@rum4is

Penetration Tester

 127.0.0.1
rumaiiis.github.io/
Joined June 2014
  • Tweets12.1K
  • Following944
  • Followers1.2K
56Media
Happy Sunday.
49
138
31
994
70,015
"Mindset without discipline is useless" - Kobe
133
now or never
1
2
158
Why haven't we labelled it scavenger intelligence? I'm not sure 🤷‍♂️🤷‍♂️🤷‍♂️ #scavint #cybersecurity #infosec
2
26
4
89
9,771
It’s ok
1
78
Active Directory Exploitation: Lateral Moment Pass the Ticket Attack hackingarticles.in/lateral-m… Pass the Cache hackingarticles.in/lateral-m… Over Pass the Hash hackingarticles.in/lateral-m… Pass the Hash Attack hackingarticles.in/lateral-m… #infosec #cybersecurity #cybersecuritytips #pentesting #redteam #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #security #linux #cybersecurityawareness #bugbounty #bugbountytips
5
136
453
87,343
I have a one year @PentesterLab voucher for one random person retweeting and replying to this tweet with #nahamcon2023 :)
541
498
68
533
110,744
The MOVEit Transfer exploitation is not just SQL injection(👀) We uncovered the very last stage of the attack chain to drop human2.aspx ultimately ends up gaining remote code execution ‼ We fully recreated the attack chain with a demo achieving a reverse shell & ransomware!
29
456
16
1,647
236,734
Terminator Evade All Detection: PowerShell Script for Terminating Protected Processes with In-Memory Execution and HVCI Bypass (AV|EDR|XDR Evasion Technique) - POC in CrowdStrike" @xiosec #TerminatorScript #AVEDRXDR #POCinCrowdStrike #cybersecurity #avevasion #EDR #Crowdstrike
2
1
4
799
🚨 Giveaway 🚨 Do we need a reason to hold a giveaway? We want to give away two @TCMSecurity vouchers! (1) Practical Web Application Penetration Testing AND (1) Practical Ethical Hacking All you have to do to enter is: 1️⃣ Retweet this Tweet 2️⃣ Make sure you’re following us Winner announced tomorrow at 5:00 PM
38
186
3
143
27,607
It's not a matter of if, but when, the breach will occur.
1
95
#Emotet- epoch4 - .zip > .doc > .dll WINWORD.EXE /n INVOICE 589 03_23.doc /o https://midcoastsupplies.]com].au/configNQS/Es2oE4GEH7fbZ/?135704 regsvr32.exe C:\Windows\system32\MSBjdGgEfuEG\evPaAyJzdCSx.dll IOC's github.com/pr0xylife/Emotet/…
2
51
3
107
18,627
Undead #Emotet is Back🧟‍♂️500MB #MalDoc 🚨 Ivan is back with old-school #TTPs: [+] AutoOpen VBA MalDoc macro - T1059.005 [+] Regsvr32 T1218.010 [+] System Network Discovery T1016 [+] Registry Run T1547.001 #DFIR Exec Flow: Winword.exe > Regsvr32.exe 💥
2
104
4
220
78,634
nvd.nist.gov/vuln/detail/CVE…
43
CVE-2022-25664 is one of the most interesting bug I've reported. It's "only" an info leak, but a very powerful one that allows an untrusted Android app to read pages of memory from the kernel or other apps any number of times. github.blog/2023-02-23-the-c…

The code that wasn't there: Reading memory on an Android device by accident

CVE-2022-25664, a vulnerability in the Qualcomm Adreno GPU, can be used to leak large amounts of information to a malicious Android application. Learn more about how the vulnerability can be used to...

github.blog
103
5
338
66,828
VMware Plugs Critical Carbon Black App Control Flaw: VMware issues a critical fix for a vulnerability that allows hacker to gain full access to the underlying server operating system. The post VMware Plugs Critical Carbon Black App Control Flaw… securityweek.com/vmware-plug…
2
1
96
there is no need to know everything, all I need is somebody who knows what I don't
1
2
3
Data is the weapon of the future. Whoever controls data controls the world.
2
6
Python Django Projects for beginners with source code 😲 A thread 🧵👇
77
595
7
2,053
Is the UK government prepared for its greatest threat? dlvr.it/STJ8rq #news #cybersecurity #infosec xitter.cf/DeepFriedCyber/status/… xitter.cf/DeepFriedCyber/status/… #RaviVisvesvarayaSharadaPrasad #IoT #IIoT #InternetOfThings #IndustrialInternetOfThings #QuantumComputing #CloudCompu…

Is the UK government prepared for its greatest threat? - Help Net Security

With a looming threat of large ransomware attacks targeting the UK government, preparing an adequate defensive strategy will be key.

helpnetsecurity.com
DeepFriedCyber@DeepFriedCyber4 Jul 2022
Is the UK government prepared for its greatest threat? dlvr.it/STJ8rq #news #cybersecurity #infosec
3
1
Load more