nyxgeek @nyxgeek

rebel scum, nerfherder, dogged and relentless. H/P/V/A/C Directory - https://t.co/qn0D9H7IIi github.com/nyxgeek hacking gibsons Joined June 2012

Tweets

11K
Followers

7K
Following

3K
Likes

55K

AshutoshShrivastava @ai_for_success

3 days ago

Story of every CEO right now 😂

334 3K 24K 2.0M 3K

Download Image

mRr3b00t @UK_Daniel_Card

3 days ago

Multiple companies breached through the salesforce drift breach..... you can have the best posture in the world but your supply chain might not....

24 38 330 27K 34

This morning, a serious WebPKI incident surfaced: a tiny CA misissued certificates for 1.1.1.1 - Cloudflare’s DNS service. With BGP hijacks happening regularly, those certs could enable full man-in-the-middle attacks. The bigger issue? Microsoft’s root program still trusts this…

9 33 138 23K 47

Clandestine @akaclandestine

3 days ago

XSS in 2025 — The Payloads That Still Work | by Santhosh Adiga U | Jul, 2025 | Medium santhosh-adiga-u.medium.com/xss-in-2025-th…

0 3 18 3K 10

James 🏴󠁧󠁢󠁷󠁬󠁳󠁿 @two06

2 days ago

My @Steel_Con talk video is up 👀 youtu.be/a4cwO7deSTo Thanks to the crew for making that possible

2 12 43 7K 27

J⩜⃝mie Williams @jamieantisocial

3 days ago

a truly inspired level of RTFM.

Caitlin Condon @catc0n

3 days ago

a truly inspired level of RTFM. https://t.co/D219ZDSDB5

3 7 39 13K 18

1 17 88 11K 14

Download Image

Florian Hansemann @CyberWarship

2 days ago

''Copilot Broke Your Audit Log, but Microsoft Won’t Tell You'' #infosec #pentest #redteam #blueteam pistachioapp.com/blog/copilot-b…

1 1 5 1K 1

S3cur3Th1sSh1t @ShitSecure

2 days ago

Best Citrix Breakout ever. You can only download .ica files that provide access to certain local applications but breakout out of these applications is not possible? Just modify the .ica file before starting it and remove The InitialProgram= value -> Full Citrix Session! 🤓

11 83 380 31K 214

Download Image

Justin Elze @HackingLZ

3 days ago

The nice thing about AI/automation entering the pentest space is that there will be little to no room for Nessus scanner pentest shops, which will raise the quality bar for everyone.

10 8 97 8K 5

LaurieWired @lauriewired

4 days ago

Much like humans, CPUs heal in their sleep. CPUs are *technically* replaceable / wear items. They don’t last forever. Yet, the moment stress is removed, transistor degradation (partially) reverses. It's called Bias Temperature Instability (BTI) recovery:

172 1K 17K 664K 5K

Download Image

Justin Elze @HackingLZ

4 days ago

Mail bomb!? What’s old is new again?

Sublime Security @sublime_sec

4 days ago

Mail bomb!? What’s old is new again? https://t.co/uUfeT2WXOQ

1 4 10 10K 3

Download Image

18 6 77 9K 7

Download Image

Today In Infosec @todayininfosec

5 days ago

1997: Nmap was first released as a simple port scanner via an article in issue 51 of Phrack magazine which included the source code. That's right - 28 years of Nmap!

15 325 1K 76K 212

Download Image

solst/ICE @IceSolst

7 days ago

Someone demo’d a cute app they built. I asked them what language they wrote it in, they said they didn’t know.

102 43 3K 86K 110

vx-underground @vxunderground

6 days ago

28 368 3K 109K 191

Download Image

osenya @osenya31

a week ago

@HackingLZ its the meme.

1 3 22 739 0

Download Image

KF @d0tslash

a week ago

Anyone ever tried popping a shell or maintaining persistent access to one of these key duplicator kiosks?

57 24 1K 84K 219

Download Image

Brian Timp @BrianTimp

a week ago

Great article by the one and only Kevin Beaumont "Citrix forgot to tell you CVE-2025–6543 has been used as a zero day since May 2025" doublepulsar.com/citrix-forgot-… #citrix #netscaler #cve #zeroday

1 10 26 5K 5

Justin Elze @HackingLZ

a week ago

NAT has saved more people from getting hacked than some actual security controls 🤣

39 84 1K 71K 155

Adam Chester 🏴‍☠️{AFK} @_xpn_

a week ago

I'm sorry @AnthropicAI, did you just try and tell me to enable data sharing (which I disabled) and then told me that you can keep my data for 5 years??!

11 5 70 8K 8

Download Image

Simo @SimoKohonen

a week ago

Putting this here in case it turns out to be interesting Citrix Netscaler exploit activity with two steps: POST /api/v1/configuration (first payload) GET /var/tmp/poc_test.txt (second payload)