vamitrou

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. github.com/Sh3lldon/FullB…

@DrLoupis Please tell me this is AI generated

The world is laughing at America.

More details on the Soyboy “EDR killer” tool offered on RAMP, it uses the Zemana Anti-Malware tool, plus it requires admin privs and a UAC bypass (lol) Basically the same how Cuba ransomware was using the Avast Anti-Rootkit tool reddit.com/r/crowdstrike/…

CSRF Checklist

12 secret websites powered by AI to finish hours of work in minutes (Don't lose them):

Which subdomain enumeration tools do you use together?

@matrixm0x Here's a helpful article: thegrayarea.tech/403-forbidden-…

Cyber security industry explained 😂

~IDOR Worked for me 100 times

@0xcharlie 😂😂😂

I see a lot of security folks complaining about twitter sms 2fa going away which is weird because I thought they all left for mastadon.

@joernchen ‘“;}

POV: You see this. What's the first thing you do?

im a hacker now

@TinaDuryea @dinodaizovi Do you even need stats for this?

How the borders have changed over time

It arrived! #ReturnToMonkeyIsland #GuybrushThreepwood #terribletoybox @grumpygamer

New container escape dropped

Are you looking for a platform to practice hacking? Here you go 🚀👇🏻 → Tryhackme → Hackthebox → Pentester Lab → tcm-security → Vulnhub → Offensive Security → Vulnmachines → Portswigger Web Security Academy → Hacker101 → PicoCTF → HackMyVm → Try2hack → Cybrary

“It’s just summer.” 🙄 twitter.com/BestForBritain…

Really well written post by @fransrosen on breaking OAuth implementations through postMessage gadgets that leak URLs. Awesome research, I loved following the journey. Totally worth the time it took you to do this. @avlidienbrunn is a great sounding board. labs.detectify.com/2022/07/06/acc…