Fernandet @fercryption

🐱 / 🏭🔌📡☢️ hacking / love 4 vulns / 🛑 team Joined November 2018

Tweets

473
Followers

418
Following

4K
Likes

27K

Het Mehta @hetmehtaa

8 months ago

Top 13 Public Phishing Tools in 2024 1. Phishing Frenzy: github.com/pentestgeek/ph… 2. Ghost Phisher: github.com/savio-code/gho… 3. King Phisher: github.com/rsmusllp/king-… 4. WiFiPhisher: github.com/wifiphisher/wi… 5. GoPhish: github.com/gophish/gophish 6. Zphisher: github.com/htr-tech/zphis……

6 215 776 37K 822

Matt Brown @nmatt0

8 months ago

Last night, I dug into the security of RedNote. RedNote is the Chinese social media app that people have flocked to because of the potential @tiktok_us ban. I found multiple vulns within a few hours.

6 33 146 12K 40

Download Image

Baptiste Robert @fs0c131y

8 months ago

The IP address of DrugHub, a well-known dark web drug marketplace, has been exposed. The website owner made a critical OPSEC blunder. It's OPSEC time!

Evil Rabbit Security Inc. @EvilRabbitSec

8 months ago

The IP address of DrugHub, a well-known dark web drug marketplace, has been exposed. The website owner made a critical OPSEC blunder. It's OPSEC time!

12 81 586 503K 510

17 268 3K 487K 2K

herrcore @herrcore

9 months ago

Chinese rj45 USB adapter malware??? Our line-by-line code analysis of the "malware" and a reasonable explanation for its strange delivery (part 1)

15 82 350 28K 189

Download Video

The largest update since long brought some interesting bugs which nobody talks about. Let me give few details about one: CVE-2025-21365. + Microsoft Office RCE vuln. + Word, PowerPoint and Outlook. + Logic bug. + Built-in process cont. + Built-in PV bypass. All in one. 😋😆🙃

7 32 91 9K 28

Download Video

thaddeus e. grugq @thegrugq

8 months ago

Not to alarm anyone, but I’ve noticed that Vapid Typhoon (also tracked as Wonky Willow, Protracted Panda, APT8888) has been using malware to deploy RJ45 adapters. If you discover an RJ45 connection to your devices, disconnect immediately! Known IOCs:

28 31 296 38K 33

Download Image

UwU Underground @uwu_underground

8 months ago

Yuki just got finished doing a red team assessment on hiring fake remote workers, essentially targeting the 1st party hiring process for several AI & crypto companies. She wanted to share some stats: 7 companies tested 6 did not flag the fake remote workers documents or…

18 111 619 48K 199

Baptiste Robert @fs0c131y

9 months ago

Worried about a TikTok ban? Americans are now flocking to Xiaohongshu (REDnote), another Chinese app. Spoiler: Yes, it tracks its users. Time to dive in! ⬇️

49 228 2K 199K 608

Download Image

solst/ICE of Astarte @IceSolst

9 months ago

To test an antivirus, upload the EICAR string: X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* You don’t have to use malware samples from vx-ug. EICAR was made for this purpose, so all AVs recognize it and will flag it.