𝓫𝔂𝓽𝓮𝓬𝓪𝓽𝓮𝓰𝓸𝓻𝔂 ACCEED集团食品安全副总监食安投诉信请放旁边垃圾箱 戏谑 夸张的表达,但事实是我的空气. 𝕾𝖍𝖚𝖗𝖆 24歳 学生です 浪是那海的赤子 海是那浪的依托.
Seongnam-si KR
Joined July 2025
- Tweets470
- Following93
- Followers45
- Likes1.5K
60 .py files have been tested against Python 2.7.18 — do not use a Python 3 environment.
Features include concurrent requests to targets with TLS verification disabled, prompts for an input list file, command execution, and writing results to local text files.
Contains CVE/QVD proof-of-concept scripts for web applications, targeting products such as WordPress, Gitea, Langflow, MotionEye, and others.
Also includes SSH Banner identification. (Version info and search queries will be documented and added one by one over time.)
Whether the exploitation workflow is valid needs your verification!
Repository: github.com/bytecategory/null…
bytecategory retweeted
One of the largest and oldest continental freemasonic organization GODF ... was hacked yesterday ..leaking 737 files ...exposing freemasonry at the highest ranks ....
Including ...
List of named individuals .. last names .. first names .. physical addresses and phone Nr..
W.H.G
远程主机服务商的安全性如何捏
import requests, mmh3, base64
r = requests.get("https://loori[.]cc/favicon.ico", verify=False, timeout=10)
hash_val = mmh3.hash(favicon_b64)
print("Shodan hash:", hash_val)
绕过CDN寻找真实IP的示例如上
随后访问URL: https://www[.]shodan[.]io/search?query=http.favicon.hash%3A-1788466974只有一个结果: "Loori | 美国家庭宽带与独享住宅 IP" :-)
而ssh客户端表明, 153.75.235.181 在拒绝信息中列出它支持密码认证, 然后就可以用hydra肆意的xxoo了.
LOOCV accuracy: 0.9425
Balanced accuracy: 0.9436
Ad precision: 0.8833
Ad recall: 0.9464
F1: 0.9138
F2: 0.9331
Confusion matrix [[111, 7], [3, 53]]:
111 true normal texts, 7 false positives, 53 true ads, 3 false negatives.
Total errors: 10.
Compared to the previous model: 1 fewer missed ad and 3 fewer false positives on normal texts.
bf[.]st is a honeypot, it was owned by DMT and Casper - both men that got arrested. Do not use the site at any possible cost and insist on using breached[.]st
BreachForums has finally unified under one singular banner under HasanBroker for the first time in 2 years
This marks the beginning of full peace and we have started focusing on the forum fully a week ago and we will continue to impress the community with our vigilance and determination to serve our Empire
The only real domain to BreachForums is https://breached[.]st and the only real .onion link to it is breach22uu7wb4tnc4ghq22e6umg…
bytecategory retweeted
The FBI has issued a FLASH on the cybercriminal group TeamPCP, which has carried out large-scale software supply chain compromises by targeting widely used developers and security tools. The group has infiltrated victim environments and extracted sensitive data, including cloud access tokens, SSH keys, and Kubernetes secrets. TeamPCP has also engaged in extortion and collaboration with cyber actors from other threat actor groups, publishing victim names on a public leak site and threatening to release stolen data.
Read the FLASH for more on TeamPCP’s tactics, techniques, and procedures (TTPs), indicators of compromise (IOCs), and recommendations to protect your organization: ic3.gov/CSA/2026/260702.pdf
ALT FBI alert dated July 2, 2026, warning about cyber criminal group TeamPCP with official FBI seal in background.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
I confirm this is diencracked, the official operator of dien.pw.
I am announcing my permanent retirement on all channels, I no longer am with any type of BreachForums, including Breached, or other versions. This name, diencracked, will be retired along, and i can confirm i am no longer involved with any type of activities
For your information, the breached[.]su database has been sold to bf[.]st for $x,xxx. The updated database is not held by breached[.]st or other parties.
I submit to HasanBroker and Resolute, including his allies. They have bested me, I recognize that now and I am stopping everything. Everything will soon be deleted, I wish you all the best.
take care, and keep cracking those binaries.
Goodbye, friend.
- diencracked
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQRRdI/iLidGFd9IW35xAp6VpXCjbQUCaoDPxgAKCRBxAp6VpXCj
bdlZAP9xi3uDdgFDpBZeJuUgHXzScvYlb1/FdUFTrMJ5gevl0wEAnguRiW3Culju
8nN4H7mnGsewGi+kolCm6kLqZ4W4kAU=
=3vvV
-----END PGP SIGNATURE-----
bytecategory retweeted
I really recommending reading this.
In summary, a company which does ID verification for in-person interactions (hotels, car rentals, ID verification for alcohol or marijuana, etc) has some how exposed over 153,000,000 drivers licenses for people in the United States and Canada.
It is a catastrophic data breach, probably one of the worse I've ever seen. If you're in the United States and have traveled, gotten a hotel, purchased marijuana or alcohol, there is a high probability you're in this.
Unlike other breaches, this includes a photo of the person (from the license), making verification you've identified the person significantly easier.
This poses a significant threat to celebrities (musicians, YouTubers, streamers, adult entertainers, actors, etc), politicians, lawyers, wealthy people (CEOs, investors, people of public interest), Law Enforcement Officers, etc
Krebs himself, and several other security researchers, have already confirmed they're in the data leak.
tl;dr gah damn dawg this company is going to be sued into oblivion
krebsonsecurity.com/2026/09/…
BLACKNET-00是一个成熟度较低 宣传力度极大的行动者集群 其公开宣称的能力和宣传的工具往往超出现有证据所证实的实际能力 核心的防御性结论是 技术上前后矛盾的行动者仍然可以将具有实际操作价值的组件包装在不完整或夸大其词的材料中:
BLACKNET-00 勒索软件构建器---歪曲其加密技术, 在测试版本中可以恢复
Shadow Ghost 扫描器: 封装在低质量的 tkinter 样板代码中
建议做法: 降低对未经证实的宣传的重视程度
BLACKNET-00 结合了低可信度的说法, 不完整的工具, 重复使用的代码以及大量与人工智能辅助相符的样板代码. 大多数已观察到的材料表明其技术成熟度有限.
鸣谢: RANSOM-ISAC的研究人员.
bytecategory retweeted
Nvidia user mode dlls are a bit funny, here is a 0day that can be used to cross-user boundaries (maybe get SYSTEM ?)
github.com/MSNightmare/Green…
bytecategory retweeted
Kaspersky 0day ? Anyone ?
github.com/MSNightmare/HardB…
非Query包的ip_id序列(测量两两间的汉明距离, 记为Z_i),用matplotlib把Z_i画成直方图,$Binomial(16, 0.5)$的曲线也画在同一图表里.
这意味着没有什么相关性 和随机的16比特一样.
用Chao1估计IP池总量 583 个左右.
Top3 ASN: Facebook(AS32934), Twitter(AS13414), Dropbox(AS19679).
