0xHacker @0xhackerr

Joined July 2024

Tweets

126
Followers

20
Following

536
Likes

601

Mike Takahashi @TakSec

2 days ago

Google Dork - Code Leaks 🔑 site:pastebin. com "example. com" site:jsfiddle. net "example. com" site:codebeautify. org "example. com" site:codepen. io "example. com" Check for code snippets, secrets, configs 👀

1 74 365 18K 402

Download Image

S3cur3Th1sSh1t @ShitSecure

3 days ago

You got access to vsphere and want to compromise the Windows hosts running on that ESX? 💡 1) Create a clone into a new template of the target VM 2) Download the VMDK file of the template from the storage 3) Parse it with Volumiser, extract SAM/SYSTEM/SECURITY (1/3)

8 103 480 35K 415

Download Image

Aurélien Chalot @Defte_

a week ago

Dumping LSASS is old school. If an admin is connected on a server you are local admin on, just create a scheduled task asking for a certificate on his behalf, get the cert, get its privs. All automatized in the schtask_as module for NetExec 🥳🥳🥳

5 179 849 38K 530

Download Image

VIEH Group @viehgroup

a week ago

3 25 143 5K 89

Download Image

Mike Takahashi @TakSec

2 weeks ago

Google Dork - APIs Endpoints ⚙️ site:example[.]com inurl:api | site:*/rest | site:*/v1 | site:*/v2 | site:*/v3 Find hidden APIs, try techniques 👨‍💻

4 219 3K 149K 3K

Download Image

Tom Dörr @tom_doerr

2 weeks ago

real-time cloning of any voice from a few seconds of audio

10 265 2K 83K 2K

Download Image

Hridoy Rehman @hridoyreh

a month ago

A very little-known SEO wins:

27 236 7K 769K 15K

Download Image

sapir federovsky @sapirxfed

a month ago

WOW!!! temp43487580.github.io/intune/bypass-… @TEMP43487580 such a good post!!! it is so well written, interesting research and great results! Thank you! 🤩

1 13 76 5K 43

Two Seven One Three @TwoSevenOneT

a month ago

#malware "clipup.exe" in System32 is very powerful. It can destroy the executable file of the EDR service 😉. Experimenting with overwriting the MsMpEng.exe file github: /2x7EQ13/CreateProcessAsPPL #redteam #BlueTeam

6 108 531 43K 402

Download Image

ACE Responder @ACEResponder

a month ago

How process hollowing works #ThreatHunting #DFIR

4 146 734 33K 571

Download Video

payloadartist @payloadartist

a month ago

"Localhost tracking" - How Meta bypassed Android sandboxing to track users browsing other websites with Meta's embedded pixel. Fun fact: 22% of the most visited websites across the world embed Meta's pixel. zeropartydata.es/p/localhost-tr…

0 8 19 2K 11

Download Image

0b1d1 @_0b1d1

a month ago

Search Engine for pen-testers and bug Hunters

12 319 2K 128K 2K

Download Image

Two Seven One Three @TwoSevenOneT

a month ago

#malware If you use a directory symlink path to create a process, Process Explorer will interpret the Path and Command Line of this process as the path containing the symlink, rather than the location of the executable file 🤔 #redteam #code

2 16 195 16K 110

Download Image

blackorbird @blackorbird

2 months ago

Attackers exploit Google Translate to hide their assets from security vendors. securelist.com/new-phishing-a…

2 5 14 3K 7

Download Image

Two Seven One Three @TwoSevenOneT

2 months ago

#redteam Hey, look! Windows with two "System32" folders.😲 Hey, keep looking at this! A process loads the same DLL twice and keeps both instances in memory.😲 #malware #blueteam

6 51 481 37K 207

Download Image

ZoomEye @zoomeye_team

2 months ago

x.com/i/article/1955…

0 2 9 4K 3

vx-underground @vxunderground

2 months ago

Ohhhh, sneaky masquerading trick found in the wild and noted by @JAMESWT_WT The Threat Actor replaces / with "ん", a Japanese character +2 cat pictures

51 251 4K 133K 625

Download Image

Matan Bahar @Bl4ckShad3

2 months ago

Windows Fonts Exploitation in 2025 - Bypassing UAC with Eudcedit Check out my recent research about eudcedit and see how it can by used to bypass UAC. medium.com/@matanb707/win… #UserAccountControl #UAC #Bypass #Windows

0 20 73 6K 46

Lloyd Davies @LloydLabs

2 months ago

github.com/LloydLabs/dele… now works on Windows 11 24H2! 🥳

3 39 173 15K 141

FOFA @fofabot

2 months ago

⚠️⚠️ CVE-2025-54982（CVSS 9.6）Zscaler's server-side SAML authentication mechanism allowed authentication abuse due to improper cryptographic signature verification. 🎯3.6M+Results are found on the en.fofa.info nearly year 🔗FOFA Link：en.fofa.info/result?qbase64… FOFA…