Programm.r

Software Developer | DevOps Engineer | Cyber Security Engineer.

[Hacking Articles @hackinarticles]

SMB Password Cracking

🔥 Telegram: https://t.co/upuP8k8ckB
✴ Twitter: https://t.co/Za7rYILz6E

Open SMB services can expose systems to credential attacks. Weak passwords allow attackers to gain initial access and pivot deeper into the network.

⚡ Common Tools
🛠️ Metasploit (smb_login)
⚡ NetExec (CrackMapExec successor)
🔥 Hydra (fast brute-force tool)
📡 Patator & BruteSpray (automation)

💡 SMB authentication often relies on weak or reused credentials, making it a prime target for brute-force and dictionary attacks.

📖 Article: https://t.co/qTZWzBDN2a

#CyberSecurity #EthicalHacking #RedTeam #Pentesting #SMB #PasswordCracking #InfoSec

[Aircorridor @_aircorridor]

Get Started with QUIC and HTTP/3

We are all familiar with HTTP/1 and HTTP/2. But soon the web will be on HTTP/3, and we need to stay ahead of these changes.

So, we prepared an article that describes what HTTP/3 is and what it looks like:
https://t.co/KBf17Z6D8Q

[Hacking Articles @hackinarticles]

🛡️ Nmap for Pentester: Vulnerability Scan

🔥 Telegram: https://t.co/upuP8k8ckB

Nmap can perform basic vulnerability detection using the Nmap Scripting Engine (NSE). These scripts help pentesters identify known vulnerabilities in services running on a target system.

⚡ Vulnerability checks covered:

💥 MS17-010 (EternalBlue)
📁 vsFTPd 2.3.4 Backdoor
🔐 SSL POODLE Vulnerability
☕ Java RMI Classloader Vulnerability
🌐 HTTP Slowloris Vulnerability
🔓 SSL CCS Injection
🧠 Nmap Vulners Script Integration

🎯 NSE scripts allow security testers to automate vulnerability discovery and quickly identify exploitable services during reconnaissance.

📖 Read the full guide:
https://t.co/JOprzUBDpB

#CyberSecurity #Pentesting #Nmap #VulnerabilityScanning #RedTeam #InfoSec #HackingArticles 🚀

[Vincent Hus @vincent_hus]

Looking for open-source contributors. Apache 2.0.

[Smukx.E @5mukx]

Driver Reverse Engineering 101 - Unpacking a VMProtected Kernel Driver

https://t.co/lr5TseXGA1

[FreedomHack󱢏✊🏼 @freedomhack101]

Hackers have been found using code camouflage techniques, hiding malware code within PNG image files to release malware.

[Tom Dörr @tom_doerr]

IDA Pro plugin for LLM-powered reverse engineering

https://t.co/uBvk4nOJS8

[0xMarioNawfal @RoundtableSpace]

SOMEONE BUILT LIVE VIDEO CHAT INSIDE THE TERMINAL.

IT RENDERS YOUR FACE IN ASCII IN REAL TIME.

THE TERMINAL HAS OFFICIALLY LEFT THE BUILDING.

[Tom Dörr @tom_doerr]

Agent skills for solving CTF challenges

https://t.co/t5f2Soyrru

[Oliver Prompts @oliviscusAI]

🚨 BREAKING: You can now give your Claude Code infinite memory for free.

Claude-Mem is a free open-source plugin to persist memory across Claude sessions.

- Up to 95% fewer tokens per session.
- 20× more tool calls before context limits.

100% open-source.

[0xMarioNawfal @RoundtableSpace]

CYBERSECURITY IS ABOUT TO CHANGE FAST.

Someone just open sourced an autonomous AI red team made of multiple agents that coordinate with almost no human input.

[Hackademy @hack_ademy]

After gaining access to a system, attackers often begin by identifying which users are currently logged in. Active sessions represent authenticated identities that the system already trusts. If a privileged account is active, the attacker may be able to interact with that session or harvest credentials from its processes.

In the terminal below, the attacker first confirms their own identity and then enumerates logged-in users using commands like query user and qwinsta. These commands reveal both console and remote desktop sessions currently active on the machine. By identifying which users are logged in, the attacker can determine whether administrators or high-value accounts are present.

Next, the attacker inspects running processes tied to those sessions and lists network sessions established by the system. This helps confirm which accounts are actively interacting with the machine. Security logs showing recent logon events provide additional confirmation of authentication activity. Instead of attacking passwords directly, the attacker is mapping existing sessions that may already grant access to trusted identities.

[AISecHub @AISecHub]

Claude Bug Bounty Hunter - https://t.co/MYM35cC7Ss

Claude Code skill that turns Claude into your AI bug bounty co-pilot. Point it at any target and Claude maps the attack surface, runs your scanners, validates findings, and writes the HackerOne or Bugcrowd report — all from a single conversation.

#bugbounty #bugbountytips #ethicalhacking #claudecode #cybersecurity #hacking #infosec #pentest #hackerone #bugcrowd #opensource

[MalDev Academy @MalDevAcademy]

QRSteganography is our newly released public tool, which can be used to achieve steganography using QR codes, where arbitrary data is encoded into one or more QR code PNGs.

https://t.co/Mj4OO4xjZm

[Hacking Articles @hackinarticles]

🚨 Active Directory Pentesting with NetExec

🔥 Telegram: https://t.co/upuP8k8ckB

NetExec (NXC) is a powerful tool for Active Directory enumeration and exploitation, helping pentesters discover users, validate credentials, perform Kerberos attacks, and identify privilege escalation paths in AD environments.

⚡ Key Techniques
👤 User & Account Enumeration – Discover domain users and active accounts
🔑 Credential Testing – Validate passwords or NTLM hashes
🎟 Kerberoasting / ASREPRoasting – Extract Kerberos hashes for offline cracking
🧠 BloodHound Collection – Map attack paths in Active Directory
🛡 Privilege Enumeration – Identify admin accounts, group memberships, and misconfigurations

📖 Article: https://t.co/2LQx5ocKoa

#CyberSecurity #ActiveDirectory #Pentesting #NetExec #RedTeam #EthicalHacking

[Ministry of Info, Comms & The Digital Economy KE @MoICTKenya]

𝐃𝐢𝐯𝐞 𝐢𝐧𝐭𝐨 𝐂𝐲𝐛𝐞𝐫𝐆𝐚𝐦𝐞 𝐊𝐞𝐧𝐲𝐚 𝟐𝟎𝟐𝟔 𝐄𝐝𝐢𝐭𝐢𝐨𝐧!
Test your skills under the theme 𝐒𝐞𝐜𝐮𝐫𝐢𝐧𝐠 𝐊𝐞𝐧𝐲𝐚'𝐬 𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐅𝐮𝐭𝐮𝐫𝐞 across forensics, offensive security, OSINT, and more.

[Tom Dörr @tom_doerr]

IDE for reverse-engineering Android packages

https://t.co/QBpdckhLuZ