127.0.0.1
Joined June 2015
- Tweets95.5K
- Following5.9K
- Followers2.3K
- Likes75.1K
Ethical Hacker retweeted
More details about CVE-2026-109618 and
CVE-2026-109619, the PHP RCE.
Upload progress can serialize before basic RINT clears BG(serialize)
There is currently no possible mitigation.
See the screenshot below to understand how I got the UAF 😼
Ethical Hacker retweeted
Writing a Beacon Object File (BOF) from Scratch in C by7e.dev/blog/bof-from-scrat…
Ethical Hacker retweeted
Hacking on-ship navigation and how to trace an attacker: An intro to NMEA 2000 for security researchers. 🚢🧭👾💉👨🏻💻
More details on:
LinkedIn: lnkd.in/p/dbJuSDw2
Substack: it4sec.substack.com/p/hackin…
Telegram: t.me/it4sec/85
Ethical Hacker retweeted
We hacked the hackers infrastructure because they left their AI tool expose /tmp for exploit delivery.
Read how: China-Linked Hackers Targeted Governments Across Asia
vulone.com/blog/a-china-link…
During routine threat actor infrastructure hunting I identified a suspicious APAC-hosted VPS running an autonomous AI intrusion platform with its entire working directory exposed to the open internet on port 9000. No authentication. 150+ live campaign files sitting there.
I published my initial findings. @vulonehq then took it further.
@vulonehq obtained authorized access to the server, pulled 16.4 GB of evidence including recovered deleted container layers, and mapped the full scope of the campaign.
Read Here: vulone.com/blog/a-china-link…
#china #vietnam #indonesia #india #cybersecurity #intrusion
Ethical Hacker retweeted
When Defenses Become Attack Surface: CVE-2026-20971, a Samsung Kernel UAF
Article about analyzing exploitation primitives derived from a racy use-after-free bug in the Samsung PROCA (Process Authenticator) kernel module.
lucidbitlabs.com/blog/when-d…
Ethical Hacker retweeted
🏴☠️ ÚLTIMA HORA: Han conseguido romper la barrera que impedía jugar pirata a GTA VI en PS5, la V. 14.10...
Sucede UN MES antes del lanzamiento... Esto abre las puertas a que se pueda jugar en PC sin que Sony y Rockstar vean un dólar... CUIDADO.
Info 👉 youtu.be/y9c15fxK9fM
Ethical Hacker retweeted
Did firmware 14.10 just become vulnerable? 👀
Two new WebKit bugs were just discovered on 𝗣𝗦𝟱 𝟭𝟰.𝟭𝟬, marking a massive leap for early exploit research.
• Gives developers the user-facing entry point they needed
• Opens the door to chain discovery on modern firmwares
• One of the biggest research breakthroughs seen on PS5 to date
What firmware is your console sitting on right now?
Source link
github.com/pastawithpesto/PS…
Ethical Hacker retweeted
📝 New blog post - ESC13: Being a Phantom Member of a Group 👻🔥
Enroll in one cert template, and your certificate injects a group's SID into your Kerberos ticket. You "become" a member without ever being added to the group. No change in AD, no noise.
🦀 RustHound-CE v2.5.26 now maps this path in BloodHound-CE. Huge thanks to @marbasec for the feature and the many bug fixes! 🙏
📝 EN: blog.safetech.red/esc13/
📝 FR: blog.safetech.red/fr/esc13/
#ADCS #BloodHound #RedTeam #Rust #Pentest
Ethical Hacker retweeted
I’ve been using ProxyBlob for a week on a target running CrowdStrike. The tool worked like a charm.
Btw, it was made by my colleague @_atsika
Definitely worth checking his tool 🚰 github.com/quarkslab/proxybl…
Ethical Hacker retweeted
PLAYSTATION ESTA EN SERIOS PROBLEMAS‼️
El Jailbreak de PS5 sigue avanzando y ya alcanza el firmware 14.10 de la consola.
Recordemos que GTA 6 requerirá actualizar la PS5 a esta versión para poder jugarlo.
Así que sí, muy posiblemente GTA 6 se podrá piratear desde su lanzamiento y sera compilado en pocas semanas para jugarse en PC.
Ethical Hacker retweeted
Google open-sourced Harness². It lets an AI agent improve its own setup on every new task, without retraining the model.
The setup around a model, its "harness", is normally designed once by a person: the system prompt, guardrails, memory, tool guidance, subagents, skills, scripts and plugins. Harness² edits all 8 while it works.
How it works:
→ proposes changes to the harness for the task in front of it
→ tests those changes on that same task
→ keeps what actually worked better, with no answer key needed
→ carries the lessons into future tasks
In Google's tests, one round improved GLM-5 and Gemini 3.5 Flash by up to 11.5 points on WorkBuddy-Bench and 11.8 points on LAB, a legal benchmark.
Works with OpenCode or Codex. The demo runs on Linux with no API keys:
git clone github.com/google-research/h… && cd harness2
uv venv --python 3.12 .venv && source .venv/bin/activate
uv pip install -e '.[render]'
harness2-demo --output runs/demo --k 2
Apache-2.0, 11.3K stars.
Ethical Hacker retweeted
redteamfortress/killerland: Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you. github.com/redteamfortress/K…
Ethical Hacker retweeted
Former Israeli intelligence officer Tal Dilian showcased the capabilities of a multi-million dollar “spy van” built by his company in an interview with Forbes in August 2019.
Dilian was the CEO of WiSpear Systems Limited, which equipped the converted GMC ambulance with an extensive suite of cameras, computers, antennae, and software, allowing for near total surveillance of its targets. Dillian demonstrated on camera the ability to hack a cell phone and install surveillance software using a “zero click” exploit, meaning the target did not even need to click a link or open an email attachment to allow WiSpear to fully invade their cell phone. Afterwards he had complete access to the target phone’s call history, photos, and messages.
Shortly after Forbes published this story, police in Larnaca, Cyprus, where WiSpear is headquartered, seized the van after complaints were made by the local AKEL political party. Arrest warrants were issued for Dilian and two WiSpear employees, but they left the country and were never arrested.
Eventually, a total of 91 charges centered around breaching privacy and electronic communications laws were levied against Dilion and WiSpear. By February 2022, 42 of the charges were dropped, and WiSpear paid a total of 76,000 Euros in fines imposed for the remaining charges. Cypriot President Nicos Anastasiades has also publicly stated that diplomatic relations with Israel had not been harmed by the incident.
In recent years, WiSpear and other Israeli surveillance firms have been implicated in numerous high-profile scandals and exposes regarding the hacking of devices belonging to journalists, dissidents, and activists worldwide on behalf of their international clients.
Most famously, NSO Group has been linked to the death of Jamal Khashoggi, a Washington Post reporter who was killed inside the Saudi consulate in Istanbul, Turkey in 2018. Phones belonging to his fiancée and several associates were found to contain NSO Group’s flagship surveillance software known as Pegasus.
#israel #spy #surveillance #cyprus #zeroclick
Ethical Hacker retweeted
THIS IS AN ACTUAL F*CKING GOLDMINE
Anthropic just shared one of the best tricks for Claude Code.
The idea: run Sonnet, Haiku 5.5 and Opus 5.5 at once, each one doing only the job it's best at.
Better results and way fewer tokens, because every task lands on the right model.
You just launch Claude Code like this:
claude --model sonnet --advisor opus
here's the split:
→ Sonnet 5.5 runs the session, writes the code and applies the fixes
→ Haiku 5.5 swarms the repo in parallel: search, grep and diff audits
→ Opus 5.5 stays on call as advisor for the big calls and signs off on the diff
→ you stop burning Opus context on work that doesn't need it
Opus only steps in at three moments:
→ before a plan locks
→ when the same error shows up twice
→ before calling it done
Sonnet builds. Haiku swarms. Opus reviews.
JEV engineering is the same move one layer down: the forks that need no thinker (which file, which tool, retry or stop) go to JEV in milliseconds, and the big models only see the ones that split
the full tree
> Sonnet 5.5 runs the main session and coordinates the work
> search maps the repo on Haiku 5.5, read-only
> grep finds call sites on Haiku 5.5 in its own context
> audit checks the diff on Haiku 5.5 in a throwaway worktree
> Opus 5.5 on call as advisor, reviews the synthesized diff before sign-off
> JEV routes micro-forks in milliseconds
paste the tree and this prompt into Claude Code ↓
"Reconfigure my Claude Code setup around this tree:
1. Run the main session on Sonnet 5.5 with Opus 5.5 as advisor.
2. Create three Haiku 5.5 subagents in .claude/agents: search (maps the repo), grep (finds call sites), audit (checks the diff).
3. Set isolation: worktree on audit so its checks never touch my working branch.
4. Add one rule to CLAUDE.md: delegate every repo search and test run to the Haiku 5.5 subagents to keep the main context small.
5. Route fast deterministic forks (tool choice, path selection, retries) through JEV.
Show me every change as a diff first. No edits until I say go."
↳ code.claude.com/docs/en/sub-…
Ethical Hacker retweeted
Turn your computer into a satellite ground station 🤯
Ground Station is an open-source suite for tracking satellites and decoding their radio signals locally.
Connect an SDR receiver to capture weather images and raw satellite data straight to your hard drive.
Your own setup for listening to space.
100% open source.
Ethical Hacker retweeted
You can now perform content discovery at 100k requests per second with h3fuzz on http/3 hosts (fork of ffuf with http/3 support).
Tool here: github.com/assetnote/h3fuzz
Research post here: slcyber.io/research/how-prac…
Ethical Hacker retweeted
Cloudflare open-sourced the security audit skill that seeded its own vulnerability hunting harness. Your coding agent can now run it on your code.
How it works, in 6 phases:
→ maps your codebase
→ hunts for bugs area by area so nothing gets skipped
→ sends every finding to a fresh agent that didn't find it, to confirm it's real
→ writes structured results
→ verifies each record again, independently
→ writes the final report
You get a findings file split into confirmed, needs validation and rejected, so you fix the real problems first.
Install:
npx skills add github.com/cloudflare/securi… --skill security-audit
Then open your agent in your project and type: "security audit this codebase"
MIT licensed, 31.3K stars.
Ethical Hacker retweeted
An agentic AI red team checklist:
222 tests across 20 categories, WSTG-style
infosecravi.com/blog/agentic…
Ethical Hacker retweeted
Explore the world in live layers
Search flight paths, ship routes, webcams, earthquakes, weather, ai…
sense.quorumz.com/discover?l…
Ethical Hacker retweeted
A Collection of helpers to parse PE files, obfuscate strings, and resolve dynamic calls without adding entries to the IAT in Rust. github.com/Leon-Cantin/PE-Ma…
