doomed theory @doomedtheory

I am a C) PTE, ACMT, ACTC, ACSP, CCNA. besides info sec/networking, I enjoy Tae Kwon Do, horse back riding, and acting. most cents before I was even 18. bloggingboy.com USA Joined August 2009

Tweets

7K
Followers

143
Following

610
Likes

3K

Garrett @unsigned_sh0rt

2 days ago

knew win10 had the dsquery.dll laying around but never knew what to do with it "rundll32.exe dsquery.dll OpenQueryWindow" will pop open a console for you and you can do some light LDAP recon you can also open with with win + ctrl + f probably useful for VDI/Citrix type tests

6 72 351 23K 240

Download Image

Guy Leech @guyrleech

3 days ago

Did you know that Entra ID SIDs start S-1-12-1 whereas (legacy?) AD domain and local normal accounts start S-1-5-21 ?

16 60 539 32K 337

Download Image

Ryan Hurst @rmhrisk

3 days ago

This morning, a serious WebPKI incident surfaced: a tiny CA misissued certificates for 1.1.1.1 - Cloudflare’s DNS service. With BGP hijacks happening regularly, those certs could enable full man-in-the-middle attacks. The bigger issue? Microsoft’s root program still trusts this…

9 33 138 23K 47

Lμke Swi☨zer @LukeSwitzer_

3 days ago

Exposed LLM server queries for @shodanhq port:11434 "Ollama" port:8000 "vLLM" port:8000 "llama.cpp" port:8080 "llama.cpp" port:1234 "LM Studio" port:4891 "GPT4All" port:8000 "LangChain" blogs.cisco.com/security/detec…

4 99 458 32K 379

hashcat @hashcat

2 days ago

First look at the dynamic hash-mode support in upcoming hashcat, powered by the new Rust Bridge. No coding needed: write your pattern on the command line. Don't want to wait for Release? Try it now via GitHub master or hashcat.net/beta. Feedback welcome on our Discord

0 48 147 13K 48

Download Image

Chris Wysopal @WeldPond

4 days ago

While conducting a routine cybersecurity review, the DHS CIO discovered significant security vulnerabilities that gave a threat actor access to FEMA’s network. FEMA CIO, CISO, and 22 other FEMA IT employees terminated. Failures included: an agency-wide lack of multi-factor…

14 16 64 8K 18

vxdb @vxdb

4 days ago

Cloudflare just blocked the largest DDOS attack of all time at 11.5 Tbps. The attack was a UDP flood that came from Google Cloud.

103 544 10K 552K 1K

Today In Infosec @todayininfosec

5 days ago

1997: Nmap was first released as a simple port scanner via an article in issue 51 of Phrack magazine which included the source code. That's right - 28 years of Nmap!

15 325 1K 76K 212

Download Image

McCaulay @_mccaulay

a week ago

Bypassing TLS Verification on Nintendo Switch by Yannik Marchand reversing.live/sslbypass.html

3 93 419 35K 180

Download Image

ksa 🏴‍☠️ @kosa12m

a week ago

this is what starlink router returns when it you connect to it via ssh

126 672 11K 6.2M 2K

Download Image

vx-underground @vxunderground

a week ago

Lots of frustration in the malware analysis and reverse engineering community. It's been discovered a DEFCON talk, presentation, and the code which coincided with it, was AI slop. The talk itself had hallucinated terminology which (apparently) no one at DEFCON noticed. Bad.

78 183 3K 152K 459

Download Image

Techlore @TechloreInc

2 weeks ago

🚨 Google is tightening the screws on Android freedom! Starting next year, they're blocking sideloading of "unverified" apps which requires all developers to identify themselves to Google. Goal is global 2027 rollout. This is a blow to Android's open ecosystem and user choice 🧵

259 993 6K 285K 921

Download Image

taoki @justalexoki

2 weeks ago

this is so stupid. what are they doing

128 58 2K 88K 78

Download Image

chux @chux13786509

2 weeks ago

Bug Hunters 🔥 Ever stumbled upon this weird message? "WebSockets request was expected" If you did, congratz! You just found a NodeJS server in debug mode, ready to quickly move on to RCE via simple DevTools 💥💥💥 Search for this message in Censys/FOFA and your automation 🤑

6 102 552 33K 574

Download Image

Clint Gibler @clintgibler

2 weeks ago

🛠️ Two JAMF Security Tools 𝐉𝐚𝐦𝐟𝐇𝐨𝐮𝐧𝐝 - Ingest JAMF attack paths into BloodHound 𝐄𝐯𝐞 - A JAMF exploitation toolkit 1️⃣ JamfHound by @SpecterOps A Python tool that collects and identifies attack paths in Jamf Pro tenants by analyzing object permissions and outputting…

1 38 128 8K 75

Download Image

wh1t3h4ts @wh1t3h4ts

2 weeks ago

Lol

8 53 562 19K 40

Download Image

H4x0r.DZ @h4x0r_dz

2 weeks ago

Users who have Python installed on their PCs and use WhatsApp Desktop may be exposed to a security risk. A specially crafted .pyz (Python archive) file can be used to execute malicious code upon a single click, potentially compromising the system. A similar vulnerability was…

22 160 769 59K 382

Download Video

0xor0ne @0xor0ne

2 weeks ago

Remote code execution on the Synology TC500 smart camera using a format string vulnerability blog.infosectcbr.com.au/2025/08/01/exp… Credits @infosectcbr #infosec #embedded

3 51 244 13K 93

Download Image

hashcat @hashcat

3 weeks ago

hashcat v7.1.0 released! This update includes important bug fixes, new features, and support for new hash-modes, including KeePass with Argon2. Read the full write-up here: hashcat.net/forum/thread-1…

5 48 160 19K 40

Download Image

yeet @Awk20000

3 weeks ago

The UK Office of Communications has allegedly issued a notice to 4chan with an intention to impose a 20,000 pound fine plus daily penalties 4chan’s lawyers dropped a response