Woot woot! Completed the Attacking and Defending Active Directory Lab from #AlteredSecurity! alteredsecurity.com/adlab #ADLab #EnterpriseSecurity via @alteredsecurity cc @nikhil_mitt
Mohammed retweeted
FINALLY, THE VIDEO IS LIVE! 🔥
If this video gets 1K likes and similar engagement to the recent one, I’ll drop the next video showing how to create custom Claude Skills using:
• Medium articles
• H1 disclosed bug bounty reports
• My own personal bug-hunting methods
• Open-source bug-hunting skills
I’ll also add the prompts used in this video and the upcoming video to my Medium articles, along with a more detailed guide.
youtu.be/Vr-NEWVLN9Y
Mohammed retweeted
🔴URGENT - Public PoC released for #wp2shell Chaining two Vulnerabilities (CVE-2026-63030 + CVE-2026-60137), Patch now!!
🚨 New wp2shell RCE Vulnerability Hits Millions of WordPress Sites, Emergency Patch Released
Source: cybersecuritynews.com/wp2she…
A critical pre-authentication remote code execution (RCE) vulnerability dubbed "wp2shell" has been discovered in WordPress Core, putting an estimated 500 million+ websites at risk of full takeover by unauthenticated attackers.
The flaw, which stems from a REST API batch-route confusion issue that leads to SQL injection and, ultimately, remote code execution.
What makes this bug especially dangerous is that it requires no preconditions and can be exploited by a completely anonymous, unauthenticated user against a stock WordPress installation with zero plugins installed.
#cybersecuritynews
Mohammed retweeted
Anthropic just released two AI models. Same technology. Different rules.
The powerful one: locked for governments and approved partners.
The public one: ask for offensive security help.
It quietly routes you to a weaker model instead.
The attacker targeting your hospital has no such limits.
The security industry made this exact mistake in 2000.
We wrote about why that failed — and what actually worked:
nuasecurity.com/resource/Fab…
عمي 👇🏻
🚨 Security researcher, Nightmare Eclipse, has released another BitLocker bypass vulnerability called GreatXML.
GitHub: github.com/MSNightmare/Great…
Mohammed retweeted
Found a vulnerability and got a CVE assigned (CVE-2026-48747)
The flaw is a Signature Algorithm Downgrade in the mailomat-mailer component, allowing an attacker to achieve complete Signature Forgery.
github.com/symfony/symfony/s…
#CVE #Symfony #AppSec #BugBounty
Mohammed retweeted
Analysis of RedSun: Local Privilege Escalation via Defender Remediation Abuse
coresecurity.com/blog/analys…
Mohammed retweeted
Delete highlight cover IDOR bug in Instagram
$3000 Bug Bounty PoC
Write-up:
adragos.ro/idor-bug-instagra…
Mohammed retweeted
Here's the exploit in action, using the RedSun PoC
(note this is demostrated in virtual machines and this is purely for educational purposes, please don't repilcate the exploit on any systems you are not permited to do so)
Windows defender has been compromised.
right now there is a public unpatched exploit that gives any app on your windows PC full system admin access. no password. no popup. nothing
your antivirus doesnt stop it. your antivirus IS the exploit. windows defender is the attack vector
ransomware gangs can use this to encrypt your entire machine and steal every saved password, browser session, and discord token you have. fully patched windows 11. real time protection on
thread
Mohammed retweeted
the Red Sun vulnerability is genuinely one of the funniest bugs i've seen in a while
Windows Defender finds a malicious file with a cloud tag and instead of quarantining or deleting it...
it helpfully rewrites the file back to its original location
the antivirus. protecting you. by restoring the malware.
the PoC abuses this to overwrite system files and escalate to admin privileges
the core idea is brilliant in the most embarrassing way possible
sometimes the best vulnerabilities aren't clever exploits
they're just Microsoft being Microsoft
Mohammed retweeted
Windows defender has been compromised.
right now there is a public unpatched exploit that gives any app on your windows PC full system admin access. no password. no popup. nothing
your antivirus doesnt stop it. your antivirus IS the exploit. windows defender is the attack vector
ransomware gangs can use this to encrypt your entire machine and steal every saved password, browser session, and discord token you have. fully patched windows 11. real time protection on
thread
Mohammed retweeted
abusing the hardlink blind spot. turning path traversal into arbitrary file overwrite in k8s operators.
xpw6.github.io/research/esca…
