sam xia retweeted
Attackers planting adversarial prompts inside malware to evade AI analysis AGAIN
Russia-aligned UAC-0099 used a technique
@ESETresearch calls "GuardBreaker".
How it worked:
1. Create a malicious VBS script
2. Add nuclear weapon instructions as comments
3. AI security tooling reads the file
4. Safety guardrails trigger on the weapons content
5. The model refuses or stops analyzing
6. The actual malware continues executing
The script ultimately installs MATCHBOIL, a loader used to deliver additional payloads.
In June, Socket found the same technique in supply-chain attacks, where malicious packages embedded biological/nuclear weapons text and fake system overrides to disrupt AI malware scanners.
Full write-ups in the comments. 👇
sam xia retweeted
Lmao How this is soo true lol 😂
xitter.cf/cryptonator1337/status…
sam xia retweeted
Who made this lol
#cybersecurity #infosec
sam xia retweeted
👋 Brand Neeew Path: CompTIA Security+ Preparation Path
📚 10 Courses
🗒️ 61 Lessons
📝 10 Exam-style quiz
sam xia retweeted
Include computers into #Bluetooth mesh network for Bitchat app
✅️ More devices = more nodes
✅️ Wider communication range github.com/kaganisildak/bitc… by @kaganisildak
sam xia retweeted
🎯 Credential Dumping: Simulating Windows Credential Harvesting in Labs
Credential dumping techniques allow attackers to extract usernames, password hashes, and authentication tokens from compromised Windows systems 🖥️
sam xia retweeted
🔐 PostgreSQL Password Cracking in Labs 🥼
PostgreSQL is a popular open-source database system. In ethical hacking labs, simulating password attacks helps test the impact of weak credentials and understand real-world risks.
sam xia retweeted
🧠💣 381 FILES. 200+ GB. ELITE ONLY.
I just unlocked a vault that would make even top bug bounty hunters drop everything:
🔥 OSCP
🔥 OSEP
🔥 OSWE
🔥 THM / HTB
🔥 EC-Council
🔥 Cisco CyberOps
🔥 Linux Priv Esc
🔥 PEN-300 Full Video Series
🔥 BloodHound, AD, SSH, API, SQL, 🔥 PEN-300 / HTB / THM
🔥 EC-Council / CyberOps / Linux PrivEsc
🔥 BloodHound / AD / API / SSH / SQL
💾 FULL videos, PDFs, labs, @GREEN_ARMOR zips
Too hot to share publicly.
I’ll pick ONLY 10 people to send this to — we can get banned for this 🔥
👉 Repost + Like + Comment “ME”
I’ll DM you if you’re chosen.
This is NOT your regular course pack.
This is what the underground studies to dominate certs & bounty boards.
RT if you’d risk your SSD space.
💾🧠💀
#OSCP #BugBounty #RedTeam #EthicalHacking #CyberSecurity #InfoSec
sam xia retweeted
📌 XSSer Automated Cross-Site Scripting (XSS) Testing Tool
🔍 Overview
XSSer is a free and open-source tool that automates the detection and exploitation of XSS (Cross-Site Scripting) vulnerabilities in web applications.
sam xia retweeted
🔥🧱 Nmap vs Firewalls: Weaponize Your Scans in the Lab 🔍🌐
Firewalls shape the battlefield but Nmap reveals their cracks. Knowing how traffic is filtered helps both pentesters and defenders sharpen their edge.
⤵️ Guide ⤵️
sam xia retweeted
Active Directory Pentesting with Netexec: The Next-Gen Enum4linux 🚀🏢
Netexec (previously CrackMapExec) is a powerful post-exploitation and enumeration tool used in authorized Active Directory assessments.
sam xia retweeted
Just released WPProbe v0.6.0! It now includes a bruteforce mode and a hybrid scan (REST endpoints + bruteforce). Check it out: github.com/Chocapikk/wpprobe… (Thanks @ibrahimsql for the PR)
sam xia retweeted
Burp Suite for Pentesters: Mastering Active Scan++ 🧪🌐🛡️
Burp Suite is a must-have for any web application security tester and Active Scan++ takes automated scanning to the next level.
sam xia retweeted
🔥Introducing PT1 the offensive security certification that helps you stand out and get hired🔥
🔗tryhackme.com/certification/…
✅ Stand out and increase your chances of getting hired.
✅ Hands-on pentesting across Web, Network, and Active Directory.
✅ Real-world engagement with practical, end-to-end scenarios.
✅ Brand trusted by millions.
✅ Get Certified. Get Noticed. Get Hired.
sam xia retweeted
CamPhish is an open-source phishing tool that captures webcam snapshots by tricking users into granting camera access on a fake page. It leverages Ngrok or Serveo for port forwarding, making the phishing page accessible online.
⤵️GitHub Download Link⤵️
sam xia retweeted
Replying to @Dhanush_Nehru
Not everyone/everything is an open source + works like torvalds




































