Hack3rBot's profile picture. Business Area Manager  Ethical Hacking at Orange Cyberdefense (Swe). Cybersecurity enthusiast. Opinions are my own.

M.Eriksson

@Hack3rBot

Business Area Manager Ethical Hacking at Orange Cyberdefense (Swe). Cybersecurity enthusiast. Opinions are my own.

M.Eriksson reposted

Reminds me of something I read the other day. There's a lot of money to be made in making cyber seem over complicated.


M.Eriksson reposted

THE AIR GAP! (this is not a joke, I have seen multiple companies say they have an air gapped OT environment with this architecture pattern)

UK_Daniel_Card's tweet image. THE AIR GAP!

(this is not a joke, I have seen multiple companies say they have an air gapped OT environment with this architecture pattern)

M.Eriksson reposted

If u had issues relaying the ADCS server to itself via the NTLM reflection exploit via ntlmrelayx, it's now fixed github.com/fortra/impacke… :)


M.Eriksson reposted

tfw a tweetable PoC can take down yr cloud compute

CVE-2025-23282 is going to debut tomorrow at @hexacon_fr in our talk "CUDA de Grâce" w/ @chompie1337, but you can try CVE-2025-23332 now! Tweetable Python PoC: ``` import fcntl fcntl.ioctl(open('/dev/nvidiactl'),218,0) ```



M.Eriksson reposted

🚨 𝗪𝗲'𝘃𝗲 𝘂𝗻𝗰𝗼𝘃𝗲𝗿𝗲𝗱 𝘁𝗵𝗲 𝗳𝗶𝗿𝘀𝘁 𝗺𝗮𝗹𝗶𝗰𝗶𝗼𝘂𝘀 𝗠𝗖𝗣 𝘀𝗲𝗿𝘃𝗲𝗿 𝗶𝗻 𝘁𝗵𝗲 𝘄𝗶𝗹𝗱. It was only a matter of time. The postmark-mcp npm package (1,500+ weekly downloads) has been backdoored since v1.0.16 - silently BCCing every email to the attacker's…

GetKoidex's tweet image. 🚨 𝗪𝗲'𝘃𝗲 𝘂𝗻𝗰𝗼𝘃𝗲𝗿𝗲𝗱 𝘁𝗵𝗲 𝗳𝗶𝗿𝘀𝘁 𝗺𝗮𝗹𝗶𝗰𝗶𝗼𝘂𝘀 𝗠𝗖𝗣 𝘀𝗲𝗿𝘃𝗲𝗿 𝗶𝗻 𝘁𝗵𝗲 𝘄𝗶𝗹𝗱.

It was only a matter of time. The postmark-mcp npm package (1,500+ weekly downloads) has been backdoored since v1.0.16 - silently BCCing every email to the attacker's…

M.Eriksson reposted

✨ Rome, are you ready for cyber-spaghetti time🍝? On 27 September, our very own Leon Jacobs CTO for SensePost – the ethical hacking arm of Orange Cyberdefense – will take the stage at Cyber Saiyan / RomHack Conference, Training and Camp 2025! 🎤💻 It’s his first #RomHack,…

orangecyberdef's tweet image. ✨ Rome, are you ready for cyber-spaghetti time🍝? 

On 27 September, our very own Leon Jacobs CTO for SensePost  – the ethical hacking arm of Orange Cyberdefense – will take the stage at Cyber Saiyan / RomHack Conference, Training and Camp 2025! 🎤💻

It’s his first #RomHack,…

M.Eriksson reposted

QOL: Introducing NetExec module categories 📚 With NetExec’s rapid growth, the number of modules has increased significantly. To give a clearer overview, I’ve added categories. It’s a “best fit” approach, so not perfect, but should give a better idea of what’s available.

al3x_n3ff's tweet image. QOL: Introducing NetExec module categories 📚

With NetExec’s rapid growth, the number of modules has increased significantly. To give a clearer overview, I’ve added categories. It’s a “best fit” approach, so not perfect, but should give a better idea of what’s available.

Would really like if more ppl lift the importance of soft skills in the field and understanding the business side of things. Discussions like: clients may not have infinitive budget for a test, leading into how to handling rabbit holes, and being able to give recommendations…


M.Eriksson reposted

Do you want to trigger shellcode only when: - Certain DNS resolution happens? - Certain servers are reached out to? - When you get a 112 byte long response? ...etc Meet InternetSetStatusCallback() for fine tuning execution (or if you are just bored): gist.github.com/whokilleddb/59…

whokilleddb's tweet image. Do you want to trigger shellcode only when:
- Certain DNS resolution happens?
- Certain servers are reached out to?
- When you get a 112 byte long response?
...etc

Meet InternetSetStatusCallback() for fine tuning execution (or if you are just bored): 

gist.github.com/whokilleddb/59…

Fun project. Will elaborate later

Hack3rBot's tweet image. Fun project. Will elaborate later

M.Eriksson reposted

Breaking into a Cyber Security Career in 2025 x.com/i/broadcasts/1…


Do not why chatgpt drew this image. On a question about youtube channels for hacking. But cute.

Hack3rBot's tweet image. Do not why chatgpt drew this image. On a question about youtube channels for hacking.  But cute.

#x33fcon 2 intressting days! I will attend next year for sure.


AI in pentesting is accelerating fast. Kali-GPT is another AI tool to add to my growing backlog for testing. 24-hour days just aren’t enough! But how can we secure them all in this pace? xis10cial.com/ai/%F0%9F%90%8… #Cybersecurity #Pentesting

Hack3rBot's tweet image. AI in pentesting is accelerating fast. Kali-GPT is another AI tool to add to my growing backlog for testing. 24-hour days just aren’t enough! 

But how can we secure them all in this pace?
 xis10cial.com/ai/%F0%9F%90%8… #Cybersecurity #Pentesting

Hack The Box (HTB) stands out as the top cybersecurity and cyber range provider in and now solidifying its position with absorbing Vulnlab’s excellent content, enhancing its offerings. Thanks to xct for Vulnlab’s i had really fun while it lasted! I will go back to htb again.…


BeaconGate in Cobalt Strike 4.10 enhances evasion with call stack spoofing, countering EDR detection of malicious API calls. Good insights for red teams. Intressting read. cobaltstrike.com/blog/instrumen… #Cybersecurity #RedTeam


Just read VirusTotal's blog on scanning 17,845 GitHub repos. About 8% of MCP servers could be malicious. Good insights into supply chain risks and credential harvesting. Check it out for practical security tips. #Cybersecurity #GitHub blog.virustotal.com/2025/06/what-1…

Hack3rBot's tweet image. Just read VirusTotal's blog on scanning 17,845 GitHub repos. About 8% of MCP servers could be malicious. Good insights into supply chain risks and credential harvesting. Check it out for practical security tips. #Cybersecurity #GitHub blog.virustotal.com/2025/06/what-1…

Loading...

Something went wrong.


Something went wrong.