QuackTheCode @quackedthecode
Author of https://t.co/cjRsIHdHsE | Ethical Hacker | Lover of web apps Joined May 2024-
Tweets143
-
Followers0
-
Following175
-
Likes415
How to find the Entra ID sync server - A new NetExec module🔎 Inspired by the great Entra ID talks at #Troopers25, I looked into how to find the Entra ID sync server. Results: The description of the MSOL account, as well as the ADSyncMSA service account reference this server🚀
You're not missing bugs, you're just looking in the wrong place. Most codebases are cluttered with distractions and dead ends. Here are 5 ways to find real attack surfaces 👇 1. Narrow Down Attack Surfaces Through Code Review Instead of testing every vector blindly, focus on…
As promised, here is the Video where i create a full Application to simulate the Real target: youtube.com/watch?v=_zvFPq… I hope you guys will enjoy it, as much as i enjoyed making it 🙌
Chrome Remote Desktop can offer red teamers a subtle way to bypass restrictions—if they know how to use it. In this blog, @Oddvarmoe reveals a practical guide to repurposing Chrome Remote Desktop on red team operations. Read it now! trustedsec.com/blog/abusing-c…
Outbound Trusts, AD CS, and Tool Adaptation, Adventures in Cross-Domain Pivoting - @Dram4ck red-team-sncf.github.io/outbound-trust…
🚧 Break the Wall. Scan the Truth. 🔍 Just dropped a 20-page Nmap Firewall Evasion Guide 📄 🛠️ Learn how to fingerprint, bypass, and outsmart firewalls like a pro. No fluff just raw, practical intel.
As a lot of you are interested, instead of doing a writeup, i will be making a full Lab mimicking the actual app i found it on, and maybe make a video showcasing the Bug. Just to make things clear, this is not an insane Bug, i found it in my first month doing bug bounty, but i…
As a lot of you are interested, instead of doing a writeup, i will be making a full Lab mimicking the actual app i found it on, and maybe make a video showcasing the Bug. Just to make things clear, this is not an insane Bug, i found it in my first month doing bug bounty, but i…
⚡️The vulnerability details are now available: hub.zoomeye.ai/detail/686382b… 🚨🚨CVE-2025-47812: Wing FTP Server RCE! Hackers can exploit a nasty null byte injection flaw to run ANY code as root/SYSTEM—no login needed! ZoomEye Dork👉app="Wing FTP Server" Over 78K+ vulnerable servers…
oh no 🟥 CVE-2025-32463, CVSS: 9.3 (#Critical) #Sudo version 1.9.14 to 1.9.17 #Vulnerability allows local users to gain root access via the --chroot option due to improper handling of /etc/nsswitch.conf. #CyberSecurity #CVE #PrivilegeEscalation openwall.com/lists/oss-secu…
📌Red Team Certifications: Notes 🔗an0nud4y.notion.site/Red-Team-Certi…
Still valid in 2025. #XSS #WAF #Bypass knoxss.pro
Including nice tool release 🔥 github.com/temp43487580/E…
Including nice tool release 🔥 github.com/temp43487580/E…
#bugbountytip Quick tip and script : ✅️ If you are hunting or scanning a WordPress instance, don't forget to look for exposed plugins' or WP core REST endpoints, under /wp-json.. many plugins like payments gateways are exposing the webhooks or callback plugins in order to…
New attack vector: FileFix. A phishing trick that executes PowerShell straight from your browser no Run dialog, no pop-ups. Just a fake file path + clipboard + File Explorer. Red teamers, this one’s wild. 📽️ PoC + write-up: medium.com/@t3chfalcon/fi…
New attack vector: FileFix. A phishing trick that executes PowerShell straight from your browser no Run dialog, no pop-ups. Just a fake file path + clipboard + File Explorer. Red teamers, this one’s wild. 📽️ PoC + write-up: medium.com/@t3chfalcon/fi… https://t.co/5BG04QW71Z
updated my ADCS cheatsheet seriotonctf.github.io/ADCS-Attacks-w…
In this post, I show how to pwn the Reflection chain from @vulnlab_eu using this vulnerability seriotonctf.github.io/Pwning-Reflect…
In this post, I show how to pwn the Reflection chain from @vulnlab_eu using this vulnerability seriotonctf.github.io/Pwning-Reflect… https://t.co/SlpJsC0LkU
Just leaked 110+ plug-and-play n8n templates that multiple industries are paying me $10K+ for. Your weekend project: Pick any industry, copy-paste a workflow, start printing money. The vault includes: - Real estate lead machines (sold to 2 companies) - Automotive inventory bots…
Okta chained with Azure with auto MFA subscription for Okta and frame-buster bypass to perform Bitb ! Evilginx is really nice to setup custom phishing campaign whatever the environment is... Phishlet available here : github.com/OtterHacker/Ok…
NetExec now has native checks for LDAP signing and channel binding capabilities of the target DC, thanks to the implementation of @_zblurx 🚀 I also fixed querying LDAP with non-ASCII characters, so you can finally query groups such as "Dämonen-Administratoren"🎉
403 on /get_all_users 404 on /get_all_userz Then @Rhynorater fuzzed until a double-encoded “S” slipped past the NGINX filter. Result: 4.5M users' PII dumped. Bounty: $15K–$20K Full talk → youtu.be/PXqlHAoF2wc #BugBounty #DEFCON #BBV #AppSec #WebSecurity
Altered Security @AlteredSecurity
7K Followers 2K Following Global leader in hands-on learning for enterprise and cloud security education. Join 40000+ infosec professionals from 130+ countries
nicola @nickyjmorgs
16 Followers 272 Following
Melvin langvik @Flangvik
10K Followers 513 Following Red Team @TrustedSec , terrible creator of InfoSec content 📹Opinions are my own and not the views of my employer.
MalDev Academy @MalDevAcademy
17K Followers 5 Following Providing specialized, module-based security training and resources designed for cyber security professionals
Chocapikk 🤘🏻 @Chocapikk_
3K Followers 264 Following Pentester. Exploit Dev. CVEs for fun 🇫🇷 Security Researcher & Software Developer @leak_ix ☁️ (soon) Views are my own 🧠
𝐎𝐋𝐋𝐈𝐄 ... @OllieWride
10K Followers 469 Following NEW ALBUM • “The Pressure Point”• OUT NOW • https://t.co/AhiEWTxmhZ
7h3h4ckv157 @7h3h4ckv157
51K Followers 117 Following Hacker (He/Him) | Hall of Fame: Google, Apple, NASA, 𝕏 (FKA Twitter) | Speaker: BlackHat MEA x1 | CVE ×4 | HTB Rank: Guru | P1 warrior - Bugcrowd | CS Engineer
spaceraccoon | Eugene... @spaceraccoonsec
25K Followers 302 Following Here to learn! Infosec@Open Government Products | White Hat && SecOps
jkr @ATeamJKR
3K Followers 212 Following #InfoSec hobbyist. Playing @hackthebox_eu with TheATeam. Part-time #CTF @AIgenerated1 & @0rganizers.
doomerhunter (Victor ... @DoomerOutrun
3K Followers 1K Following Exterminator H1-6102 Salesforce | Most Impactful Team H1-0131 AWS x Amazon | Best collab H1-407 - Epic Games | Bootstrapped a 7 figs biz | Victor Poucheret
Marlin🐧 @marlin_dim
929 Followers 443 Following Linux Nerd | Linux system administrator |Cybersecurity enthusiast |Open Source | Fitness |
solst/ICE @IceSolst
21K Followers 2K Following Pentester turned seceng turned meeting canceller - https://t.co/5hHG2R5lRS (-13$ ARR)
Vulnlab @vulnlab_eu
6K Followers 1K Following Labs & Training by @xct_de | https://t.co/3vRSpRWwJb | You are welcome to join the community @ https://t.co/8tvZ0UZ5ZL
James Kettle @albinowax
79K Followers 92 Following Director of Research at PortSwigger aka Burp Suite. Find my research, tools & contact details at https://t.co/vP6UbGmvl3
ghostlulz @ghostlulz1337
14K Followers 1K Following Founder /CEO @StealthNetAI , Author - Bug Bounty Playbook. @DakotaState Alum , Founder/Former CTO RedSentry , Ex @bishopfox. #bugbounty #infosec #redteam
Angie Tsuboi @AngelinaTsuboi
4K Followers 1K Following programmer with a passion for embedded systems, security, and AI // EE @ Caltech & founder @StellaryxLabs
thaddeus e. grugq @thegrugq
128K Followers 416 Following Hacker :: PhD researcher @warstudies @KingsCollegeLon :: [email protected] :: PGP https://t.co/dYipV8y3bo
Jake Williams @MalwareJake
142K Followers 2K Following Breaker of software | VP R&D @hunterstrategy | CTI/DFIR | @ians_security faculty | Bookings: jake at malwarejake dot com | GSE #150 | He/him
Ryan Naraine @ryanaraine
28K Followers 836 Following 🎧 Three Buddy Problem: https://t.co/ZGEyqy2h7g. ✍🏼 Writing: @securityweek 🗣️ Conference: @labscon_io
Eyal Sela @eyalsela
2K Followers 362 Following
Threatpost @threatpost
212K Followers 6K Following Threatpost is the first stop for fast-breaking security news, conversations and analysis from around the world.
Quequero @quequero
6K Followers 289 Following InfoSec, AI, ML, Reverse Engineering / CEO @ ReaQta / XDR Strategy @IBM
Germán Fernández @1ZRR4H
35K Followers 461 Following 🏴☠️ OFFENSIVE-INTEL 🏴☠️ Cyber Threat Intelligence by Hackers | Security Researcher en https://t.co/rDrSxZASB3 | @CuratedIntel Member | 🥷🧠🇨🇱
Andrea P @decoder_it
8K Followers 290 Following Security Consultant @semperistech . Independent Security Researcher. Cyclist & Scubadiver. MSRC MVR 2022. "So di non sapere"
Jakub Kroustek @JakubKroustek
7K Followers 531 Following ɿɘɘniǫnɘ ɘƨɿɘvɘЯ / Malware hexorcist / Researcher / Malware Research Director at Gen (Avast). My tweets, my opinions.
alternat0r @alternat0r
1K Followers 1K Following -=| Kamil Alta |=- 😎 malware.analyst | re | dev | dfir | anti-malware 💻DISCLMR: Another X account with anime things have no associate \w me.
WithSecure Labs @FSecureLabs
19K Followers 145 Following With great research comes great responsibility.
Nick VanGilder @nickvangilder
2K Followers 3K Following Red Team Director | Mission Focused Leader | Combat Veteran | Offensive Security Program Builder | Mentor and Coach
Nikhil Mittal @nikhil_mitt
20K Followers 439 Following Hacker, Infosec Researcher, Military Affairs & History, PowerShell, AD and Azure pwner, Creator of Nishang and others :) Founder @alteredsecurity
Thomas Roccia 🤘 @fr0gger_
31K Followers 2K Following AI Security x Threat Intel · Sr. Threat Researcher @Microsoft · Creator of #Unprotect & #NOVA · Malware Warlock · Python 🧡 · Prev @McAfee_Labs · Views mine 😈
Kevin Perlow @KevinPerlow
1K Followers 20 Following RE and CTI. Feel free to take a gander at my past presentations: https://t.co/iWUyecnxC6
Clément Notin @cnotin
6K Followers 974 Following 😈 Security research (#ActiveDirectory #EntraID) & pentest 🎉 #CTF @tipi_hack 👨💼 Works @TenableSecurity, opinions my own 🪂 https://t.co/4HRwJQ6PUm
Rich Warren @buffaloverflow
11K Followers 664 Following Red Team & Offensive Security Research @AmberWolfSec // @buffaloverflow.rw.md on bsky
Nasreddine Benchercha... @nas_bench
11K Followers 1K Following Detection @Splunk & @cisco | previously @nextronsystems | @sigma_hq & @magicswordio maintainer | Eternal Learner
🥝🏳️🌈 Be... @gentilkiwi
62K Followers 286 Following A kiwi coding mimikatz & kekeo github: https://t.co/eS3LVgU6i0 Head of security services @banquedefrance Tweets are my own and not the views of my employerTrends for United States
You might like
