Moltivie retweeted
Bypassing SMB signing enforcement🔥
@aas_s3curity found a re-authentication bug in SMB. This allows you to simply relay an authentication to a host (e.g., a DC) even if signing is enforced! His NetExec module to test if a host is still vulnerable is now merged into main🚀
1/3🧵
ALT The SMB re-authentication bug and the corresponding NetExec module for enumerating the vulnerability
Moltivie retweeted
Unthemidator - a fully autonomous Themida / Code Virtualizer / Win License unpacker. Supports Themida/CV/WL v3.0 - v3.2.6.0 (latest), and CV v4.0. Unthemidator unpacks binaries, recovers imports, finds original entry point and unpacks compressed virtual machines too:
github.com/x86rc/unthemidato…
Moltivie retweeted
Two new logical flaws in Kerberos just dropped at Black Hat. Low-privileged user to full domain takeover, including domain admins.
If you're doing Active Directory pentesting, Kerberos attacks, red teaming, identity security, or detection engineering, read this.
KerberLoss (CVE-2026-25177) and ResetNightmare (CVE-2026-27912). Both are logical bugs, not memory corruption. Described as surprisingly easy to exploit.
semperis.com/blog/identity-c…
#Infosec #RedTeam #DetectionEngineering
Moltivie retweeted
‼️🚨 BREAKING: Wiz got access to millions of GitHub repositories across users and organizations using one git push.
CVE-2026-3854: git push -o options injected into an internal header split by semicolons, parsed last-write-wins.
GitHub patched production in 6 hours.
Moltivie retweeted
🚨🚨CVE-2025-66489 (CVSS 9.9): Cal.com Authentication Bypass
If an attacker supplies any TOTP code during login, the password check is completely skipped thanks to broken conditional logic.
Search by vul.cve Filter👉vul.cve="CVE-2025-66489"
ZoomEye Dork👉app="Cal.com Scheduling Platform"
983 exposed instances.
ZoomEye Link: zoomeye.ai/searchResult?q=YX…
Refer:
1. github.com/calcom/cal.com/se…
2. hub.zoomeye.ai/detail/693646…
#ZoomEye #cybersecurity #infosec #OSINT
Moltivie retweeted
If You Ever See Language Parameter, Then Never Forget to Test Expression-Language Injection Style Payload.
✅POC Payload:
1. Change the Method GET to POST
2. Language={${system("cat+/etc/passwd")}}
For More Join my BugBounty Telegram Channel: t.me/ShellSec
Moltivie retweeted
If understanding AD is still an issue, read this:
zer1t0.gitlab.io/posts/attac…
#ActiveDirectory
Moltivie retweeted
#APT28
Espionage Tool Provides Backdoor Access to Microsoft Outlook
kroll.com/en/publications/cy…
Moltivie retweeted
oh no
🟥 CVE-2025-32463, CVSS: 9.3 (#Critical)
#Sudo version 1.9.14 to 1.9.17
#Vulnerability allows local users to gain root access via the --chroot option due to improper handling of /etc/nsswitch.conf.
#CyberSecurity #CVE #PrivilegeEscalation
openwall.com/lists/oss-secur…
Moltivie retweeted
Zod 4 is now stable and production-ready!
💎 7x faster object parsing
💎 100x fewer tsc instantiations
💎 localization in 34 languages
💎 recursive z.object()!
💎 metadata
💎 z.toJSONSchema()
💎 z.templateLiteral()
💎 z.int32(), z.float32(), etc
💎 z.file()
💎 and a new logo :)
Moltivie retweeted
What if you could use React hooks inline?
🚀 Introducing RenderHooks
☑︎ maps, conditionals, nested JSX
☑︎ doesn't break Rules of Hooks
☑︎ supports built-in & custom hooks
☑︎ outer-state access
☑︎ zero boilerplate
☑︎ just <$>
npm i render-hooks
GitHub & Demos 🧵👇
Moltivie retweeted
Je vous propose de visiter la Normandie !!!
Voici la Belle Fieffe dans le bocage Normand :
airbnb.com/h/labellefieffe
Merci pour le RT
Moltivie retweeted
Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE.
It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon.
In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc.
@HakaiOffsec @quimerax_asm
Moltivie retweeted
🚀 To celebrate the upcoming Azure Red Team Expert cert, we're launching the first Cloud PEASS: Azure PEASS!
🔎 It gets Azure/Entra tokens, finds all your permissions, highlights sensitive ones HackTricksAI and tells you how to privesc!
👉 github.com/carlospolop/cloud…
#hacktricks
Moltivie retweeted
We (+@sagitz_ @ronenshh @hillai) found a series of unauthenticated RCEs in core @KubernetesIO project "Ingress-NGINX".
The impact?
From zero permissions ➡️ to complete cluster takeover 🤯
This is the story of #IngressNightmare 🧵⬇️
Moltivie retweeted
📅 Registration for #picoCTF2025 is open!.
🌟 Competition Dates:
⏰ Start: 12:00pm ET, March 7
⏰ End: 3:00pm ET, March 17
📝 Write-ups due on March 17, 2025
Ready to test your skills and have fun? 💻 Let’s go!
🌐 Practice daily at picoCTF.org