hypomania @_hypomaniac

create explore Gibraltar Joined March 2019

Tweets

4K
Followers

192
Following

1K
Likes

15K

hypomania @_hypomaniac

3 days ago

Gratificante acordar sabendo que posso despejar, derramar, lavar ódio em pessoas que eu não gosto. Thank you God

1 0 2 44 0

Cyber Advising @cyber_advising

5 days ago

CVE-2025-53772 IIS WebDeploy RCE vulnerability in msdeployagentservice and msdeploy.axd endpoints of Microsoft Web Deploy, where unsafe deserialization of HTTP header contents allows an authenticated attacker (RCE). hawktrace.com/blog/cve-2025-…

0 32 117 7K 37

Download Image

Muqsit 𝕏 @mqst_

2 weeks ago

🎲 How an obscure PHP footgun led to RCE in Craft CMS Blog: assetnote.io/resources/rese… author: Adam Kues (@assetnote)

0 18 85 5K 42

Download Image

Døzie @freshakafrancis

2 weeks ago

The ultimate git cheatsheet from beginner → advanced → intermediate

26 288 2K 208K 3K

Download Image

VAPZ @vagonparovoz

2 weeks ago

#asciiart

0 4 14 281 0

Download Image

X1r0z @X1r0z

2 weeks ago

exp10it.io/2025/08/hackin… This is a "vulnerability" I discovered late last year: by abusing the Continuation API in GraalVM Espresso JDK, it's possible to construct a specific gadget and achieve RCE while relying solely on the JDK itself. GitHub: github.com/X1r0z/hacking-…

0 37 128 11K 61

watchTowr @watchtowrcyber

3 weeks ago

We're back - returning to the scene of the "crime" - to demonstrate 2 pre-auth RCE chains against Commvault (CVE-2025-57788, CVE-2025-57789, CVE-2025-57790, CVE-2025-57791) Enjoy, and speak soon 😉 labs.watchtowr.com/guess-who-woul…

2 41 125 19K 29

chux @chux13786509

3 weeks ago

Bug Hunters Tip 💥 Always search your targets in SwaggerHub 🔥 While digging through a target’s SwaggerHub docs, I discovered an exposed valid token, helping me to escalate my privs on the target 💪 Got more useful tips for finding secrets during recon? Drop your tips below 👇

5 36 272 13K 202

Download Image

hypomania @_hypomaniac

3 weeks ago

no face no love no face no case no face no break

0 0 0 38 0

Faisal Khatri @mfaisal_khatri

4 weeks ago

An interactive game to learn Git github.com/git-learning-g…

3 99 630 56K 708

Peter Gabaldon @PedroGabaldon

4 weeks ago

I've just added a new PR to impacket to add to secretsdump the "Shadow Snapshot Method via WMI" also for NTDS.dit. This way, NTDS.dit can be downloaded directly from disk without code execution. github.com/fortra/impacke…

0 54 152 9K 95

Alex Xu @alexxubyte

a month ago

Session, Cookie, JWT, Token, SSO, and OAuth 2.0 Explained in One Diagram

11 235 2K 189K 2K

Download Image

mufinnnnnnn @mufinnnnnnn

a month ago

I made a quick write up discussing techniques to get code execution against Apache Spark SQL: muffsec.com/blog/getting-c…. I'm looking for advice on how to enumerate all the static methods that take a string argument for each JAR on the classpath.

3 16 58 5K 31

Justin Gardner @Rhynorater

a month ago

This is crazy - one git clone --recursive and you're cooked. dgl.cx/2025/07/git-cl…

8 57 339 34K 205

Orange Cyberdefense's SensePost Team @sensepost

a month ago

Reverse engineering Microsoft’s SQLCMD.exe to implement Channel Binding support for MSSQL into Impacket’s mssqlclient.py. Storytime from Aurelien (@Defte_), including instructions for reproducing the test environment yourself. (link below)

3 118 370 23K 170

Download Image

Chris Thompson @_Mayyhem

a month ago

I'm SO hyped to finally make MSSQLHound public! It's a new BloodHound collector that adds 37 new edges and 7 new nodes for MSSQL attack paths using the new OpenGraph feature for 8.0!. Let me know what you find with it! - github.com/SpecterOps/MSS… - specterops.io/blog/2025/07/2…

6 206 586 33K 256

Download Image

Assetnote @assetnote

a month ago

The final research blog from @SLCyberSec's Christmas in July concerns three more critical vulnerabilities that our security researchers have uncovered in Adobe Experience Manager Forms: two paths to RCE and a pre-authentication XXE slcyber.io/assetnote-secu…