noProblem @freesylex

Head of Time @World, maker, biker, boarder, IT, infosec, ethical security hacker Schweiz Joined December 2014

Tweets

459
Followers

69
Following

719
Likes

336

Two Seven One Three @TwoSevenOneT

2 weeks ago

#malware "clipup.exe" in System32 is very powerful. It can destroy the executable file of the EDR service 😉. Experimenting with overwriting the MsMpEng.exe file github: /2x7EQ13/CreateProcessAsPPL #redteam #BlueTeam

5 105 529 42K 399

Download Image

Steven Lim @0x534c

3 weeks ago

Blob Threat Hunting Just Got Interesting Just spotted the CloudStorageAggregatedEvents table in Microsoft Defender XDR’s advanced hunting schema! 🎯 This new addition provides visibility into storage activity and related events—perfect for digging into potential blob storage…

0 26 72 5K 47

Download Image

noProblem @freesylex

3 weeks ago

In modern Active Directory environments, you don’t need a zero-day – Windows’ default IPv6 auto-configuration can be abused. An attacker spins up mitm6 as a rogue DHCPv6/DNS server, hijacks responses, and redirects DNS traffic. Using ntlmrelayx, they fake WPAD requests, relay…

0 0 0 36 0

Roger @r0rt1z2

3 weeks ago

Since Nothing decided to ignore my report, I decided to release it publicly. You can find the source code and full details here: github.com/R0rt1z2/fenrir It only supports the Nothing Phone 2a for now but it should apply to more MediaTek devices from what I've seen so far.

1 51 199 15K 85

noProblem @freesylex

3 weeks ago

Nice Browser social engineering Trick: youtu.be/Xhwgrrs1rw4?si…

0 0 0 14 0

noProblem @freesylex

4 weeks ago

Have you already tried Gandalf? Join 1M+ players and try to hack AI defenses! gandalf.lakera.ai gandalf.lakera.ai

0 0 0 7 0

Steven Lim @0x534c

4 weeks ago

𝗭𝗲𝗿𝗼 𝗖𝗹𝗶𝗰𝗸, 𝗢𝗻𝗲 𝗡𝗧𝗟𝗠: 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗣𝗮𝘁𝗰𝗵 𝗕𝘆𝗽𝗮𝘀𝘀 A newly discovered zero-click vulnerability, CVE-2025-50154, bypasses a Microsoft patch, allowing attackers to steal NTLM hashes without user interaction. Microsoft has issued patch…

7 87 302 39K 262

Download Image

Nicolas Krassas @Dinosn

4 weeks ago

Fortinet SSL VPNs Hit by Global Brute-Force Wave Before Attackers Shift to FortiManager thehackernews.com/2025/08/fortin…

0 8 17 3K 4

Dark Web Informer @DarkWebInformer

4 weeks ago

🚨Alleged Sale of Fortinet 0-Day RCE Exploit • Industry: N/A • Threat Actor: WISDOM • Network: Clearnet, Dark Web • Price: 0.5 BTC • Details: A threat actor claims to be selling a 0-day remote code execution (RCE) exploit affecting FortiOS VPN versions 7.4 to 7.6. The…

4 53 189 41K 67

Download Image

JAMESWT @JAMESWT_WT

4 weeks ago

#booking #fakecaptcha ⛔️account.]booking.]comんdetailんrestric-access.www-account-booking.]com/en/ 👇 ⛔️www-account-booking.]com/c.php?a=0 👇 updatessoftware.b-cdn[.net/john/pr/04.08/IYTDTGTF.msi ⚠️⚠️ "ん" ⚠️⚠️ Samples bazaar.abuse.ch/browse/tag/www… AnyRun app.any.run/tasks/35618d39…

7 36 124 29K 50

Download Image

I am Jakoby @I_Am_Jakoby

a month ago

I finished early and added another tool to my website! ➡️powershellforhackers.com/tools/psinpic/ This tool allows you to hide any payload in the pixels of an image and then generates a short code snippet for you to extract and execute it This means you can generate an obfuscated reverse shell…

19 84 428 24K 348

Download Image

noProblem @freesylex

2 months ago

untested SharePoint WebPart Injection Exploit Tool github.com/soltanali0/CVE…

0 0 1 123 0

Alex Neff @al3x_n3ff

2 months ago

Dumping the NTDS.dit from disk - A new NetExec module💾 Isn't it super annoying when AV blocks your access to the SAM/SYSTEM hives? The new "ntds_dump_raw" module made by @0xcc00 parses the disk image directly, allowing you to extract the NTDS.dit or SAM database🚀

13 169 675 59K 364

Download Image

Thomas Roccia 🤘 @fr0gger_

2 months ago

💥 CERT-UA published a report on a malware powered by an LLM. The malware uses Qwen 2.5-Coder-32B-Instruct via the HuggingFace API to generate and execute commands on infected systems. It is a Python script that embeds prompts to dynamically craft Windows reconnaissance…

11 88 271 35K 213

Download Image

Stephan Berger @malmoeb

2 months ago

Ever heard of shellbags? Like in the example here: My Computer -> ? -> Users -> <compromised_user> -> ADRecon-Report-20250225235831 Shellbags are a subset of data found within UsrClass.dat and sometimes in the NTUSER.DAT hive. They are used by Windows to remember folder view…

0 7 47 3K 21

watchTowr @watchtowrcyber

2 months ago

Are we bleeding out? Enjoy our analysis of CitrixBleed 2, aka CVE-2025-5777 - the "new" Citrix NetScaler Memory Leak vulnerability. We've been using this mechanism to identify vulnerable systems, and hope it helps the teams that need it.. enjoy! labs.watchtowr.com/how-much-more-…

6 79 209 22K 67

Marci Ujlaki @UjlakiMarci

2 months ago

oh no 🟥 CVE-2025-32463, CVSS: 9.3 (#Critical) #Sudo version 1.9.14 to 1.9.17 #Vulnerability allows local users to gain root access via the --chroot option due to improper handling of /etc/nsswitch.conf. #CyberSecurity #CVE #PrivilegeEscalation openwall.com/lists/oss-secu…

8 243 712 60K 411

Download Image

Mobile Hacker @androidmalware2

3 months ago

FileFix – New Alternative to #ClickFix Attacks discovered by @mrd0x mobile-hacker.com/2025/06/24/int…

0 14 82 6K 41

Download Video

Netlas.io @Netlas_io

4 months ago

CVE-2024-57273, -54779, 54780: Multiple vulnerabilities in pfSense, 5.4 - 8.8 rating❗️ Three disclosed vulnerabilities include XSS, Command Injection and XML Injection. Search at Netlas.io: 👉 Link: nt.ls/DOmg1 #cybersecurity #vulnerability_map