty, and solve count.

The goal is to organize practical kernel pwn techniques such as UAF, heap spraying, pipe_buffer abuse, msg_msg, modprobe_path overwrite, and cred overwrite.

Resource: https://t.co/h1F2CD70Oc

[Florian Hansemann @CyberWarship]

''The Gold Mine Red Teamers Never Touch''

#infosec #pentest #redteam #blueteam
https://t.co/ZWlnaGUhNk

[Smukx.E @5mukx]

The (Anti-)EDR Compendium

TL;DR: EDR functionality and bypasses, with focus on undetected shellcode loader.

Blog:- https://t.co/hwKLCTO1TR

[Abhishek🌱 @Abhishekcur]

This article is literally wow.

i read it 2 years ago, and coming back to it today, it still feels new.

few tutorials teach computers in a way that permanently changes how you think. this is one of them.

If you've never built a VM before, you're missing one of the biggest "aha" moments in computer science.

[dreadnode @dreadnode]

We red teamed a frontier model in 3 hours. Zero code.

674 attacks, 573 findings, ~85% success rate. The agent picked the attacks, we just described the objective.

📄 Paper + blog: https://t.co/sNKXNr3PSc

We're going live in <4 hours, walking through the research and how we're redefining AI red teaming in the agentic era.

Tune in at 11 AM PT / 2 PM ET, right here on X!

[Nicolas Krassas @Dinosn]

Recent CVE PoC &amp; reproduction scripts. Focused on high-severity vulnerabilities across Linux kernel, Windows, macOS and more. https://t.co/2CAcx2ojyE

[恒星 @vintcessun]

BaleVPN 解决的痛点很具体：伊朗的 DPI 会放行语音通话，但会掐掉 WebRTC 数据通道。所以它直接往 Opus RTP 里塞 IP 包，不走 SCTP。架构上 webrtc-rs 自建 RTP 写入，无编码器，无带宽限制。工程牺牲：DTLS 加密到 SFU 终止，SOCKS5 的 QUIC 层用自签名证书。但“伪装成电话”这个目标达成得很干净。
https://t.co/CQVglYbggS

[Nicolas Krassas @Dinosn]

Interesting- What LLM vuln research looks like https://t.co/0dw73MRYUL

[cr3ghost @cr3ghost]

Most people learn security research by reading finished writeups. This one shows the actual process.

The messy, organic, step-by-step reality of reversing an unknown Windows mitigation from scratch. WinDbg. IDA. Hex Rays. Guard page violations. Trap flags. Zero prior knowledge of the target.

If you want to learn how to actually approach unknown Windows internals, start here.

https://t.co/Xq8xbSnG75

Author: @yarden_shafir

#ReverseEngineering #WindowsInternals #InfoSec

[HAHWUL @hahwul]

Oh wow… this is actually insane 😵‍💫

https://t.co/iCiYD05eAW

[Calif @calif_io]

Introducing HTTP/2 Bomb: a remote DoS in nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora. A single client pins 32GB of server memory in 10s. Found by Codex.

Blog post: https://t.co/WO9MeExoun

PoCs: https://t.co/NpVgEHBHPl

[taka @takaradariku]

and the whole reason i even looked at this in the first place was because last month i realized msi vibecoded the drivers for their $5090 usd gpu (horribly, might i add!), and left a whole bunch of internal chat history exports in the asar bundle

[kushalpsv @kushal_psv]

@ajaykgp @ChShersh I think it might be something similar to this one
https://t.co/PgN3Trz77u
there is no need to think about whether it should mid + 1 or -1 etc

[Het Mehta @hetmehtaa]

Best malware analysis blogs on the internet:

Malware Unicorn → https://t.co/ctP9ISZeC5
Hexacorn → https://t.co/cUtJxUUaGV
Didier Stevens → https://t.co/2swSJFTQrR
DFIR Report → https://t.co/7IjW1sjoRU
Malware Traffic Analysis → https://t.co/Cptin440m2
MalwareTech → https://t.co/H8uYA8FFzy
Elastic Security Labs → https://t.co/VtBvJNHn6z

[0xor0ne @0xor0ne]

List of resources for getting started with IoT/embedded devices vulnerability research (@IamAlch3mist)

https://t.co/SOE3QIh7f7

#infosec