noProblem @freesylex

Head of Time @World, maker, biker, boarder, IT, infosec, ethical security hacker Schweiz Joined December 2014

Tweets

462
Followers

73
Following

734
Likes

345

Dirk-jan @_dirkjan

2 weeks ago

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-glob…

145 897 3K 436K 1K

Florian Roth ⚡️ @cyb3rops

3 weeks ago

I looked at the inserted JavaScript payload. It’s not novel or sophisticated. The obfuscation was done with a known tool – likely obfuscator.io or something similar. Used in low-effort malware for years. Typical structure: - Hex-encoded strings with a central _0x…

Florian Roth ⚡️ @cyb3rops

3 weeks ago

5 89 403 112K 163

Download Image

7 74 351 44K 156

Two Seven One Three @TwoSevenOneT

a month ago

#malware "clipup.exe" in System32 is very powerful. It can destroy the executable file of the EDR service 😉. Experimenting with overwriting the MsMpEng.exe file github: /2x7EQ13/CreateProcessAsPPL #redteam #BlueTeam

6 108 531 43K 402

Download Image

Steven Lim @0x534c

a month ago

Blob Threat Hunting Just Got Interesting Just spotted the CloudStorageAggregatedEvents table in Microsoft Defender XDR’s advanced hunting schema! 🎯 This new addition provides visibility into storage activity and related events—perfect for digging into potential blob storage…

0 27 73 5K 48

Download Image

noProblem @freesylex

a month ago

In modern Active Directory environments, you don’t need a zero-day – Windows’ default IPv6 auto-configuration can be abused. An attacker spins up mitm6 as a rogue DHCPv6/DNS server, hijacks responses, and redirects DNS traffic. Using ntlmrelayx, they fake WPAD requests, relay…

0 0 0 40 0

Roger @r0rt1z2

a month ago

Since Nothing decided to ignore my report, I decided to release it publicly. You can find the source code and full details here: github.com/R0rt1z2/fenrir It only supports the Nothing Phone 2a for now but it should apply to more MediaTek devices from what I've seen so far.

2 50 202 16K 87

noProblem @freesylex

a month ago

Nice Browser social engineering Trick: youtu.be/Xhwgrrs1rw4?si…

0 0 0 18 0

noProblem @freesylex

2 months ago

Have you already tried Gandalf? Join 1M+ players and try to hack AI defenses! gandalf.lakera.ai gandalf.lakera.ai

0 0 0 10 0

Steven Lim @0x534c

2 months ago

𝗭𝗲𝗿𝗼 𝗖𝗹𝗶𝗰𝗸, 𝗢𝗻𝗲 𝗡𝗧𝗟𝗠: 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗣𝗮𝘁𝗰𝗵 𝗕𝘆𝗽𝗮𝘀𝘀 A newly discovered zero-click vulnerability, CVE-2025-50154, bypasses a Microsoft patch, allowing attackers to steal NTLM hashes without user interaction. Microsoft has issued patch…

7 88 303 39K 262

Download Image

Nicolas Krassas @Dinosn

2 months ago

Fortinet SSL VPNs Hit by Global Brute-Force Wave Before Attackers Shift to FortiManager thehackernews.com/2025/08/fortin…

0 8 17 3K 4

Dark Web Informer @DarkWebInformer

2 months ago

🚨Alleged Sale of Fortinet 0-Day RCE Exploit • Industry: N/A • Threat Actor: WISDOM • Network: Clearnet, Dark Web • Price: 0.5 BTC • Details: A threat actor claims to be selling a 0-day remote code execution (RCE) exploit affecting FortiOS VPN versions 7.4 to 7.6. The…

4 52 188 42K 68

Download Image

JAMESWT @JAMESWT_WT

2 months ago

#booking #fakecaptcha ⛔️account.]booking.]comんdetailんrestric-access.www-account-booking.]com/en/ 👇 ⛔️www-account-booking.]com/c.php?a=0 👇 updatessoftware.b-cdn[.net/john/pr/04.08/IYTDTGTF.msi ⚠️⚠️ "ん" ⚠️⚠️ Samples bazaar.abuse.ch/browse/tag/www… AnyRun app.any.run/tasks/35618d39…

7 37 125 30K 51

Download Image

I am Jakoby @I_Am_Jakoby

2 months ago

I finished early and added another tool to my website! ➡️powershellforhackers.com/tools/psinpic/ This tool allows you to hide any payload in the pixels of an image and then generates a short code snippet for you to extract and execute it This means you can generate an obfuscated reverse shell…

19 85 434 24K 348

Download Image

noProblem @freesylex

2 months ago

untested SharePoint WebPart Injection Exploit Tool github.com/soltanali0/CVE…

0 0 1 125 0

Alex Neff @al3x_n3ff

2 months ago

Dumping the NTDS.dit from disk - A new NetExec module💾 Isn't it super annoying when AV blocks your access to the SAM/SYSTEM hives? The new "ntds_dump_raw" module made by @0xcc00 parses the disk image directly, allowing you to extract the NTDS.dit or SAM database🚀

13 171 672 59K 365

Download Image

Thomas Roccia 🤘 @fr0gger_

2 months ago

💥 CERT-UA published a report on a malware powered by an LLM. The malware uses Qwen 2.5-Coder-32B-Instruct via the HuggingFace API to generate and execute commands on infected systems. It is a Python script that embeds prompts to dynamically craft Windows reconnaissance…

11 88 270 36K 212

Download Image

Stephan Berger @malmoeb

3 months ago

Ever heard of shellbags? Like in the example here: My Computer -> ? -> Users -> <compromised_user> -> ADRecon-Report-20250225235831 Shellbags are a subset of data found within UsrClass.dat and sometimes in the NTUSER.DAT hive. They are used by Windows to remember folder view…

0 7 47 3K 21

watchTowr @watchtowrcyber

3 months ago

Are we bleeding out? Enjoy our analysis of CitrixBleed 2, aka CVE-2025-5777 - the "new" Citrix NetScaler Memory Leak vulnerability. We've been using this mechanism to identify vulnerable systems, and hope it helps the teams that need it.. enjoy! labs.watchtowr.com/how-much-more-…

6 79 209 22K 67

Marci Ujlaki @UjlakiMarci

3 months ago

oh no 🟥 CVE-2025-32463, CVSS: 9.3 (#Critical) #Sudo version 1.9.14 to 1.9.17 #Vulnerability allows local users to gain root access via the --chroot option due to improper handling of /etc/nsswitch.conf. #CyberSecurity #CVE #PrivilegeEscalation openwall.com/lists/oss-secu…