CTF Player | Hacker | Writer | Novel reder

india
Joined August 2024
sam xia retweeted
Attackers planting adversarial prompts inside malware to evade AI analysis AGAIN Russia-aligned UAC-0099 used a technique @ESETresearch calls "GuardBreaker". How it worked: 1. Create a malicious VBS script 2. Add nuclear weapon instructions as comments 3. AI security tooling reads the file 4. Safety guardrails trigger on the weapons content 5. The model refuses or stops analyzing 6. The actual malware continues executing The script ultimately installs MATCHBOIL, a loader used to deliver additional payloads. In June, Socket found the same technique in supply-chain attacks, where malicious packages embedded biological/nuclear weapons text and fake system overrides to disrupt AI malware scanners. Full write-ups in the comments. 👇
68
347
95
2,838
423,488
sam xia retweeted
Lmao How this is soo true lol 😂 xitter.cf/cryptonator1337/status…
4
6
82
10,392
Who made this lol #cybersecurity #infosec
38
155
10
1,552
92,639
👋 Brand Neeew Path: CompTIA Security+ Preparation Path 📚 10 Courses 🗒️ 61 Lessons 📝 10 Exam-style quiz
9
62
2
544
81,861
Include computers into #Bluetooth mesh network for Bitchat app ✅️ More devices = more nodes ✅️ Wider communication range github.com/kaganisildak/bitc… by @kaganisildak
20
169
13
1,094
65,141
Top 20 Common Network Port and Their Functions
4
72
3
497
33,251
sam xia retweeted
🎯 Credential Dumping: Simulating Windows Credential Harvesting in Labs Credential dumping techniques allow attackers to extract usernames, password hashes, and authentication tokens from compromised Windows systems 🖥️
1
15
85
6,209
sam xia retweeted
🔐 PostgreSQL Password Cracking in Labs 🥼 PostgreSQL is a popular open-source database system. In ethical hacking labs, simulating password attacks helps test the impact of weak credentials and understand real-world risks.
4
65
376
16,593
🧠💣 381 FILES. 200+ GB. ELITE ONLY. I just unlocked a vault that would make even top bug bounty hunters drop everything: 🔥 OSCP 🔥 OSEP 🔥 OSWE 🔥 THM / HTB 🔥 EC-Council 🔥 Cisco CyberOps 🔥 Linux Priv Esc 🔥 PEN-300 Full Video Series 🔥 BloodHound, AD, SSH, API, SQL, 🔥 PEN-300 / HTB / THM 🔥 EC-Council / CyberOps / Linux PrivEsc 🔥 BloodHound / AD / API / SSH / SQL 💾 FULL videos, PDFs, labs, @GREEN_ARMOR zips Too hot to share publicly. I’ll pick ONLY 10 people to send this to — we can get banned for this 🔥 👉 Repost + Like + Comment “ME” I’ll DM you if you’re chosen. This is NOT your regular course pack. This is what the underground studies to dominate certs & bounty boards. RT if you’d risk your SSD space. 💾🧠💀 #OSCP #BugBounty #RedTeam #EthicalHacking #CyberSecurity #InfoSec
420
306
6
920
83,285
Given the resources the amount of hacking devices I’ll purchase eeeeh Look at this beauty guys 🥹
This is insane. Offsec just dropped a smartwatch that runs Kali NetHunter with wireless injection and WPA2 handshake.
2
3
16
1,534
sam xia retweeted
📌 XSSer Automated Cross-Site Scripting (XSS) Testing Tool 🔍 Overview XSSer is a free and open-source tool that automates the detection and exploitation of XSS (Cross-Site Scripting) vulnerabilities in web applications.
1
29
163
6,488
sam xia retweeted
🔥🧱 Nmap vs Firewalls: Weaponize Your Scans in the Lab 🔍🌐 Firewalls shape the battlefield but Nmap reveals their cracks. Knowing how traffic is filtered helps both pentesters and defenders sharpen their edge. ⤵️ Guide ⤵️
4
148
4
861
48,467
The IT guy 🤓👇
13
53
7
463
10,414
sam xia retweeted
Active Directory Pentesting with Netexec: The Next-Gen Enum4linux 🚀🏢 Netexec (previously CrackMapExec) is a powerful post-exploitation and enumeration tool used in authorized Active Directory assessments.
4
67
286
21,776
Just released WPProbe v0.6.0! It now includes a bruteforce mode and a hybrid scan (REST endpoints + bruteforce). Check it out: github.com/Chocapikk/wpprobe… (Thanks @ibrahimsql for the PR)
5
93
1
436
22,768
sam xia retweeted
404 not found 🤣
5
45
2
365
8,492
sam xia retweeted
Burp Suite for Pentesters: Mastering Active Scan++ 🧪🌐🛡️ Burp Suite is a must-have for any web application security tester and Active Scan++ takes automated scanning to the next level.
3
130
697
34,167
🔥Introducing PT1 the offensive security certification that helps you stand out and get hired🔥 🔗tryhackme.com/certification/… ✅ Stand out and increase your chances of getting hired. ✅ Hands-on pentesting across Web, Network, and Active Directory. ✅ Real-world engagement with practical, end-to-end scenarios. ✅ Brand trusted by millions. ✅ Get Certified. Get Noticed. Get Hired.
21
63
8
310
49,110
sam xia retweeted
CamPhish is an open-source phishing tool that captures webcam snapshots by tricking users into granting camera access on a fake page. It leverages Ngrok or Serveo for port forwarding, making the phishing page accessible online. ⤵️GitHub Download Link⤵️
4
79
515
31,170
Replying to @Dhanush_Nehru
Not everyone/everything is an open source + works like torvalds
1
2
68