English
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어
0xhackerr's profile picture.

0xHacker

@0xhackerr

127Posts 19Followers 537Following
0xHacker reposted
Mister_MDM's profile picture.
Rudy Ooms | MVP 🇳🇱
 @Mister_MDM
Oct 31

Administrator Protection in Windows 25H2 Changes Everything With update KB5067036, Windows quietly introduced Administrator Protection, and it changes how Windows handles admin rights. Until now, being a local admin meant living like Clark Kent: doing normal tasks in plain…

Mister_MDM's tweet image. Administrator Protection in Windows 25H2 Changes Everything With update KB5067036, Windows quietly introduced Administrator Protection, and it changes how Windows handles admin rights. Until now, being a local admin meant living like Clark Kent: doing normal tasks in plain…
9
95
411
411
39K
0xHacker reposted
TakSec's profile picture.
Mike Takahashi
@TakSec
Sep 28

Google Dork - Code Leaks 🔑 site:pastebin. com "example. com" site:jsfiddle. net "example. com" site:codebeautify. org "example. com" site:codepen. io "example. com" Check for code snippets, secrets, configs 👀

TakSec's tweet image. Google Dork - Code Leaks 🔑 site:pastebin. com "example. com" site:jsfiddle. net "example. com" site:codebeautify. org "example. com" site:codepen. io "example. com" Check for code snippets, secrets, configs 👀
1
84
420
454
26K
0xHacker reposted
ShitSecure's profile picture.
S3cur3Th1sSh1t
 @ShitSecure
Sep 27

You got access to vsphere and want to compromise the Windows hosts running on that ESX? 💡 1) Create a clone into a new template of the target VM 2) Download the VMDK file of the template from the storage 3) Parse it with Volumiser, extract SAM/SYSTEM/SECURITY (1/3)

ShitSecure's tweet image. You got access to vsphere and want to compromise the Windows hosts running on that ESX? 💡 1) Create a clone into a new template of the target VM 2) Download the VMDK file of the template from the storage 3) Parse it with Volumiser, extract SAM/SYSTEM/SECURITY (1/3)
7
107
491
429
37K
0xHacker reposted
Defte_'s profile picture.
Aurélien Chalot
 @Defte_
Sep 23

Dumping LSASS is old school. If an admin is connected on a server you are local admin on, just create a scheduled task asking for a certificate on his behalf, get the cert, get its privs. All automatized in the schtask_as module for NetExec 🥳🥳🥳

Defte_'s tweet image. Dumping LSASS is old school. If an admin is connected on a server you are local admin on, just create a scheduled task asking for a certificate on his behalf, get the cert, get its privs. All automatized in the schtask_as module for NetExec 🥳🥳🥳
5
192
928
586
44K
0xHacker reposted
viehgroup's profile picture.
VIEH Group
 @viehgroup
Sep 20

Google Dork - XSS Prone Parameters 🔥 site:example[.]com inurl:q= | inurl:s= | inurl:search= | inurl:query= | inurl:keyword= | inurl:lang= inurl:& Test for XSS in param value: '"><img src=x onerror=alert()> Credit: @TakSec #infosec #bugbounty #bugbountytips

viehgroup's tweet image. Google Dork - XSS Prone Parameters 🔥 site:example[.]com inurl:q= | inurl:s= | inurl:search= | inurl:query= | inurl:keyword= | inurl:lang= inurl:&amp;amp; Test for XSS in param value: &apos;&quot;&amp;gt;&amp;lt;img src=x onerror=alert()&amp;gt; Credit: @TakSec #infosec #bugbounty #bugbountytips
3
24
143
89
5K
0xHacker reposted
TakSec's profile picture.
Mike Takahashi
@TakSec
Sep 17

Google Dork - APIs Endpoints ⚙️ site:example[.]com inurl:api | site:*/rest | site:*/v1 | site:*/v2 | site:*/v3 Find hidden APIs, try techniques 👨‍💻

TakSec's tweet image. Google Dork - APIs Endpoints ⚙️ site:example[.]com inurl:api | site:*/rest | site:*/v1 | site:*/v2 | site:*/v3 Find hidden APIs, try techniques 👨‍💻
4
217
3K
3K
152K
0xHacker reposted
tom_doerr's profile picture.
Tom Dörr
@tom_doerr
Sep 13

real-time cloning of any voice from a few seconds of audio

tom_doerr's tweet image. real-time cloning of any voice from a few seconds of audio
10
262
2K
2K
85K
0xHacker reposted
hridoyreh's profile picture.
Hridoy Rehman
@hridoyreh
Aug 30

A very little-known SEO wins:

hridoyreh's tweet image. A very little-known SEO wins:
27
231
7K
15K
774K
0xHacker reposted
sapirxfed's profile picture.
sapir federovsky
 @sapirxfed
Aug 24

WOW!!! temp43487580.github.io/intune/bypass-… @TEMP43487580 such a good post!!! it is so well written, interesting research and great results! Thank you! 🤩

1
13
76
43
5K
0xHacker reposted
TwoSevenOneT's profile picture.
Two Seven One Three
@TwoSevenOneT
Aug 23

#malware "clipup.exe" in System32 is very powerful. It can destroy the executable file of the EDR service 😉. Experimenting with overwriting the MsMpEng.exe file github: /2x7EQ13/CreateProcessAsPPL #redteam #BlueTeam

TwoSevenOneT's tweet image. #malware &quot;clipup.exe&quot; in System32 is very powerful. It can destroy the executable file of the EDR service 😉. Experimenting with overwriting the MsMpEng.exe file github: /2x7EQ13/CreateProcessAsPPL #redteam #BlueTeam
TwoSevenOneT's tweet image. #malware &quot;clipup.exe&quot; in System32 is very powerful. It can destroy the executable file of the EDR service 😉. Experimenting with overwriting the MsMpEng.exe file github: /2x7EQ13/CreateProcessAsPPL #redteam #BlueTeam
TwoSevenOneT's tweet image. #malware &quot;clipup.exe&quot; in System32 is very powerful. It can destroy the executable file of the EDR service 😉. Experimenting with overwriting the MsMpEng.exe file github: /2x7EQ13/CreateProcessAsPPL #redteam #BlueTeam
6
107
529
401
44K
0xHacker reposted
ACEResponder's profile picture.
ACE Responder
@ACEResponder
Aug 23

How process hollowing works #ThreatHunting #DFIR

4
146
727
563
33K
0xHacker reposted
payloadartist's profile picture.
payloadartist
 @payloadartist
Aug 19

"Localhost tracking" - How Meta bypassed Android sandboxing to track users browsing other websites with Meta's embedded pixel. Fun fact: 22% of the most visited websites across the world embed Meta's pixel. zeropartydata.es/p/localhost-tr…

payloadartist's tweet image. &quot;Localhost tracking&quot; - How Meta bypassed Android sandboxing to track users browsing other websites with Meta&apos;s embedded pixel. Fun fact: 22% of the most visited websites across the world embed Meta&apos;s pixel. zeropartydata.es/p/localhost-tr…
0
8
19
11
2K
0xHacker reposted
_0b1d1's profile picture.
0b1d1
 @_0b1d1
Aug 16

Search Engine for pen-testers and bug Hunters

_0b1d1's tweet image. Search Engine for pen-testers and bug Hunters
12
318
2K
2K
129K
0xHacker reposted
TwoSevenOneT's profile picture.
Two Seven One Three
@TwoSevenOneT
Aug 17

#malware If you use a directory symlink path to create a process, Process Explorer will interpret the Path and Command Line of this process as the path containing the symlink, rather than the location of the executable file 🤔 #redteam #code

TwoSevenOneT's tweet image. #malware If you use a directory symlink path to create a process, Process Explorer will interpret the Path and Command Line of this process as the path containing the symlink, rather than the location of the executable file 🤔 #redteam #code
TwoSevenOneT's tweet image. #malware If you use a directory symlink path to create a process, Process Explorer will interpret the Path and Command Line of this process as the path containing the symlink, rather than the location of the executable file 🤔 #redteam #code
TwoSevenOneT's tweet image. #malware If you use a directory symlink path to create a process, Process Explorer will interpret the Path and Command Line of this process as the path containing the symlink, rather than the location of the executable file 🤔 #redteam #code
2
16
195
109
16K
0xHacker reposted
blackorbird's profile picture.
blackorbird
@blackorbird
Aug 15

Attackers exploit Google Translate to hide their assets from security vendors. securelist.com/new-phishing-a…

blackorbird's tweet image. Attackers exploit Google Translate to hide their assets from security vendors. securelist.com/new-phishing-a…
2
5
14
7
3K
0xHacker reposted
TwoSevenOneT's profile picture.
Two Seven One Three
@TwoSevenOneT
Aug 14

#redteam Hey, look! Windows with two "System32" folders.😲 Hey, keep looking at this! A process loads the same DLL twice and keeps both instances in memory.😲 #malware #blueteam

TwoSevenOneT's tweet image. #redteam Hey, look! Windows with two &quot;System32&quot; folders.😲 Hey, keep looking at this! A process loads the same DLL twice and keeps both instances in memory.😲 #malware #blueteam
TwoSevenOneT's tweet image. #redteam Hey, look! Windows with two &quot;System32&quot; folders.😲 Hey, keep looking at this! A process loads the same DLL twice and keeps both instances in memory.😲 #malware #blueteam
TwoSevenOneT's tweet image. #redteam Hey, look! Windows with two &quot;System32&quot; folders.😲 Hey, keep looking at this! A process loads the same DLL twice and keeps both instances in memory.😲 #malware #blueteam
7
48
477
206
37K
0xHacker reposted
vxunderground's profile picture.
vx-underground
@vxunderground
Aug 12

Ohhhh, sneaky masquerading trick found in the wild and noted by @JAMESWT_WT The Threat Actor replaces / with "ん", a Japanese character +2 cat pictures

vxunderground's tweet image. Ohhhh, sneaky masquerading trick found in the wild and noted by @JAMESWT_WT The Threat Actor replaces / with &quot;ん&quot;, a Japanese character +2 cat pictures
51
250
4K
613
133K
0xHacker reposted
Bl4ckShad3's profile picture.
Matan Bahar
 @Bl4ckShad3
Aug 7

Windows Fonts Exploitation in 2025 - Bypassing UAC with Eudcedit Check out my recent research about eudcedit and see how it can by used to bypass UAC. medium.com/@matanb707/win… #UserAccountControl #UAC #Bypass #Windows

medium.com

Windows Fonts Exploitation in 2025 — Bypassing UAC with Eudcedit

UAC stands for User Account Control, and it was introduced in Windows Vista.

Source: medium.com
0
20
72
46
6K

United States Trends

Something went wrong.


Something went wrong.